EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 431:

  When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

  A. At least once a year and after any significant upgrade or modification

  B. At least once every three years or after any significant upgrade or modification

  C. At least twice a year or after any significant upgrade or modification

  D. At least once every two years and after any significant upgrade or modification

  Correct Answer: A

• Question 432:

  Which of the following defines the role of a root Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

  A. The root CA is the recovery agent used to encrypt data when a user's certificate is lost.

  B. The root CA stores the user's hash value for safekeeping.

  C. The CA is the trusted root that issues certificates.

  D. The root CA is used to encrypt email messages to prevent unintended disclosure of data.

  Correct Answer: C

• Question 433:

  Which of the following algorithms provides better protection against brute force attacks by using a 160-bit message digest?

  A. MD5

  B. SHA-1

  C. RC4

  D. MD4

  Correct Answer: B

• Question 434:

  Which of the following is optimized for confidential communications, such as bidirectional voice and video?

  A. RC4

  B. RC5

  C. MD4

  D. MD5

  Correct Answer: A

• Question 435:

  A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

  A. Ignore the problem completely and let someone else deal with it.

  B. Create a document that will crash the computer when opened and send it to friends.

  C. Find an underground bulletin board and attempt to sell the bug to the highest bidder.

  D. Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.

  Correct Answer: D

• Question 436:

  What are the three types of compliance that the Open Source Security Testing Methodology Manual (OSSTMM) recognizes?

  A. Legal, performance, audit

  B. Audit, standards based, regulatory

  C. Contractual, regulatory, industry

  D. Legislative, contractual, standards based

  Correct Answer: D

• Question 437:

  The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web applications by providing which one of the following services?

  A. An extensible security framework named COBIT

  B. A list of flaws and how to fix them

  C. Web application patches

  D. A security certification for hardened web applications

  Correct Answer: B

• Question 438:

  Which cipher encrypts the plain text digit (bit or byte) one by one?

  A. Classical cipher

  B. Block cipher

  C. Modern cipher

  D. Stream cipher

  Correct Answer: D

• Question 439:

  Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/IP specifications?

  A. Ping of death

  B. SYN flooding

  C. TCP hijacking

  D. Smurf attack

  Correct Answer: A

• Question 440:

  What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?

  A. Due to the key size, the time it will take to encrypt and decrypt the message hinders efficient communication.

  B. To get messaging programs to function with this algorithm requires complex configurations.

  C. It has been proven to be a weak cipher; therefore, should not be trusted to protect sensitive data.

  D. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.

  Correct Answer: D