EC-COUNCIL 312-50V9 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V9 Online Questions & Answers

• Question 1:

  The "Gray box testing" methodology enforces what kind of restriction?

  A. Only the external operation of a system is accessible to the tester.
  B. Only the internal operation of a system is known to the tester.
  C. The internal operation of a system is completely known to the tester.
  D. The internal operation of a system is only partly accessible to the tester.
  D. The internal operation of a system is only partly accessible to the tester.

• Question 2:

  You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line. Which command would you use?

  A. c:\services.msc
  B. c:\ncpa.cp
  C. c:\compmgmt.msc
  D. c:\gpedit
  C. c:\compmgmt.msc

• Question 3:

  The chance of a hard drive failure is once every three years. The cost to buy a new hard drive is $300. It will require 10 hours to restore the OS and software to the new hard disk. It will require a further 4 hours to restore the database from the last backup to the new hard disk. The recovery person earns $10/hour. Calculate theSLE, ARO, and ALE. Assume the EF = 1 (100%).

  What is the closest approximate cost of this replacement and recovery operation per year?

  A. $100
  B. $146
  C. 440
  D. 1320
  B. $146

• Question 4:

  What term describes the amount of risk that remains after the vulnerabilities are classified and the countermeasures have been deployed?

  A. Inherent Risk
  B. ResidualRisk
  C. Deferred Risk
  D. Impact Risk
  B. ResidualRisk

• Question 5:

  Which of the following is the successor of SSL?

  A. RSA
  B. GRE
  C. TLS
  D. IPSec
  C. TLS

• Question 6:

  During a recent security assessment, you discover the organization has one Domain Name Server (DNS) in a Demilitarized Zone (DMZ) and a second DNS server on the internal Network. What is this type of DNS configuration commonly called?

  A. DNS Scheme
  B. DynDNS
  C. Split DNS
  D. DNSSEC
  C. Split DNS

• Question 7:

  During a blackbox pen test you attempt to pass IRC traffic over post 80/TCP from a compromised web enabled host. The traffic gets blocked; however outbound HTTP traffic is unimpeded. What type of firewall is inspecting outbound traffic?

  A. Circuit
  B. Packet Filtering
  C. Application
  D. Stateful
  C. Application

• Question 8:

  The configuration allows a wired or wireless network interface controller to pass all trafice it receives to thecentral processing unit (CPU), rather than passing only the frames that the controller is intended to receive. Which of the following is being described?

  A. WEM
  B. Multi-cast mode
  C. Promiscuous mode
  D. Port forwarding
  B. Multi-cast mode

• Question 9:

  Which of these options is the most secure procedure for strong backup tapes?

  A. In a climate controlled facility offsite
  B. Inside the data center for faster retrieval in afireproof safe
  C. In a cool dry environment
  D. On a different floor in the same building
  A. In a climate controlled facility offsite

• Question 10:

  When you return to your desk after a lunch break, you notice a strange email in your inbox. The senders is someone you did business with recently but the subject line has strange characters in it. What should you do?

  A. Forward the message to your company's security response team and permanently delete the message from your computer.
  B. Delete the email and pretend nothing happened.
  C. Forward the message to your supervisor andask for her opinion on how to handle the situation.
  D. Reply to the sender and ask them for more information about the message contents.
  A. Forward the message to your company's security response team and permanently delete the message from your computer.