EC-COUNCIL EC-COUNCIL Certifications 312-50V9 Questions & Answers

• Question 591:

  Backing up data is a security must. However, it also have certain level of risks when mishandled. Which of the following is the greatest threat posed by backups?

  A. A backup is the source of Malware or illicit information

  B. A backup is incomplete because no verification was performed

  C. A backup is unavailable during disaster recovery

  D. An unencrypted backup can be misplaced or stolen

  Correct Answer: D Section: (none)

• Question 592:

  What kind of risk will remain even if all theoretically possible safety measures would be applied?

  A. Residual risk

  B. Inherent risk

  C. Impact risk

  D. Deferred risk

  Correct Answer: A Section: (none)

• Question 593:

  While doing a Black box pen test via the TCP port (80), you noticed that the traffic gets blocked when you tried to pass IRC traffic from a web enabled host. However, you also noticed that outbound HTTP traffic is being allowed. What type of firewall is being utilized for the outbound traffic?

  A. Stateful

  B. Application

  C. Circuit

  D. Packet Filtering

  Correct Answer: B Section: (none)

• Question 594:

  Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?

  A. NET FILE

  B. NET USE

  C. NET CONFIG

  D. NET VIEW

  Correct Answer: B Section: (none)

• Question 595:

  What is the approximate cost of replacement and recovery operation per year of a hard drive that has a value of $300 given that the technician who charges $10/hr would need 10 hours to restore OS and Software and needs further 4 hours to restore the database from the last backup to the new hard disk? Calculate the SLE, ARO, and ALE. Assume the EF = 1 (100%).

  A. $440

  B. $100

  C. $1320

  D. $146

  Correct Answer: D Section: (none)

• Question 596:

  Knowing the nature of backup tapes, which of the following is the MOST RECOMMENDED way of storing backup tapes?

  A. In a cool dry environment

  B. Inside the data center for faster retrieval in a fireproof safe

  C. In a climate controlled facility offsite

  D. On a different floor in the same building

  Correct Answer: C Section: (none)

• Question 597:

  Which of the following tools would MOST LIKELY be used to perform security audit on various of forms of network systems?

  A. Intrusion Detection System

  B. Vulnerability scanner

  C. Port scanner

  D. Protocol analyzer

  Correct Answer: B Section: (none)

• Question 598:

  Security and privacy of/on information systems are two entities that requires lawful regulations. Which of the following regulations defines security and privacy controls for Federal information systems and organizations?

  A. NIST SP 800-53

  B. PCI-DSS

  C. EU Safe Harbor

  D. HIPAA

  Correct Answer: A Section: (none)

• Question 599:

  A big company, who wanted to test their security infrastructure, wants to hire elite pen testers like you. During the interview, they asked you to show sample reports from previous penetration tests. What should you do?

  A. Share reports, after NDA is signed

  B. Share full reports, not redacted

  C. Decline but, provide references

  D. Share full reports with redactions

  Correct Answer: C Section: (none)

• Question 600:

  You are about to be hired by a well known Bank to perform penetration tests. Which of the following documents describes the specifics of the testing, the associated violations, and essentially protects both the bank's interest and your liabilities as a tester?

  A. Service Level Agreement

  B. Non-Disclosure Agreement

  C. Terms of Engagement

  D. Project Scope

  Correct Answer: C Section: (none)