EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 311:

  A well-intentioned researcher discovers a vulnerability on the web site of a major corporation. What should he do?

  A. Ignore it.

  B. Try to sell the information to a well-paying party on the dark web.

  C. Notify the web site owner so that corrective action be taken as soon as possible to patch the vulnerability.

  D. Exploit the vulnerability without harming the web site owner so that attention be drawn to the problem.

  Correct Answer: C

• Question 312:

  Ricardo wants to send secret messages to a competitor company. To secure these messages, he uses a technique of hiding a secret message within an ordinary message. The technique provides 'security through obscurity'.

  What technique is Ricardo using?

  A. Steganography

  B. Public-key cryptography

  C. RSA algorithm

  D. Encryption

  Correct Answer: A

  Steganography is the practice of concealing a file, message, image, or video within another file, message, image, or video.

  References: https://en.wikipedia.org/wiki/Steganography

• Question 313:

  The chance of a hard drive failure is once every three years. The cost to buy a new hard drive is $300. It will require 10 hours to restore the OS and software to the new hard disk. It will require a further 4 hours to restore the database from the last backup to the new hard disk. The recovery person earns $10/hour. Calculate the SLE, ARO, and ALE. Assume the EF = 1 (100%).

  What is the closest approximate cost of this replacement and recovery operation per year?

  A. $146

  B. $1320

  C. $440

  D. $100

  Correct Answer: A

  The annualized loss expectancy (ALE) is the product of the annual rate of occurrence (ARO) and the

  single loss expectancy (SLE).

  Suppose than an asset is valued at $100,000, and the Exposure Factor (EF) for this asset is 25%. The

  single loss expectancy (SLE) then, is 25% * $100,000, or $25,000. In our example the ARO is 33%, and

  the SLE is 300+14*10 (as EF=1). The ALO is thus:

  33%*(300+14*10) which equals 146.

  References: https://en.wikipedia.org/wiki/Annualized_loss_expectancy

• Question 314:

  Which of the following is a low-tech way of gaining unauthorized access to systems?

  A. Social Engineering

  B. Sniffing

  C. Eavesdropping

  D. Scanning

  Correct Answer: A

  Social engineering, in the context of information security, refers to psychological manipulation of people into performing actions or divulging confidential information. A type of confidence trick for the purpose of information gathering, fraud, or system access.

  References: https://en.wikipedia.org/wiki/Social_engineering_(security)

• Question 315:

  Sid is a judge for a programming contest. Before the code reaches him it goes through a restricted OS and is tested there. If it passes, then it moves onto Sid. What is this middle step called?

  A. Fuzzy-testing the code

  B. Third party running the code

  C. Sandboxing the code

  D. String validating the code

  Correct Answer: A

• Question 316:

  Which tier in the N-tier application architecture is responsible for moving and processing data between the tiers?

  A. Application Layer

  B. Data tier

  C. Presentation tier

  D. Logic tier

  Correct Answer: D

• Question 317:

  An attacker gains access to a Web server's database and displays the contents of the table that holds all of the names, passwords, and other user information. The attacker did this by entering information into the Web site's user login page that the software's designers did not expect to be entered. This is an example of what kind of software design problem?

  A. Insufficient input validation

  B. Insufficient exception handling

  C. Insufficient database hardening

  D. Insufficient security management

  Correct Answer: A

  The most common web application security weakness is the failure to properly validate input coming from the client or from the environment before using it. This weakness leads to almost all of the major vulnerabilities in web applications, such as cross site scripting, SQL injection, interpreter injection, locale/ Unicode attacks, file system attacks, and buffer overflows.

  References: https://www.owasp.org/index.php/Testing_for_Input_Validation

• Question 318:

  What mechanism in Windows prevents a user from accidentally executing a potentially malicious batch (.bat) or PowerShell (.ps1) script?

  A. User Access Control (UAC)

  B. Data Execution Prevention (DEP)

  C. Address Space Layout Randomization (ASLR)

  D. Windows firewall

  Correct Answer: B

• Question 319:

  To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program.

  What term is commonly used when referring to this type of testing?

  A. Fuzzing

  B. Randomizing

  C. Mutating

  D. Bounding

  Correct Answer: A

  Fuzz testing or fuzzing is a software testing technique, often automated or semi-automated, that involves providing invalid, unexpected, or random data to the inputs of a computer program. The program is then monitored for exceptions such as crashes, or failing built-in code assertions or for finding potential memory leaks. Fuzzing is commonly used to test for security problems in software or computer systems. It is a form of random testing which has been used for testing hardware or software.

  References: https://en.wikipedia.org/wiki/Fuzz_testing

• Question 320:

  The company ABC recently contracted a new accountant. The accountant will be working with the financial statements. Those financial statements need to be approved by the CFO and then they will be sent to the accountant but the CFO is worried because he wants to be sure that the information sent to the accountant was not modified once he approved it. What of the following options can be useful to ensure the integrity of the data?

  A. The document can be sent to the accountant using an exclusive USB for that document.

  B. The CFO can use a hash algorithm in the document once he approved the financial statements.

  C. The financial statements can be sent twice, one by email and the other delivered in USB and the accountant can compare both to be sure it is the same document.

  D. The CFO can use an excel file with a password.

  Correct Answer: B