EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 1001:

  Which of the following isthe greatest threat posed by backups?

  A. An un-encrypted backup can be misplaced or stolen

  B. A back is incomplete because no verification was performed.

  C. A backup is the source of Malware or illicit information.

  D. A backup is unavailable duringdisaster recovery.

  Correct Answer: A

• Question 1002:

  What does a firewall check to prevent particularports and applications from getting packets into an organizations?

  A. Transport layer port numbers and application layer headers

  B. Network layer headers and the session layer port numbers

  C. Application layer port numbers and the transport layer headers

  D. Presentation layer headers and the session layer port numbers

  Correct Answer: A

• Question 1003:

  You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line.

  Which command would you use?

  A. c:\services.msc

  B. c:\ncpa.cp

  C. c:\compmgmt.msc

  D. c:\gpedit

  Correct Answer: C

• Question 1004:

  The phase will increase the odds of success in later phases of the penetration test. It is also the very first step in Information Gathering, and it will tell you what the"landscape" looks like.

  What is the most important phase of ethical hacking in which you need to spend a considerable amount of time?

  A. Network Mapping

  B. Gaining access

  C. Footprinting

  D. Escalating privileges

  Correct Answer: C

• Question 1005:

  You have successfully gained access to your client's internal network and successfully comprised a linux server which is part of the internal IP network. You want to know which Microsoft Windows workstation have the sharing enabled.

  Which port would you see listeningon these Windows machines in the network?

  A. 1443

  B. 3389

  C. 161

  D. 445

  Correct Answer: D

• Question 1006:

  Your team has won a contract to infiltrate an organization. The company wants to have the attack be a realistic as possible; therefore, they did not provide any information besides the company name.

  What should be thefirst step in security testing the client?

  A. Scanning

  B. Escalation

  C. Enumeration

  D. Reconnaissance

  Correct Answer: D

• Question 1007:

  What is the process of logging, recording, and resolving events that take place in an organization?

  A. Metrics

  B. Security Policy

  C. Internal Procedure

  D. Incident Management Process

  Correct Answer: D

• Question 1008:

  You have successfully gained access to a linux server and would like to ensure that the succeeding outgoing traffic from the server will not be caught by a Network Based Intrusion Detection System (NIDS).

  Which is the best way to evade the NIDS?

  A. Out of band signaling

  B. Encryption

  C. Alternate Data Streams

  D. Protocol Isolation

  Correct Answer: B