EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 181:

  Which of the following is a wireless network detector that is commonly found on Linux?

  A. Kismet

  B. Abel

  C. Netstumbler

  D. Nessus

  Correct Answer: A

• Question 182:

  While performing online banking using a Web browser, Kyle receives an email that contains an image of a well-crafted art. Upon clicking the image, a new tab on the web browser opens and shows an animated GIF of bills and coins being swallowed by a crocodile. After several days, Kyle noticed that all his funds on the bank was gone. What Web browser-based security vulnerability got exploited by the hacker?

  A. Clickjacking

  B. Web Form Input Validation

  C. Cross-Site Request Forgery

  D. Cross-Site Scripting

  Correct Answer: C

• Question 183:

  In IPv6 what is the major difference concerning application layer vulnerabilities compared to IPv4?

  A. Implementing IPv4 security in a dual-stack network offers protection from IPv6 attacks too.

  B. Vulnerabilities in the application layer are independent of the network layer. Attacks and mitigation techniques are almost identical.

  C. Due to the extensive security measures built in IPv6, application layer vulnerabilities need not be addresses.

  D. Vulnerabilities in the application layer are greatly different from IPv4.

  Correct Answer: B

• Question 184:

  Which of the following is designed to verify and authenticate individuals taking part in a data exchange within an enterprise?

  A. SOA

  B. Single-Sign On

  C. PKI

  D. Biometrics

  Correct Answer: C

• Question 185:

  Knowing the nature of backup tapes, which of the following is the MOST RECOMMENDED way of storing backup tapes?

  A. In a cool dry environment

  B. Inside the data center for faster retrieval in a fireproof safe

  C. In a climate controlled facility offsite

  D. On a different floor in the same building

  Correct Answer: C

• Question 186:

  A recent security audit revealed that there were indeed several occasions that the company's network was breached. After investigating, you discover that your IDS is not configured properly and therefore is unable to trigger alarms when needed. What type of alert is the IDS giving?

  A. True Positive

  B. False Negative

  C. False Positive

  D. False Positive

  Correct Answer: B

• Question 187:

  In which phase of the ethical hacking process can Google hacking be employed? This is a technique that involves manipulating a search string with specific operators to search for vulnerabilities.

  Example: allintitle: root passwd

  A. Maintaining Access

  B. Gaining Access

  C. Reconnaissance

  D. Scanning and Enumeration

  Correct Answer: C

• Question 188:

  What would you type on the Windows command line in order to launch the Computer Management Console provided that you are logged in as an admin?

  A. c:\compmgmt.msc

  B. c:\gpedit

  C. c:\ncpa.cpl

  D. c:\services.msc

  Correct Answer: A

• Question 189:

  What tool and process are you going to use in order to remain undetected by an IDS while pivoting and passing traffic over a server you've compromised and gained root access to?

  A. Install Cryptcat and encrypt outgoing packets from this server.

  B. Use HTTP so that all traffic can be routed via a browser, thus evading the internal Intrusion Detection Systems.

  C. Use Alternate Data Streams to hide the outgoing packets from this server.

  Correct Answer: B

• Question 190:

  What tool should you use when you need to analyze extracted metadata from files you collected when you were in the initial stage of penetration test (information gathering)?

  A. Armitage

  B. Dimitry

  C. Metagoofil

  D. cdpsnarf

  Correct Answer: C