EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 991:

  > NMAP –sn 192.168.11.200-215

  The NMAP command above performs which of the following?

  A. A ping scan

  B. A trace sweep

  C. An operating system detect

  D. A port scan

  Correct Answer: A

• Question 992:

  The "Black box testing" methodology enforces which kind of restriction?

  A. Only the external operation of a systemis accessible to the tester

  B. The internal operation of a system is completely known to the tester.

  C. Only the internal operation of a system is known to the tester.

  D. The internal operation of a system is only partly accessible to the tester.

  Correct Answer: A

• Question 993:

  It is a short-range wireless communication technology intended to replace the cables connecting portables of fixed deviceswhile maintaining high levels of security. It allows mobile phones, computers and other devices to connect and communicate using a short- range wireless connection.

  Which of the following terms best matches the definition?

  A. Bluetooth

  B. Radio-Frequency Identification

  C. WLAN

  D. InfraRed

  Correct Answer: A

• Question 994:

  Which of the following statements regarding ethical hacking is incorrect?

  A. Testing should be remotely performed offsite.

  B. Ethical hackers should never use tools that have potential of exploiting vulnerabilities in the organizations IT system.

  C. Ethical hacking should not involve writing to or modifying the target systems.

  D. An organization should use ethical hackers who do not sell hardware/software or other consulting services.

  Correct Answer: B

• Question 995:

  Jimmy is standing outside a secure entrance to a facility. He is pretending to having a tense conversation

  on his cell phone as an authorized employee badges in.

  Jimmy, while still on the phone, grabs the door as it beginsto close.

  What just happened?

  A. Masquading

  B. Phishing

  C. Whaling

  D. Piggybacking

  Correct Answer: D

• Question 996:

  When you are testing a web application, it is very useful to employ a prosy tool to save every request and response.Nyou can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers manually to get more precise results than if using web vulnerability scanners.

  What proxy tool will help you find web vulnerabilities?

  A. Burpsuite

  B. Dimitry

  C. Proxychains

  D. Maskgen

  Correct Answer: A

• Question 997:

  You are attempting to man-in-the-middle a session. Which protocol will allow you to guess a sequence number?

  A. ICMP

  B. TCP

  C. UDP

  D. UPX

  Correct Answer: B

• Question 998:

  The chance of a hard drive failure is once every three years. The cost to buy a new hard drive is $300. It will require 10 hours to restore the OS and software to the new hard disk. It will require a further 4 hours to restore the database from the last backup to the new hard disk. The recovery person earns $10/hour. Calculate theSLE, ARO, and ALE. Assume the EF = 1 (100%).

  What is the closest approximate cost of this replacement and recovery operation per year?

  A. $100

  B. $146

  C. 440

  D. 1320

  Correct Answer: B

• Question 999:

  Under the "Post-attach Phase and Activities," it is the responsibility of the tester to restore the system to a pre-test state.

  Which of the following activities should not be included in this phase?

  A. Removing all files uploaded on the system

  B. Cleaning all registry entries

  C. Mapping of network state

  D. Removing all tools and maintaining backdoor for reporting

  E. All should be included.

  Correct Answer: A

• Question 1000:

  An Internet Service Provider (ISP) has a need to authenticate users connecting using analog modems, digital Subscriber Line (DSL), wireless data services, and virtual Private Networks (VPN) over a Frame Relay network.

  Which AAA protocol is most likely able to handle this requirement?

  A. DIAMETER

  B. Kerberos

  C. RADIUS

  D. TACACS+

  Correct Answer: D