EC-COUNCIL EC-COUNCIL Certifications 312-50V11 Questions & Answers

• Question 201:

  The collection of potentially actionable, overt, and publicly available information is known as

  A. Open-source intelligence

  B. Real intelligence

  C. Social intelligence

  D. Human intelligence

  Correct Answer: A

• Question 202:

  Larry, a security professional in an organization, has noticed some abnormalities In the user accounts on a web server. To thwart evolving attacks, he decided to harden the security of the web server by adopting a countermeasures to secure the accounts on the web server.

  Which of the following countermeasures must Larry implement to secure the user accounts on the web server?

  A. Enable unused default user accounts created during the installation of an OS

  B. Enable all non-interactive accounts that should exist but do not require interactive login

  C. Limit the administrator or toot-level access to the minimum number of users

  D. Retain all unused modules and application extensions

  Correct Answer: C

• Question 203:

  This wireless security protocol allows 192-bit minimum-strength security protocols and cryptographic tools to protect sensitive data, such as GCMP-2S6. MMAC-SHA384, and ECDSA using a 384-bit elliptic curve. Which is this wireless security protocol?

  A. WPA2 Personal

  B. WPA3-Personal

  C. WPA2-Enterprise

  D. WPA3-Enterprise

  Correct Answer: D

  Enterprise, governments, and financial institutions have greater security with WPA3-Enterprise. WPA3Enterprise builds upon WPA2 and ensures the consistent application of security protocol across the network.WPA3-Enterprise also offers an optional mode using 192-bit minimum-strength security protocols and cryptographic tools to raised protect sensitive data:?Authenticated encryption: 256-bit Galois/Counter Mode Protocol (GCMP-256)?Key derivation and confirmation: 384- bit Hashed Message Authentication Mode (HMAC) with Secure Hash Algorithm (HMAC-SHA384)?Key establishment and authentication: Elliptic Curve Diffie-Hellman (ECDH) exchange and Elliptic Curve Digital Signature Algorithm (ECDSA) employing a 384-bit elliptic curve?Robust management frame protection: 256-bit Broadcast/Multicast Integrity Protocol Galois Message Authentication Code (BIP-GMAC-256)The 192-bit security mode offered by WPA3- Enterprise ensures the proper combination of cryptographic tools are used and sets a uniform baseline of security within a WPA3 network.

• Question 204:

  Which of the following tools is used to analyze the files produced by several packet-capture programs such as tcpdump, WinDump, Wireshark, and EtherPeek?

  A. tcptrace

  B. Nessus

  C. OpenVAS

  D. tcptraceroute

  Correct Answer: A

• Question 205:

  PGP, SSL, and IKE are all examples of which type of cryptography?

  A. Digest

  B. Secret Key

  C. Public Key

  D. Hash Algorithm

  Correct Answer: C

• Question 206:

  Suppose your company has just passed a security risk assessment exercise. The results display that the risk of the breach in the main company application is 50%. Security staff has taken some measures and implemented the necessary controls. After that, another security risk assessment was performed showing that risk has decreased to 10%. The risk threshold for the application is 20%. Which of the following risk decisions will be the best for the project in terms of its successful continuation with the most business profit?

  A. Accept the risk

  B. Introduce more controls to bring risk to 0%

  C. Mitigate the risk

  D. Avoid the risk

  Correct Answer: A

• Question 207:

  In both pharming and phishing attacks, an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims.

  What is the difference between pharming and phishing attacks?

  A. In a pharming attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack, an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name

  B. In a phishing attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack, an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name

  C. Both pharming and phishing attacks are purely technical and are not considered forms of social engineering

  D. Both pharming and phishing attacks are identical

  Correct Answer: A

• Question 208:

  Sam, a web developer, was instructed to incorporate a hybrid encryption software program into a web application to secure email messages. Sam used an encryption software, which is a free implementation of the OpenPGP standard that uses both symmetric-key cryptography and asymmetric-key cryptography for improved speed and secure key exchange. What is the encryption software employed by Sam for securing the email messages?

  A. PGP

  B. S/MIME

  C. SMTP

  D. GPG

  Correct Answer: A

• Question 209:

  You have the SOA presented below in your Zone.

  Your secondary servers have not been able to contact your primary server to synchronize information. How long will the secondary servers attempt to contact the primary server before it considers that zone is dead and stops responding to queries?

  collegae.edu.SOA, cikkye.edu ipad.college.edu. (200302028 3600 3600 604800 3600)

  A. One day

  B. One hour

  C. One week

  D. One month

  Correct Answer: C

• Question 210:

  An LDAP directory can be used to store information similar to a SQL database. LDAP uses a _____ database structure instead of SQL's _____ structure. Because of this, LDAP has difficulty representing many-to-one relationships.

  A. Relational, Hierarchical

  B. Strict, Abstract

  C. Hierarchical, Relational

  D. Simple, Complex

  Correct Answer: C