EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 411:

  You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly.

  What is the best nmap command you will use?

  A. nmap -T4 -F 10.10.0.0/24

  B. nmap -T4 -r 10.10.1.0/24

  C. nmap -T4 -O 10.10.0.0/24

  D. nmap -T4 -q 10.10.0.0/24

  Correct Answer: A

  command = nmap -T4 -F description = This scan is faster than a normal scan because it uses the aggressive timing template and scans fewer ports.

  References: https://svn.nmap.org/nmap/zenmap/share/zenmap/config/scan_profile.usp

• Question 412:

  An attacker has captured a target file that is encrypted with public key cryptography. Which of the attacks below is likely to be used to crack the target file?

  A. Timing attack

  B. Replay attack

  C. Memory trade-off attack

  D. Chosen plain-text attack

  Correct Answer: D

• Question 413:

  Your team has won a contract to infiltrate an organization. The company wants to have the attack be as realistic as possible; therefore, they did not provide any information besides the company name. What should be the first step in security testing the client?

  A. Reconnaissance

  B. Enumeration

  C. Scanning

  D. Escalation

  Correct Answer: A

  Phases of hacking Phase 1--Reconnaissance Phase 2--Scanning Phase 3--Gaining Access Phase 4--Maintaining Access Phase 5--Covering Tracks

  Phase 1: Passive and Active Reconnaissance

  References: http://hack-o-crack.blogspot.se/2010/12/five-stages-of-ethical-hacking.html

• Question 414:

  To reduce the attack surface of a system, administrators should perform which of the following processes to remove unnecessary software, services, and insecure configuration settings?

  A. Harvesting

  B. Windowing

  C. Hardening

  D. Stealthing

  Correct Answer: C

• Question 415:

  Which vital role does the U.S. Computer Security Incident Response Team (CSIRT) provide?

  A. Incident response services to any user, company, government agency, or organization in partnership with the Department of Homeland Security

  B. Maintenance of the nation's Internet infrastructure, builds out new Internet infrastructure, and decommissions old Internet infrastructure

  C. Registration of critical penetration testing for the Department of Homeland Security and public and private sectors

  D. Measurement of key vulnerability assessments on behalf of the Department of Defense (DOD) and State Department, as well as private sectors

  Correct Answer: A

• Question 416:

  A certified ethical hacker (CEH) is approached by a friend who believes her husband is cheating. She offers to pay to break into her husband's email account in order to find proof so she can take him to court. What is the ethical response?

  A. Say no; the friend is not the owner of the account.

  B. Say yes; the friend needs help to gather evidence.

  C. Say yes; do the job for free.

  D. Say no; make sure that the friend knows the risk she's asking the CEH to take.

  Correct Answer: A

• Question 417:

  Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?

  A. Key registry

  B. Recovery agent

  C. Directory

  D. Key escrow

  Correct Answer: D

• Question 418:

  An IT security engineer notices that the company's web server is currently being hacked. What should the engineer do next?

  A. Unplug the network connection on the company's web server.

  B. Determine the origin of the attack and launch a counterattack.

  C. Record as much information as possible from the attack.

  D. Perform a system restart on the company's web server.

  Correct Answer: C

• Question 419:

  Advanced encryption standard is an algorithm used for which of the following?

  A. Data integrity

  B. Key discovery

  C. Bulk data encryption

  D. Key recovery

  Correct Answer: C

• Question 420:

  How do employers protect assets with security policies pertaining to employee surveillance activities?

  A. Employers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.

  B. Employers use informal verbal communication channels to explain employee monitoring activities to employees.

  C. Employers use network surveillance to monitor employee email traffic, network access, and to record employee keystrokes.

  D. Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.

  Correct Answer: D