EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 631:

  In the software security development life cycle process, threat modeling occurs in which phase?

  A. Design

  B. Requirements

  C. Verification

  D. Implementation

  Correct Answer: A

• Question 632:

  A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.

  Which cryptography attack is the student attempting?

  A. Man-in-the-middle attack

  B. Brute-force attack

  C. Dictionary attack

  D. Session hijacking

  Correct Answer: C

• Question 633:

  What are the three types of authentication?

  A. Something you: know, remember, prove

  B. Something you: have, know, are

  C. Something you: show, prove, are

  D. Something you: show, have, prove

  Correct Answer: B

• Question 634:

  The following is part of a log file taken from the machine on the network with the IP address of

  192.168.1.106:

  

  What type of activity has been logged?

  A. Port scan targeting 192.168.1.103

  B. Teardrop attack targeting 192.168.1.106

  C. Denial of service attack targeting 192.168.1.103

  D. Port scan targeting 192.168.1.106

  Correct Answer: D

• Question 635:

  What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

  A. The request to the web server is not visible to the administrator of the vulnerable application.

  B. The attack is called "Blind" because, although the application properly filters user input, it is still vulnerable to code injection.

  C. The successful attack does not show an error message to the administrator of the affected application.

  D. The vulnerable application does not display errors with information about the injection results to the attacker.

  Correct Answer: D

• Question 636:

  A recently hired network security associate at a local bank was given the responsibility to perform daily scans of the internal network to look for unauthorized devices. The employee decides to write a script that will scan the network for unauthorized devices every morning at 5:00 am.

  Which of the following programming languages would most likely be used?

  A. PHP

  B. C#

  C. Python

  D. ASP.NET

  Correct Answer: C

• Question 637:

  Which of the following techniques will identify if computer files have been changed?

  A. Network sniffing

  B. Permission sets

  C. Integrity checking hashes

  D. Firewall alerts

  Correct Answer: C

• Question 638:

  Which of the following parameters enables NMAP's operating system detection feature?

  A. NMAP -sV

  B. NMAP -oS

  C. NMAP -sR

  D. NMAP -O

  Correct Answer: D

• Question 639:

  Which of the following open source tools would be the best choice to scan a network for potential targets?

  A. NMAP

  B. NIKTO

  C. CAIN

  D. John the Ripper

  Correct Answer: A

• Question 640:

  What is a successful method for protecting a router from potential smurf attacks?

  A. Placing the router in broadcast mode

  B. Enabling port forwarding on the router

  C. Installing the router outside of the network's firewall

  D. Disabling the router from accepting broadcast ping messages

  Correct Answer: D