EC-COUNCIL EC-COUNCIL Certifications 312-50V12 Questions & Answers

• Question 81:

  BitLocker encryption has been implemented for all the Windows-based computers in an organization. You are concerned that someone might lose their cryptographic key. Therefore, a mechanism was implemented to recover the keys from

  Active Directory.

  What is this mechanism called in cryptography?

  A. Key archival

  B. Key escrow.

  C. Certificate rollover

  D. Key renewal

  Correct Answer: B

• Question 82:

  Abel, a cloud architect, uses container technology to deploy applications/software including all its dependencies, such as libraries and configuration files, binaries, and other resources that run independently from other processes in the cloud environment. For the containerization of applications, he follows the five-tier container technology architecture. Currently. Abel is verifying and validating image contents, signing images, and sending them to the registries. Which of the following tiers of the container technology architecture is Abel currently working in?

  A. Tier-1: Developer machines

  B. Tier-4: Orchestrators

  C. Tier-3: Registries

  D. Tier-2: Testing and accreditation systems

  Correct Answer: D

  The official management decision given by a senior agency official to authorize operation of an information system and to explicitly accept the risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals, based on the implementation of an agreed-upon set of security controls. formal declaration by a designated accrediting authority (DAA) or principal accrediting authority (PAA) that an information system is approved to operate at an acceptable level of risk, based on the implementation of an approved set of technical, managerial, and procedural safeguards. See authorization to operate (ATO). Rationale: The Risk Management Framework uses a new term to refer to this concept, and it is called authorization. Identifies the information resources covered by an accreditation decision, as distinguished from separately accredited information resources that are interconnected or with which information is exchanged via messaging. Synonymous with Security Perimeter. For the purposes of identifying the Protection Level for confidentiality of a system to be accredited, the system has a conceptual boundary that extends to all intended users of the system, both directly and indirectly connected, who receive output from the system. See authorization boundary. Rationale: The Risk Management Framework uses a new term to refer to the concept of accreditation, and it is called authorization. Extrapolating, the accreditation boundary would then be referred to as the authorization boundary.

• Question 83:

  Juliet, a security researcher in an organization, was tasked with checking for the authenticity of images to be used in the organization's magazines. She used these images as a search query and tracked the original source and details of the images, which included photographs, profile pictures, and memes. Which of the following footprinting techniques did Rachel use to finish her task?

  A. Reverse image search

  B. Meta search engines

  C. Advanced image search

  D. Google advanced search

  Correct Answer: C

• Question 84:

  What is one of the advantages of using both symmetric and asymmetric cryptography in SSL/TLS?

  A. Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.

  B. Symmetric algorithms such as AES provide a failsafe when asymmetric methods fail.

  C. Symmetric encryption allows the server to security transmit the session keys out-of- band.

  D. Asymmetric cryptography is computationally expensive in comparison. However, it is well-suited to securely negotiate keys for use with symmetric cryptography.

  Correct Answer: A

• Question 85:

  Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?

  A. -T5

  B. -O

  C. -T0

  D. -A

  Correct Answer: A

• Question 86:

  A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering that NMAP result below, which of the following is likely to be installed on the target machine by the OS? Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/tcp open netbios- ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:8

  A. The host is likely a Linux machine.

  B. The host is likely a printer.

  C. The host is likely a router.

  D. The host is likely a Windows machine.

  Correct Answer: B

• Question 87:

  Calvin, a software developer, uses a feature that helps him auto-generate the content of a web page without manual involvement and is integrated with SSI directives. This leads to a vulnerability in the developed web application as this feature accepts remote user inputs and uses them on the page. Hackers can exploit this feature and pass malicious SSI directives as input values to perform malicious activities such as modifying and erasing server files. What is the type of injection attack Calvin's web application is susceptible to?

  A. Server-side template injection

  B. Server-side JS injection

  C. CRLF injection

  D. Server-side includes injection

  Correct Answer: D

• Question 88:

  Upon establishing his new startup, Tom hired a cloud service provider (CSP) but was dissatisfied with their service and wanted to move to another CSP. What part of the contract might prevent him from doing so?

  A. Virtualization

  B. Lock-in

  C. Lock-down

  D. Lock-up

  Correct Answer: B

• Question 89:

  An organization has automated the operation of critical infrastructure from a remote location. For this purpose, all the industrial control systems are connected to the Internet. To empower the manufacturing process, ensure the reliability of industrial networks, and reduce downtime and service disruption, the organization deckled to install an OT security tool that further protects against security incidents such as cyber espionage, zero-day attacks, and malware. Which of the following tools must the organization employ to protect its critical infrastructure?

  A. Robotium

  B. BalenaCloud

  C. Flowmon

  D. IntentFuzzer

  Correct Answer: B

  Source: https://www.flowmon.com Flowmon empowers manufacturers and utility companies to ensure the reliability of their industrial networks confidently to avoid downtime and disruption of service continuity. This can be achieved by continuous monitoring and anomaly detection so that malfunctioning devices or security incidents, such as cyber espionage, zero- days, or malware, can be reported and remedied as quickly as possible.

• Question 90:

  Which results will be returned with the following Google search query? site:target.com site:Marketing.target.com accounting

  A. Results from matches on the site marketing.target.com that are in the domain target.com but do not include the word accounting.

  B. Results matching all words in the query.

  C. Results for matches on target.com and Marketing.target.com that include the word "accounting"

  D. Results matching "accounting" in domain target.com but not on the site Marketing.target.com

  Correct Answer: D