EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 211:

  What are two things that are possible when scanning UDP ports? (Choose two.)

  A. A reset will be returned

  B. An ICMP message will be returned

  C. The four-way handshake will not be completed

  D. An RFC 1294 message will be returned

  E. Nothing

  Correct Answer: BE

• Question 212:

  Which of the following is NOT an ideal choice for biometric controls?

  A. Iris patterns

  B. Fingerprints

  C. Height and weight

  D. Voice

  Correct Answer: C

• Question 213:

  It is a widely used standard for message logging. It permits separation of the software that generates

  messages, the system that stores them, and the software that reports and analyzes them. This protocol is

  specifically designed for transporting event messages.

  Which of the following is being described?

  A. SNMP

  B. ICMP

  C. SYSLOG

  D. SMS

  Correct Answer: C

• Question 214:

  An nmap command that includes the host specification of 202.176.56-57.* will scan _______ number of hosts.

  A. 2

  B. 256

  C. 512

  D. Over 10, 000

  Correct Answer: C

• Question 215:

  Which of the following is a restriction being enforced in "white box testing?"

  A. Only the internal operation of a system is known to the tester

  B. The internal operation of a system is completely known to the tester

  C. The internal operation of a system is only partly accessible to the tester

  D. Only the external operation of a system is accessible to the tester

  Correct Answer: B

• Question 216:

  A distributed port scan operates by:

  A. Blocking access to the scanning clients by the targeted host

  B. Using denial-of-service software against a range of TCP ports

  C. Blocking access to the targeted host by each of the distributed scanning clients

  D. Having multiple computers each scan a small number of ports, then correlating the results

  Correct Answer: D

• Question 217:

  SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts. Which of the following features makes this possible? (Choose two.)

  A. It used TCP as the underlying protocol.

  B. It uses community string that is transmitted in clear text.

  C. It is susceptible to sniffing.

  D. It is used by all network devices on the market.

  Correct Answer: BD

• Question 218:

  An enterprise recently moved to a new office and the new neighborhood is a little risky. The CEO wants to monitor the physical perimeter and the entrance doors 24 hours. What is the best option to do this job?

  A. Use fences in the entrance doors.

  B. Install a CCTV with cameras pointing to the entrance doors and the street.

  C. Use an IDS in the entrance doors and install some of them near the corners.

  D. Use lights in all the entrance doors and along the company's perimeter.

  Correct Answer: B

• Question 219:

  Matthew received an email with an attachment named "YouWon$10Grand.zip." The zip file contains a file named "HowToClaimYourPrize.docx.exe." Out of excitement and curiosity, Matthew opened the said file. Without his knowledge, the file copies itself to Matthew's APPDATA\IocaI directory and begins to beacon to a Command-and-control server to download additional malicious binaries. What type of malware has Matthew encountered?

  A. Key-logger

  B. Trojan

  C. Worm

  D. Macro Virus

  Correct Answer: B

• Question 220:

  You've just discovered a server that is currently active within the same network with the machine you recently compromised. You ping it but it did not respond. What could be the case?

  A. TCP/IP doesn't support ICMP

  B. ARP is disabled on the target server

  C. ICMP could be disabled on the target server

  D. You need to run the ping command with root privileges

  Correct Answer: C