EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 961:

  What term describes the amount of risk that remains after the vulnerabilities are classified and the countermeasures have been deployed?

  A. Inherent Risk

  B. ResidualRisk

  C. Deferred Risk

  D. Impact Risk

  Correct Answer: B

• Question 962:

  Ricardo wants to send secret messages to acompetitor company. To secure these messages, he uses a technique of hiding a secret message within an ordinary message, the technique provides 'security through obscurity'. What technique is Ricardo using?

  A. RSA algorithm

  B. Steganography

  C. Encryption

  D. Public-key cryptography

  Correct Answer: B

• Question 963:

  Session splicing is an IDS evasiontechnique in which an attacker delivers data in multiple, smallsized packets to the target computer, making it very difficult for an IDS to detect the attack signatures.

  Which tool can used to perform session splicing attacks?

  A. Hydra

  B. Burp

  C. Whisker

  D. Tcpsplice

  Correct Answer: C

• Question 964:

  An attacker has installed a RAT on a host. The attacker wants to ensure that when a user attempts to go to

  www.MyPersonalBank.com, that the user is directed to a phishing site.

  Which file does the attacker needto modify?

  A. Hosts

  B. Networks

  C. Boot.ini

  D. Sudoers

  Correct Answer: A

• Question 965:

  Which of the following is assured by the use of a hash?

  A. Availability

  B. Confidentiality

  C. Authentication

  D. Integrity

  Correct Answer: D

• Question 966:

  Which of the following is the successor of SSL?

  A. RSA

  B. GRE

  C. TLS

  D. IPSec

  Correct Answer: C

• Question 967:

  It is a regulation that has a set if guideline,which should be adhered to by anyone who handles any electronic medical data. These guidelines stipulate that all medical practices must ensure that all necessary measures are in place while saving, accessing, and sharing any electronic medical data to keep patient data secure.

  Which of the following regulations best matches the description?

  A. HIPAA

  B. COBIT

  C. ISO/IEC 27002

  D. FISMA

  Correct Answer: A

• Question 968:

  PGP, SSL, and IKE are all examples of which type of cryptography?

  A. Hash Algorithm

  B. Secret Key

  C. Public Key

  D. Digest

  Correct Answer: C

• Question 969:

  In 2007, this wireless security algorithm was rendered useless by capturing packets and discovering the passkey in a matter of seconds. This security flaw led to a network invasion of TJ Maxx and data theft through a technique known wardriving.

  Which algorithm is this referring to?

  A. Wired Equivalent Privacy (WEP)

  B. Temporal Key Integrity Protocol (TRIP)

  C. Wi-Fi Protected Access (WPA)

  D. Wi-Fi Protected Access 2(WPA2)

  Correct Answer: A

• Question 970:

  When you are collecting information to perform a dataanalysis, Google commands are very useful to find sensitive information and files. These files may contain information about passwords, system functions, or documentation.

  What command will help you to search files using Google as a search engine?

  A. site:target.com file:xls username password email

  B. domain: target.com archive:xls username password email

  C. site: target.com filetype:xls username password email

  D. inurl: target.com filename:xls username password email

  Correct Answer: C