EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 971:

  When you are getting informationabout a web server, it is very important to know the HTTP Methods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two critical methods (PUT and DELETE). PUT can upload a file to the server and DELETE can delete a file from the server. You can detect all these methods (GET, POST, HEAD, PUT, DELETE, TRACE) using NMAP script engine.

  What nmap script will help you with this task?

  A. http enum

  B. http-git

  C. http-headers

  D. http-methods

  Correct Answer: B

• Question 972:

  A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing inconcluding the Operating System (OS) version installed. Considering the NMAP result below, which of the follow is likely to be installed on the target machine by the OS? Starting NMAP

  5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80 /tcp open http 139/tcp open netbios-ssn 515/tcp open 631/tec open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:8

  A. The host is likely a printer.

  B. The host is likely a router.

  C. The host is likely a Linux machine.

  D. The host is likely a Windows machine.

  Correct Answer: A

• Question 973:

  You are a Network Security Officer. You have two machines. The first machine (192.168.0.99) has snort installed, and the second machine (192.168.0.150) has kiwi syslog installed. You perform a syn scan in your network, and you notice that kiwi syslog is not receiving the alert message from snort. You decide to run wireshark in the snort machine to check if the messages are going to the kiwi syslog machine.

  What wireshark filter will show the connections from the snort machineto kiwi syslog machine?

  A. tcp.dstport==514 andand ip.dst==192.168.0.150

  B. tcp.dstport==514 andandip.dst==192.168.0.99

  C. tcp.srcport==514 andand ip.src==192.168.0.99

  D. tcp.srcport==514 andand ip.src==192.168.150

  Correct Answer: A

• Question 974:

  Which of the following is a low-tech way of gaining unauthorized access to systems?

  A. Sniffing

  B. Social engineering

  C. Scanning

  D. Eavesdropping

  Correct Answer: B

• Question 975:

  Which of these options is the most secure procedure for strong backup tapes?

  A. In a climate controlled facility offsite

  B. Inside the data center for faster retrieval in afireproof safe

  C. In a cool dry environment

  D. On a different floor in the same building

  Correct Answer: A

• Question 976:

  A company's security states that all web browsers must automatically delete their HTTP browser cookies upon terminating. What sort of security breach is this policy attempting to mitigate?

  A. Attempts by attackers to determine the user's Web browser usage patterns, including when sites were visited and for how long.

  B. Attempts by attackers to access passwords stored on the user's computer without the user's knowledge.

  C. Attempts by attackers to access Web sites that trust the Web browser user by stealing the user's authentication credentials.

  D. Attempts by attacks to access the user and password information stores in the company's SQL database.

  Correct Answer: C

• Question 977:

  You've just been hired to perform a pentest on an organization that has been subjected to a large-scale attack. The CIO is concerned with mitigating threats and vulnerabilities to totally eliminate risk.

  What is one of the first thing you should to when the job?

  A. Start the wireshark application to start sniffing network traffic.

  B. Establish attribution to suspected attackers.

  C. Explain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to acceptable levels.

  D. Interview all employees in the company to rule out possible insider threats.

  Correct Answer: C

• Question 978:

  Which of the followingis the least-likely physical characteristic to be used in biometric control that supports a large company?

  A. Iris patterns

  B. Voice

  C. Fingerprints

  D. Height and Weight

  Correct Answer: D

• Question 979:

  Which of the following is the BEST way to defend against network sniffing?

  A. Using encryption protocols to secure network communications

  B. Restrict Physical Access to Server Rooms hosting Critical Servers

  C. Use Static IP Address

  D. Register all machines MAC Address in a centralized Database

  Correct Answer: A

• Question 980:

  In Risk Management, how is the term "likelihood" related to the concept of "threat?"

  A. Likelihood is the probability that a vulnerability is a threat-source.

  B. Likelihood is a possible threat-source that may exploit a vulnerability.

  C. Likelihood is the likely source of a threat that could exploit a vulnerability.

  D. Likelihood is the probability that a threat-source will exploit a vulnerability.

  Correct Answer: D