EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 601:

  Which of the statements concerning proxy firewalls is correct?

  A. Proxy firewalls increase the speed and functionality of a network.

  B. Firewall proxy servers decentralize all activity for an application.

  C. Proxy firewalls block network packets from passing to and from a protected network.

  D. Computers establish a connection with a proxy firewall which initiates a new network connection for the client.

  Correct Answer: D

• Question 602:

  A company has hired a security administrator to maintain and administer Linux and Windows-based systems. Written in the nightly report file is the following:

  Firewall log files are at the expected value of 4 MB. The current time is 12am. Exactly two hours later the size has decreased considerably. Another hour goes by and the log files have shrunk in size again.

  Which of the following actions should the security administrator take?

  A. Log the event as suspicious activity and report this behavior to the incident response team immediately.

  B. Log the event as suspicious activity, call a manager, and report this as soon as possible.

  C. Run an anti-virus scan because it is likely the system is infected by malware.

  D. Log the event as suspicious activity, continue to investigate, and act according to the site's security policy.

  Correct Answer: D

• Question 603:

  Which security control role does encryption meet?

  A. Preventative

  B. Detective

  C. Offensive

  D. Defensive

  Correct Answer: A

• Question 604:

  Fingerprinting VPN firewalls is possible with which of the following tools?

  A. Angry IP

  B. Nikto

  C. Ike-scan

  D. Arp-scan

  Correct Answer: C

• Question 605:

  A penetration tester was hired to perform a penetration test for a bank. The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news articles online about the bank, watching what times the bank employees come into work and leave from work, searching the bank's job postings (paying special attention to IT related jobs), and visiting the local dumpster for the bank's corporate office. What phase of the penetration test is the tester currently in?

  A. Information reporting

  B. Vulnerability assessment

  C. Active information gathering

  D. Passive information gathering

  Correct Answer: D

• Question 606:

  ICMP ping and ping sweeps are used to check for active systems and to check:

  A. if ICMP ping traverses a firewall.

  B. the route that the ICMP ping took.

  C. the location of the switchport in relation to the ICMP ping.

  D. the number of hops an ICMP ping takes to reach a destination.

  Correct Answer: A

• Question 607:

  Which of the following is considered an acceptable option when managing a risk?

  A. Reject the risk.

  B. Deny the risk.

  C. Mitigate the risk.

  D. Initiate the risk.

  Correct Answer: C

• Question 608:

  Which system consists of a publicly available set of databases that contain domain name registration contact information?

  A. WHOIS

  B. IANA

  C. CAPTCHA

  D. IETF

  Correct Answer: A

• Question 609:

  Which of the following is a detective control?

  A. Smart card authentication

  B. Security policy

  C. Audit trail

  D. Continuity of operations plan

  Correct Answer: C

• Question 610:

  A security policy will be more accepted by employees if it is consistent and has the support of:

  A. coworkers.

  B. executive management.

  C. the security officer.

  D. a supervisor.

  Correct Answer: B