EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 911:

  Which of the following tool would be considered as Signature Integrity Verifier (SIV)?

  A. Nmap
  B. SNORT
  C. VirusSCAN
  D. Tripwire
  D. Tripwire

• Question 912:

  A penetration tester is hired to do a risk assessment of a company's DMZ. The rules of engagement states that the penetration test be done from an external IP address with no prior knowledge of the internal IT systems. What kind of test is being performed?

  A. white box
  B. grey box
  C. red box
  D. black box
  D. black box

• Question 913:

  What is the most common method to exploit the "Bash Bug" or ShellShock" vulnerability?

  A. SSH
  B. SYN Flood
  C. Manipulate format strings in text fields
  D. Through Web servers utilizing CGI (CommonGateway Interface) to send a malformed environment variable to a vulnerable Web server
  D. Through Web servers utilizing CGI (CommonGateway Interface) to send a malformed environment variable to a vulnerable Web server

• Question 914:

  Here is the ASCII Sheet.

  

  You want to guess the DBO username juggyboy (8 characters) using Blind SQL Injection technique. What is the correct syntax?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 915:

  Which of the following tools performs comprehensive tests against web servers, including dangerous files and CGI's?

  A. Snort
  B. Dsniff
  C. Nikto
  D. John the Ripper
  C. Nikto

• Question 916:

  MX record priority increases as the number increases. (True/False.

  A. True
  B. False
  B. False

• Question 917:

  Which of the following levels of algorithms does Public Key Infrastructure (PKI) use?

  A. RSA 1024 bit strength
  B. AES 1024 bit strength
  C. RSA 512 bit strength D. AES 512 bit strength
  A. RSA 1024 bit strength

• Question 918:

  If the final set of security controls does not eliminate all risk in a system, what could be done next?

  A. Continue to apply controls until there is zero risk.
  B. Ignore any remaining risk.
  C. If the residual risk is low enough,it can be accepted.
  D. Remove current controls since they are not completely effective.
  C. If the residual risk is low enough,it can be accepted.

• Question 919:

  A simple compiler technique used by programmers is to add a terminator 'canary word' containing four letters NULL (0x00), CR (0x0d), LF (0x0a) and EOF (0xff) so that most string operations are terminated. If the canary word has been altered when the function returns, and the program responds by emitting an intruder alert into syslog, and then halts what does it indicate?

  A. A buffer overflow attack has been attempted
  B. A buffer overflow attack has already occurred
  C. A firewall has been breached and this is logged
  D. An intrusion detection system has been triggered
  E. The system has crashed
  A. A buffer overflow attack has been attempted

• Question 920:

  What type of port scan is shown below?

  

  A. Idle Scan
  B. Windows Scan
  C. XMAS Scan
  D. SYN Stealth Scan
  C. XMAS Scan