EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 651:

  Analyst is investigating proxy logs and found out that one of the internal user visited website storing suspicious Java scripts. After opening one of them, he noticed that it is very hard to understand the code and that all codes differ from the typical Java script. What is the name of this technique to hide the code and extend analysis time?

  A. Encryption

  B. Code encoding

  C. Obfuscation

  D. Steganography

  Correct Answer: A

• Question 652:

  Alice encrypts her data using her public key PK and stores the encrypted data in the cloud. Which of the following attack scenarios will compromise the privacy of her data?

  A. None of these scenarios compromise the privacy of Alice's data

  B. Agent Andrew subpoenas Alice, forcing her to reveal her private key. However, the cloud server successfully resists Andrew's attempt to access the stored data

  C. Hacker Harry breaks into the cloud server and steals the encrypted data

  D. Alice also stores her private key in the cloud, and Harry breaks into the cloud server as before

  Correct Answer: D

• Question 653:

  If an attacker uses the command SELECT*FROM user WHERE name = `x' AND userid IS NULL; --`; which type of SQL injection attack is the attacker performing?

  A. End of Line Comment

  B. UNION SQL Injection

  C. Illegal/Logically Incorrect Query

  D. Tautology

  Correct Answer: D

• Question 654:

  A hacker is an intelligent individual with excellent computer skills and the ability to explore a computer's software and hardware without the owner's permission. Their intention can either be to simply gain knowledge or to illegally make changes. Which of the following class of hacker refers to an individual who works both offensively and defensively at various times?

  A. Suicide Hacker

  B. Black Hat

  C. White Hat

  D. Gray Hat

  Correct Answer: D

• Question 655:

  When tuning security alerts, what is the best approach?

  A. Tune to avoid False positives and False Negatives

  B. Rise False positives Rise False Negatives

  C. Decrease the false positives

  D. Decrease False negatives

  Correct Answer: A

• Question 656:

  From the following table, identify the wrong answer in terms of Range (ft).

  

  A. 802.11b

  B. 802.11g

  C. 802.16(WiMax)

  D. 802.11a

  Correct Answer: D

• Question 657:

  Your business has decided to add credit card numbers to the data it backs up to tape. Which of the following represents the best practice your business should observe?

  A. Hire a security consultant to provide direction.

  B. Do not back up cither the credit card numbers or then hashes.

  C. Back up the hashes of the credit card numbers not the actual credit card numbers.

  D. Encrypt backup tapes that are sent off-site.

  Correct Answer: A

• Question 658:

  Which of the following Bluetooth hacking techniques does an attacker use to send messages to users without the recipient's consent, similar to email spamming?

  A. Bluesmacking

  B. Bluesniffing

  C. Bluesnarfing

  D. Bluejacking

  Correct Answer: D

• Question 659:

  An attacker scans a host with the below command. Which three flags are set? (Choose three.)

  #nmap -sX host.domain.com

  A. This is ACK scan. ACK flag is set

  B. This is Xmas scan. SYN and ACK flags are set

  C. This is Xmas scan. URG, PUSH and FIN are set

  D. This is SYN scan. SYN flag is set

  Correct Answer: C

• Question 660:

  Assume a business-crucial web-site of some company that is used to sell handsets to the customers worldwide. All the developed components are reviewed by the security team on a monthly basis. In order to drive business further, the web-site developers decided to add some 3rd party marketing tools on it. The tools are written in JavaScript and can track the customer's activity on the site. These tools are located on the servers of the marketing company.

  What is the main security risk associated with this scenario?

  A. External script contents could be maliciously modified without the security team knowledge

  B. External scripts have direct access to the company servers and can steal the data from there

  C. There is no risk at all as the marketing services are trustworthy

  D. External scripts increase the outbound company data traffic which leads greater financial losses

  Correct Answer: A