EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 481:

  Which of the following guidelines or standards is associated with the credit card industry?

  A. Control Objectives for Information and Related Technology (COBIT)

  B. Sarbanes-Oxley Act (SOX)

  C. Health Insurance Portability and Accountability Act (HIPAA)

  D. Payment Card Industry Data Security Standards (PCI DSS)

  Correct Answer: D

• Question 482:

  Employees in a company are no longer able to access Internet web sites on their computers. The network administrator is able to successfully ping IP address of web servers on the Internet and is able to open web sites by using an IP address in place of the URL. The administrator runs the nslookup command for www.eccouncil.org and receives an error message stating there is no response from the server.

  What should the administrator do next?

  A. Configure the firewall to allow traffic on TCP ports 53 and UDP port 53.

  B. Configure the firewall to allow traffic on TCP ports 80 and UDP port 443.

  C. Configure the firewall to allow traffic on TCP port 53.

  D. Configure the firewall to allow traffic on TCP port 8080.

  Correct Answer: A

• Question 483:

  At a Windows Server command prompt, which command could be used to list the running services?

  A. Sc query type= running

  B. Sc query \\servername

  C. Sc query

  D. Sc config

  Correct Answer: C

• Question 484:

  A hacker is attempting to see which IP addresses are currently active on a network. Which NMAP switch would the hacker use?

  A. -sO

  B. -sP

  C. -sS

  D. -sU

  Correct Answer: B

• Question 485:

  A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

  A. Issue the pivot exploit and set the meterpreter.

  B. Reconfigure the network settings in the meterpreter.

  C. Set the payload to propagate through the meterpreter.

  D. Create a route statement in the meterpreter.

  Correct Answer: D

• Question 486:

  A company has hired a security administrator to maintain and administer Linux and Windows-based systems. Written in the nightly report file is the followinG.

  Firewall log files are at the expected value of 4 MB. The current time is 12am. Exactly two hours later the size has decreased considerably. Another hour goes by and the log files have shrunk in size again.

  Which of the following actions should the security administrator take?

  A. Log the event as suspicious activity and report this behavior to the incident response team immediately.

  B. Log the event as suspicious activity,call a manager,and report this as soon as possible.

  C. Run an anti-virus scan because it is likely the system is infected by malware.

  D. Log the event as suspicious activity,continue to investigate,and act according to the site's security policy.

  Correct Answer: D

• Question 487:

  Which security control role does encryption meet?

  A. Preventative

  B. Detective

  C. Offensive

  D. Defensive

  Correct Answer: A

• Question 488:

  A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area.

  Which type of attack did the consultant perform?

  A. Man trap

  B. Tailgating

  C. Shoulder surfing

  D. Social engineering

  Correct Answer: B

• Question 489:

  A hacker is attempting to see which ports have been left open on a network. Which NMAP switch would the hacker use?

  A. -sO

  B. -sP

  C. -sS

  D. -sU

  Correct Answer: A

• Question 490:

  The network administrator for a company is setting up a website with e-commerce capabilities. Packet sniffing is a concern because credit card information will be sent electronically over the Internet. Customers visiting the site will need to encrypt the data with HTTPS.

  Which type of certificate is used to encrypt and decrypt the data?

  A. Asymmetric

  B. Confidential

  C. Symmetric

  D. Non-confidential

  Correct Answer: A