EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 621:

  One advantage of an application-level firewall is the ability to:

  A. filter packets at the network level.

  B. filter specific commands, such as http:post.

  C. retain state information for each packet.

  D. monitor tcp handshaking.

  Correct Answer: B

• Question 622:

  A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?

  A. Firewall-management policy

  B. Acceptable-use policy

  C. Remote-access policy

  D. Permissive policy

  Correct Answer: C

• Question 623:

  During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?

  A. Using the Metasploit psexec module setting the SA / Admin credential

  B. Invoking the stored procedure xp_shell to spawn a Windows command shell

  C. Invoking the stored procedure cmd_shell to spawn a Windows command shell

  D. Invoking the stored procedure xp_cmdshell to spawn a Windows command shell

  Correct Answer: D

• Question 624:

  Which of the following is a component of a risk assessment?

  A. Physical security

  B. Administrative safeguards

  C. DMZ

  D. Logical interface

  Correct Answer: B

• Question 625:

  Which of the following is an example of an asymmetric encryption implementation?

  A. SHA1

  B. PGP

  C. 3DES

  D. MD5

  Correct Answer: B

• Question 626:

  Which tool is used to automate SQL injections and exploit a database by forcing a given web application to connect to another database controlled by a hacker?

  A. DataThief

  B. NetCat

  C. Cain and Abel

  D. SQLInjector

  Correct Answer: A

• Question 627:

  A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

  A. Issue the pivot exploit and set the meterpreter.

  B. Reconfigure the network settings in the meterpreter.

  C. Set the payload to propagate through the meterpreter.

  D. Create a route statement in the meterpreter.

  Correct Answer: D

• Question 628:

  Which of the following tools will scan a network to perform vulnerability checks and compliance auditing?

  A. NMAP

  B. Metasploit

  C. Nessus

  D. BeEF

  Correct Answer: C

• Question 629:

  After gaining access to the password hashes used to protect access to a web based application, knowledge of which cryptographic algorithms would be useful to gain access to the application?

  A. SHA1

  B. Diffie-Helman

  C. RSA

  D. AES

  Correct Answer: A

• Question 630:

  Which of the following describes the characteristics of a Boot Sector Virus?

  A. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR

  B. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

  C. Modifies directory table entries so that directory entries point to the virus code instead of the actual program

  D. Overwrites the original MBR and only executes the new virus code

  Correct Answer: B

  A boot sector virus is a computer virus that infects a storage device's master boot record (MBR). The virus moves the boot sector to another location on the hard drive.

  References: https://www.techopedia.com/definition/26655/boot-sector-virus