EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 171:

  A possibly malicious sequence of packets that were sent to a web server has been captured by an

  Intrusion Detection System (IDS) and was saved to a PCAP file. As a network administrator, you need to

  determine whether this packets are indeed malicious.

  What tool are you going to use?

  A. Intrusion Prevention System (IPS)

  B. Vulnerability scanner

  C. Protocol analyzer

  D. Network sniffer

  Correct Answer: C

• Question 172:

  A hacker was able to easily gain access to a website. He was able to log in via the frontend user login form of the website using default or commonly used credentials. This exploitation is an example of what Software design flaw?

  A. Insufficient security management

  B. Insufficient database hardening

  C. Insufficient input validation

  D. Insufficient exception handling

  Correct Answer: B

• Question 173:

  LM hash is a compromised password hashing function. Which of the following parameters describe LM Hash:?

  I -The maximum password length is 14 characters.

  II -There are no distinctions between uppercase and lowercase.

  III -It's a simple algorithm, so 10,000,000 hashes can be generated per second.

  A. I

  B. I, II, and III

  C. II

  D. I and II

  Correct Answer: B

• Question 174:

  It has been reported to you that someone has caused an information spillage on their computer. You go to the computer, disconnect it from the network, remove the keyboard and mouse, and power it down. What step in incident handling did you just complete?

  A. Containment

  B. Eradication

  C. Recovery

  D. Discovery

  Correct Answer: A

• Question 175:

  When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should you implement?

  A. AH Tunnel mode

  B. AH promiscuous

  C. ESP transport mode

  D. ESP confidential

  Correct Answer: C

• Question 176:

  A software tester is randomly generating invalid inputs in an attempt to crash the program. Which of the following is a software testing technique used to determine if a software program properly handles a wide range of invalid input?

  A. Mutating

  B. Randomizing

  C. Fuzzing

  D. Bounding

  Correct Answer: C

• Question 177:

  Destination unreachable administratively prohibited messages can inform the hacker to what?

  A. That a circuit level proxy has been installed and is filtering traffic

  B. That his/her scans are being blocked by a honeypot or jail

  C. That the packets are being malformed by the scanning software

  D. That a router or other packet-filtering device is blocking traffic

  E. That the network is functioning normally

  Correct Answer: D

• Question 178:

  Sandra is the security administrator of XYZ.com. One day she notices that the XYZ.com Oracle database server has been compromised and customer information along with financial data has been stolen. The financial loss will be estimated in millions of dollars if the database gets into the hands of competitors. Sandra wants to report this crime to the law enforcement agencies immediately. Which organization coordinates computer crime investigations throughout the United States?

  A. NDCA

  B. NICP

  C. CIRP

  D. NPC

  E. CIA

  Correct Answer: D

• Question 179:

  If you are to determine the attack surface of an organization, which of the following is the BEST thing to do?

  A. Running a network scan to detect network services in the corporate DMZ

  B. Reviewing the need for a security clearance for each employee

  C. Using configuration management to determine when and where to apply security patches

  D. Training employees on the security policy regarding social engineering

  Correct Answer: A

• Question 180:

  Which of the following tools would MOST LIKELY be used to perform security audit on various of forms of network systems?

  A. Intrusion Detection System

  B. Vulnerability scanner

  C. Port scanner

  D. Protocol analyzer

  Correct Answer: B