EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 1:

  When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should you implement?

  A. AH Tunnel mode
  B. AH promiscuous
  C. ESP transport mode
  D. ESP confidential
  C. ESP transport mode

• Question 2:

  Which of the following is the least-likely physical characteristic to be used in biometric control that supports a large company?

  A. Height and Weight
  B. Voice
  C. Fingerprints
  D. Iris patterns
  A. Height and Weight

• Question 3:

  In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive, although slow. It usually tries every possible letter and number combination in its automated exploration. If you would use both brute force and dictionary methods combined together to have variation of words, what would you call such an attack?

  A. Full Blown
  B. Thorough
  C. Hybrid
  D. BruteDics
  C. Hybrid

• Question 4:

  Which of the following is considered as one of the most reliable forms of TCP scanning?

  A. TCP Connect/Full Open Scan
  B. Half-open Scan
  C. NULL Scan
  D. Xmas Scan
  A. TCP Connect/Full Open Scan

• Question 5:

  Attempting an injection attack on a web server based on responses to True/False questions is called which of the following?

  A. Blind SQLi
  B. DMS-specific SQLi
  C. Classic SQLi
  D. Compound SQLi
  A. Blind SQLi

• Question 6:

  Which of the following DoS tools is used to attack target web applications by starvation of available sessions on the web server?

  The tool keeps sessions at halt using never-ending POST transmissions and sending an arbitrarily large content-length header value.

  A. My Doom
  B. Astacheldraht
  C. R-U-Dead-Yet?(RUDY)
  D. LOIC
  C. R-U-Dead-Yet?(RUDY)

• Question 7:

  A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While it is effective, the tester finds it tedious to perform extended functions. On further research, the tester come across a perl script that runs the following msadc functions:

  

  Which exploit is indicated by this script?

  A. A buffer overflow exploit
  B. A chained exploit
  C. A SQL injection exploit
  D. A denial of service exploit
  B. A chained exploit

• Question 8:

  A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

  A. Ignore the problem completely and let someone else deal with it.
  B. Create a document that will crash the computer when opened and send it to friends.
  C. Find an underground bulletin board and attempt to sell the bug to the highest bidder.
  D. Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.
  D. Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.

• Question 9:

  Which of the following tools will scan a network to perform vulnerability checks and compliance auditing?

  A. NMAP
  B. Metasploit
  C. Nessus
  D. BeEF
  C. Nessus

• Question 10:

  Which of the following statements about a zone transfer is correct? (Choose three.)

  A. A zone transfer is accomplished with the DNS
  B. A zone transfer is accomplished with the nslookup service
  C. A zone transfer passes all zone information that a DNS server maintains
  D. A zone transfer passes all zone information that a nslookup server maintains
  E. A zone transfer can be prevented by blocking all inbound TCP port 53 connections
  F. Zone transfers cannot occur on the Internet
  A. A zone transfer is accomplished with the DNS
  C. A zone transfer passes all zone information that a DNS server maintains
  E. A zone transfer can be prevented by blocking all inbound TCP port 53 connections