Which of the following options represents a conceptual characteristic of an anomaly-based IDS over a signature-based IDS?
Show answer and explanation
Correct answer: B
312-50V10 Real Exam Questions
EC-Council Certified Ethical Hacker (C|EH v10)
747 questions available · Page 1 of 75
Updated Exam DumpsVerified AnswersPass Guarantee
SOAP services use which technology to format information?
Show answer and explanation
Correct answer: C
What would you enter, if you wanted to perform a stealth scan using Nmap?
Show answer and explanation
Correct answer: B
It is a regulation that has a set of guidelines, which should be adhered to by anyone who handles any electronic medical data. These guidelines stipulate that all medical practices must ensure that all necessary measures are in place while saving, accessing, and sharing any electronic medical data to keep patient data secure.
Which of the following regulations best matches the description?
Show answer and explanation
Correct answer: A
Explanation
The HIPAA Privacy Rule regulates the use and disclosure of Protected Health Information (PHI) held by "covered entities" (generally, health care clearinghouses, employer sponsored health plans, health
insurers, and medical service providers that engage in certain transactions.)[15] By regulation, the Department of Health and Human Services extended the HIPAA privacy rule to independent contractors of covered entities who fit within the definition of "business associates".
References:
https://en.wikipedia.org/wiki/Health_Insurance_Portability_and_Accountability_Act#Privacy
_Rule
In order to show improvement of security over time, what must be developed?
Show answer and explanation
Correct answer: C
Explanation
Today, management demands metrics to get a clearer view of security. Metrics that measure participation, effectiveness, and window of exposure, however, offer information the organization can use to make plans and improve programs.
References:
http://www.infoworld.com/article/2974642/security/4-security-metrics-that-matter.html
You are attempting to crack LM Manager hashed from Windows 2000 SAM file. You will be using LM Brute force hacking tool for decryption.
What encryption algorithm will you be decrypting?
Show answer and explanation
Correct answer: B
Which of the following incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an organization?
Show answer and explanation
Correct answer: A
Explanation
There are several key elements to have implemented in preparation phase in order to help mitigate any potential problems that may hinder one's ability to handle an incident. For the sake of brevity, the following should be performed:
References:
https://www.sans.org/reading-room/whitepapers/incident/incident-handlers-handbook-33901
It is a vulnerability in GNU's bash shell, discovered in September of 2014, that gives attackers access to run remote commands on a vulnerable system. The malicious software can take control of an infected machine, launch denial-of-service attacks to disrupt websites, and scan for other vulnerable devices (including routers).
Which of the following vulnerabilities is being described?
Show answer and explanation
Correct answer: A
Explanation
Shellshock, also known as Bashdoor, is a family of security bugs in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014.
References:
https://en.wikipedia.org/wiki/Shellshock_(software_bug)
You are tasked to configure the DHCP server to lease the last 100 usable IP addresses in subnet to. 1.4.0/23.
Which of the following IP addresses could be teased as a result of the new configuration?
Show answer and explanation
Correct answer: C
You are tasked to perform a penetration test. While you are performing information gathering, you find an employee list in Google. You find the receptionist's email, and you send her an email changing the source email to her boss's email( boss@company ). In this email, you ask for a pdf with information. She reads your email and sends back a pdf with links. You exchange the pdf links with your malicious links (these links contain malware) and send back the modified pdf, saying that the links don't work. She reads your email, opens the links, and her machine gets infected. You now have access to the company network.
What testing method did you use?
Show answer and explanation
Correct answer: A
Explanation
Social engineering, in the context of information security, refers to psychological manipulation of people into performing actions or divulging confidential information. A type of confidence trick for the purpose of information gathering, fraud, or system access, it differs from a traditional "con" in that it is often one of many steps in a more complex fraud scheme.