EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 591:

  At a Windows Server command prompt, which command could be used to list the running services?

  A. Sc query type= running

  B. Sc query \\servername

  C. Sc query

  D. Sc config

  Correct Answer: C

• Question 592:

  A covert channel is a channel that:

  A. transfers information over, within a computer system, or network that is outside of the security policy.

  B. transfers information over, within a computer system, or network that is within the security policy.

  C. transfers information via a communication path within a computer system, or network for transfer of data.

  D. transfers information over, within a computer system, or network that is encrypted.

  Correct Answer: A

• Question 593:

  Low humidity in a data center can cause which of the following problems?

  A. Heat

  B. Corrosion

  C. Static electricity

  D. Airborne contamination

  Correct Answer: C

• Question 594:

  What results will the following command yield: 'NMAP -sS -O -p 123-153 192.168.100.3'?

  A. A stealth scan, opening port 123 and 153

  B. A stealth scan, checking open ports 123 to 153

  C. A stealth scan, checking all open ports excluding ports 123 to 153

  D. A stealth scan, determine operating system, and scanning ports 123 to 153

  Correct Answer: D

• Question 595:

  A tester has been hired to do a web application security test. The tester notices that the site is dynamic and must make use of a back end database.

  In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to attempt breaking a valid SQL request?

  A. Semicolon

  B. Single quote

  C. Exclamation mark

  D. Double quote

  Correct Answer: B

• Question 596:

  What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

  A. Blue Book

  B. ISO 26029

  C. Common Criteria

  D. The Wassenaar Agreement

  Correct Answer: C

• Question 597:

  A circuit level gateway works at which of the following layers of the OSI Model?

  A. Layer 5 - Application

  B. Layer 4 - TCP

  C. Layer 3 - Internet protocol

  D. Layer 2 - Data link

  Correct Answer: B

• Question 598:

  Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?

  A. Cain

  B. John the Ripper

  C. Nikto

  D. Hping

  Correct Answer: A

• Question 599:

  While conducting a penetration test, the tester determines that there is a firewall between the tester's machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model. Which type of firewall is the tester trying to traverse?

  A. Packet filtering firewall

  B. Application-level firewall

  C. Circuit-level gateway firewall

  D. Stateful multilayer inspection firewall

  Correct Answer: C

• Question 600:

  Which of the following is a hardware requirement that either an IDS/IPS system or a proxy server must have in order to properly function?

  A. Fast processor to help with network traffic analysis

  B. They must be dual-homed

  C. Similar RAM requirements

  D. Fast network interface cards

  Correct Answer: B

  Dual-homed or dual-homing can refer to either an Ethernet device that has more than one network interface, for redundancy purposes, or in firewall technology, dual-homed is one of the firewall architectures, such as an IDS/IPS system, for implementing preventive security.

  References: https://en.wikipedia.org/wiki/Dual-homed