EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 71:

  Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397- 1872883824-861252104-501. What needs to happen before Matthew has full administrator access?

  A. He must perform privilege escalation.

  B. He needs to disable antivirus protection.

  C. He needs to gain physical access.

  D. He already has admin privileges, as shown by the "501" at the end of the SID.

  Correct Answer: A

• Question 72:

  What is the following command used for?

  net use \targetipc$ "" /u:""

  A. Grabbing the etc/passwd file

  B. Grabbing the SAM

  C. Connecting to a Linux computer through Samba.

  D. This command is used to connect as a null session

  E. Enumeration of Cisco routers

  Correct Answer: D

• Question 73:

  Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?

  A. To determine who is the holder of the root account

  B. To perform a DoS

  C. To create needless SPAM

  D. To illicit a response back that will reveal information about email servers and how they treat undeliverable mail

  E. To test for virus protection

  Correct Answer: D

• Question 74:

  You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c

  

  What is the hexadecimal value of NOP instruction?

  A. 0x60

  B. 0x80

  C. 0x70

  D. 0x90

  Correct Answer: D

• Question 75:

  In the context of Windows Security, what is a 'null' user?

  A. A user that has no skills

  B. An account that has been suspended by the admin

  C. A pseudo account that has no username and password

  D. A pseudo account that was created for security administration purpose

  Correct Answer: C

• Question 76:

  What is the proper response for a NULL scan if the port is closed?

  A. SYN

  B. ACK

  C. FIN

  D. PSH

  E. RST F. No response

  Correct Answer: E

• Question 77:

  An LDAP directory can be used to store information similar to a SQL database. LDAP uses a _____ database structure instead of SQL's _____ structure. Because of this, LDAP has difficulty representing many-to-one relationships.

  A. Relational, Hierarchical

  B. Strict, Abstract

  C. Hierarchical, Relational

  D. Simple, Complex

  Correct Answer: C

• Question 78:

  Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network.

  Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.

  A. SNMPUtil

  B. SNScan

  C. SNMPScan

  D. Solarwinds IP Network Browser

  E. NMap

  Correct Answer: ABD

• Question 79:

  Which type of sniffing technique is generally referred as MiTM attack?

  

  A. Password Sniffing

  B. ARP Poisoning

  C. Mac Flooding

  D. DHCP Sniffing

  Correct Answer: B

• Question 80:

  

  Identify the correct terminology that defines the above statement.

  A. Vulnerability Scanning

  B. Penetration Testing

  C. Security Policy Implementation

  D. Designing Network Security

  Correct Answer: B