EC-COUNCIL EC-COUNCIL Certifications 312-50V9 Questions & Answers

• Question 111:

  What is the best defense against privilege escalation vulnerability?

  A. Patch systems regularly and upgrade interactive login privileges at the system administrator level.

  B. Run administrator and applications on least privileges and use a content registry for tracking.

  C. Run services with least privileged accounts and implement multi-factor authentication and authorization.

  D. Review user roles and administrator privileges for maximum utilization of automation services.

  Correct Answer: C Section: (none)

• Question 112:

  Which of the following tools will scan a network to perform vulnerability checks and compliance auditing?

  A. NMAP

  B. Metasploit

  C. Nessus

  D. BeEF

  Correct Answer: C Section: (none)

• Question 113:

  On a Linux device, which of the following commands will start the Nessus client in the background so that the Nessus server can be configured?

  A. nessus +

  B. nessus *s

  C. nessus and

  D. nessus -d

  Correct Answer: C Section: (none)

• Question 114:

  A hacker searches in Google for filetype:pcf to find Cisco VPN config files. Those files may contain connectivity passwords that can be decoded with which of the following?

  A. Cupp

  B. Nessus

  C. Cain and Abel

  D. John The Ripper Pro

  Correct Answer: C Section: (none)

• Question 115:

  A hacker is attempting to use nslookup to query Domain Name Service (DNS). The hacker uses the nslookup interactive mode for the search. Which command should the hacker type into the command shell to request the appropriate records?

  A. Locate type=ns

  B. Request type=ns

  C. Set type=ns

  D. Transfer type=ns

  Correct Answer: C Section: (none)

• Question 116:

  Which command line switch would be used in NMAP to perform operating system detection?

  A. -OS

  B. -sO

  C. -sP

  D. -O

  Correct Answer: D Section: (none)

• Question 117:

  A hacker is attempting to see which ports have been left open on a network. Which NMAP switch would the hacker use?

  A. -sO

  B. -sP

  C. -sS

  D. -sU

  Correct Answer: A Section: (none)

• Question 118:

  ICMP ping and ping sweeps are used to check for active systems and to check

  A. if ICMP ping traverses a firewall.

  B. the route that the ICMP ping took.

  C. the location of the switchport in relation to the ICMP ping.

  D. the number of hops an ICMP ping takes to reach a destination.

  Correct Answer: A Section: (none)

• Question 119:

  A penetration tester is attempting to scan an internal corporate network from the internet without alerting the border sensor. Which is the most efficient technique should the tester consider using?

  A. Spoofing an IP address

  B. Tunneling scan over SSH

  C. Tunneling over high port numbers

  D. Scanning using fragmented IP packets

  Correct Answer: B Section: (none)

• Question 120:

  A company has five different subnets: 192.168.1.0, 192.168.2.0, 192.168.3.0, 192.168.4.0 and

  192.168.5.0. How can NMAP be used to scan these adjacent Class C networks?

  A. NMAP -P 192.168.1-5.

  B. NMAP -P 192.168.0.0/16

  C. NMAP -P 192.168.1.0,2.0,3.0,4.0,5.0

  D. NMAP -P 192.168.1/17

  Correct Answer: A Section: (none)