EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 691:

  You perform a scan of your company's network and discover that TCP port 123 is open. What services by default run on TCP port 123?

  A. Telnet

  B. POP3

  C. Network Time Protocol

  D. DNS

  Correct Answer: C

• Question 692:

  Steve, a scientist who works in a governmental security agency, developed a technological solution to identify people based on walking patterns and implemented this approach to a physical control access.

  A camera captures people walking and identifies the individuals using Steve's approach.

  After that, people must approximate their RFID badges. Both the identifications are required to open the

  door.

  In this case, we can say:

  A. Although the approach has two phases, it actually implements just one authentication factor

  B. The solution implements the two authentication factors: physical object and physical characteristic

  C. The solution will have a high level of false positives

  D. Biological motion cannot be used to identify people

  Correct Answer: B

• Question 693:

  Which protocol is used for setting up secure channels between two devices, typically in VPNs?

  A. PPP

  B. IPSEC

  C. PEM

  D. SET

  Correct Answer: B

• Question 694:

  An attacker, using a rogue wireless AP, performed an MITM attack and injected an HTML code to embed a

  malicious applet in all HTTP connections.

  When users accessed any page, the applet ran and exploited many machines.

  Which one of the following tools the hacker probably used to inject HTML code?

  A. Wireshark

  B. Ettercap

  C. Aircrack-ng

  D. Tcpdump

  Correct Answer: B

• Question 695:

  The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic. After he applied his ACL configuration in the router, nobody can access to the ftp, and the permitted hosts cannot access the Internet. According to the next configuration, what is happening in the network?

  

  A. The ACL 104 needs to be first because is UDP

  B. The ACL 110 needs to be changed to port 80

  C. The ACL for FTP must be before the ACL 110

  D. The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router

  Correct Answer: D

• Question 696:

  These hackers have limited or no training and know how to use only basic techniques or tools.

  What kind of hackers are we talking about?

  A. Black-Hat Hackers A

  B. Script Kiddies

  C. White-Hat Hackers

  D. Gray-Hat Hacker

  Correct Answer: C

• Question 697:

  Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities. Which type of virus detection method did Chandler use in this context?

  A. Heuristic Analysis

  B. Code Emulation

  C. Integrity checking

  D. Scanning

  Correct Answer: B

• Question 698:

  Identify the UDP port that Network Time Protocol (NTP) uses as its primary means of communication?

  A. 123

  B. 161

  C. 69

  D. 113

  Correct Answer: A

• Question 699:

  What is one of the advantages of using both symmetric and asymmetric cryptography in SSL/TLS?

  A. Symmetric algorithms such as AES provide a failsafe when asymmetric methods fail.

  B. Asymmetric cryptography is computationally expensive in comparison. However, it is well-suited to securely negotiate keys for use with symmetric cryptography.

  C. Symmetric encryption allows the server to securely transmit the session keys out-of- band.

  D. Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.

  Correct Answer: D

• Question 700:

  Darius is analysing IDS logs. During the investigation, he noticed that there was nothing suspicious found and an alert was triggered on normal web application traffic. He can mark this alert as:

  A. False-Negative

  B. False-Positive

  C. True-Positive

  D. False-Signature

  Correct Answer: A