EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

• Question 371:

  Your company's network just finished going through a SAS 70 audit. This audit reported that overall, your network is secure, but there are some areas that needs improvement. The major area was SNMP security. The audit company recommended turning off SNMP, but that is not an option since you have so many remote nodes to keep track of. What step could you take to help secure SNMP on your network?

  A. Block access to TCP port 171

  B. Change the default community string names

  C. Block all internal MAC address from using SNMP

  D. Block access to UDP port 171

  Correct Answer: B

• Question 372:

  You are trying to locate Microsoft Outlook Web Access Default Portal using Google search on the Internet. What search string will you use to locate them?

  A. allinurl:"exchange/logon.asp"

  B. intitle:"exchange server"

  C. outlook:"search"

  D. locate:"logon page"

  Correct Answer: A

• Question 373:

  What operating system would respond to the following command? C:\> nmap -sW 10.10.145.65

  A. Windows XP

  B. Mac OS X

  C. FreeBSD

  D. Windows 95

  Correct Answer: C

• Question 374:

  Bill is the accounting manager for Grummon and Sons LLC in Chicago. On a regular basis, he needs to send PDF documents containing sensitive information through E-mail to his customers. Bill protects the PDF documents with a password and sends them to their intended recipients. Why PDF passwords do not offer maximum protection?

  A. PDF passwords are converted to clear text when sent through E-mail

  B. PDF passwords are not considered safe by Sarbanes-Oxley

  C. When sent through E-mail, PDF passwords are stripped from the document completely

  D. PDF passwords can easily be cracked by software brute force tools

  Correct Answer: D

• Question 375:

  Which forensic investigating concept trails the whole incident from how the attack began to how the victim was affected?

  A. Point-to-point

  B. End-to-end

  C. Thorough

  D. Complete event analysis

  Correct Answer: B

• Question 376:

  Which Intrusion Detection System (IDS) usually produces the most false alarms due to the unpredictable behaviors of users and networks?

  A. network-based IDS systems (NIDS)

  B. host-based IDS systems (HIDS)

  C. anomaly detection

  D. signature recognition

  Correct Answer: BC

• Question 377:

  As a security analyst you setup a false survey website that will reQuire users to create a username and a

  strong password. You send the link to all the employees of the company.

  What information will you be able to gather?

  A. The IP address of the employees computers

  B. Bank account numbers and the corresponding routing numbers

  C. The employees network usernames and passwords

  D. The MAC address of theemployees?computers

  Correct Answer: C

• Question 378:

  What does the superblock in Linux define?

  A. file synames

  B. disk geometr

  C. location of the first inode

  D. available space

  Correct Answer: C

• Question 379:

  What is the following command trying to accomplish? C:\> nmap -sU -p445 192.168.0.0/24

  A. Verify that TCP port 445 is open for the 192.168.0.0 network

  B. Verify that UDP port 445 is open for the 192.168.0.0 network

  C. Verify that UDP port 445 is closed for the 192.168.0.0 network

  D. Verify that NETBIOS is running for the 192.168.0.0 network

  Correct Answer: B

• Question 380:

  Diskcopy is:

  A. a utility by AccessData

  B. a standard MS-DOS command

  C. Digital Intelligence utility

  D. dd copying tool

  Correct Answer: B