EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 551:

  Which of the following are variants of mandatory access control mechanisms? (Choose two.)

  A. Two factor authentication

  B. Acceptable use policy

  C. Username / password

  D. User education program

  E. Sign in register

  Correct Answer: AC

• Question 552:

  In the OSI model, where does PPTP encryption take place?

  A. Transport layer

  B. Application layer

  C. Data link layer

  D. Network layer

  Correct Answer: C

• Question 553:

  What is the main advantage that a network-based IDS/IPS system has over a host-based solution?

  A. They do not use host system resources.

  B. They are placed at the boundary,allowing them to inspect all traffic.

  C. They are easier to install and configure.

  D. They will not interfere with user interfaces.

  Correct Answer: A

• Question 554:

  A Network Administrator was recently promoted to Chief Security Officer at a local university. One of employee's new responsibilities is to manage the implementation of an RFID card access system to a new server room on campus. The server room will house student enrollment information that is securely backed up to an off-site location.

  During a meeting with an outside consultant, the Chief Security Officer explains that he is concerned that the existing security controls have not been designed properly. Currently, the Network Administrator is responsible for approving and issuing RFID card access to the server room, as well as reviewing the electronic access logs on a weekly basis.

  Which of the following is an issue with the situation?

  A. Segregation of duties

  B. Undue influence

  C. Lack of experience

  D. Inadequate disaster recovery plan

  Correct Answer: A

• Question 555:

  A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24.

  Which of the following has occurred?

  A. The gateway is not routing to a public IP address.

  B. The computer is using an invalid IP address.

  C. The gateway and the computer are not on the same network.

  D. The computer is not using a private IP address.

  Correct Answer: A

• Question 556:

  While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

  A. Validate web content input for query strings.

  B. Validate web content input with scanning tools.

  C. Validate web content input for type,length,and range.

  D. Validate web content input for extraneous queries.

  Correct Answer: C

• Question 557:

  A recently hired network security associate at a local bank was given the responsibility to perform daily scans of the internal network to look for unauthorized devices. The employee decides to write a script that will scan the network for unauthorized devices every morning at 5:00 am.

  Which of the following programming languages would most likely be used?

  A. PHP

  B. C#

  C. Python

  D. ASP.NET

  Correct Answer: C

• Question 558:

  Which of the following is a strong post designed to stop a car?

  A. Gate

  B. Fence

  C. Bollard

  D. Reinforced rebar

  Correct Answer: C

• Question 559:

  What are common signs that a system has been compromised or hacked? (Choose three.)

  A. Increased amount of failed logon events

  B. Patterns in time gaps in system and/or event logs

  C. New user accounts created

  D. Consistency in usage baselines

  E. Partitions are encrypted

  F. Server hard drives become fragmented

  Correct Answer: ABC

• Question 560:

  Which of the following tools would be the best choice for achieving compliance with PCI Requirement 11?

  A. Truecrypt

  B. Sub7

  C. Nessus

  D. Clamwin

  Correct Answer: C