EC-COUNCIL EC-COUNCIL Certifications 312-50V9 Questions & Answers

• Question 231:

  Which of the following is an application that requires a host application for replication?

  A. Micro

  B. Worm

  C. Trojan

  D. Virus

  Correct Answer: D Section: (none)

  Computer viruses infect a variety of different subsystems on their hosts. A computer virus is a malware that, when executed, replicates by reproducing it self or infecting other programs by modifying them. Infecting computer programs can include as well, data files, or the boot sector of the hard drive. When this replication succeeds, the affected areas are then said to be "infected".

  References: https://en.wikipedia.org/wiki/Computer_virus

• Question 232:

  Which of the following is a hardware requirement that either an IDS/IPS system or a proxy server must have in order to properly function?

  A. Fast processor to help with network traffic analysis

  B. They must be dual-homed

  C. Similar RAM requirements

  D. Fast network interface cards

  Correct Answer: B Section: (none)

  Dual-homed or dual-homing can refer to either an Ethernet device that has more than one network interface, for redundancy purposes, or in firewall technology, dual-homed is one of the firewall architectures, such as an IDS/IPS system, for implementing preventive security.

  References: https://en.wikipedia.org/wiki/Dual-homed

• Question 233:

  You want to analyze packets on your wireless network. Which program would you use?

  A. Wireshark with Airpcap

  B. Airsnort with Airpcap

  C. Wireshark with Winpcap

  D. Ethereal with Winpcap

  Correct Answer: A Section: (none)

• Question 234:

  Shellshock had the potential for an unauthorized user to gain access to a server. It affected many internetfacing services, which OS did it not directly affect?

  A. Windows

  B. Unix

  C. Linux

  D. OS X

  Correct Answer: A Section: (none)

• Question 235:

  Your next door neighbor, that you do not get along with, is having issues with their network, so he yells to his spouse the network's SSID and password and you hear them both clearly. What do you do with this information?

  A. Nothing, but suggest to him to change the network's SSID and password.

  B. Sell his SSID and password to friends that come to your house, so it doesn't slow down your network.

  C. Log onto to his network, after all it's his fault that you can get in.

  D. Only use his network when you have large downloads so you don't tax your own network.

  Correct Answer: A Section: (none)

• Question 236:

  What attack is used to crack passwords by using a precomputed table of hashed passwords?

  A. Brute Force Attack

  B. Hybrid Attack

  C. Rainbow Table Attack

  D. Dictionary Attack

  Correct Answer: C Section: (none)

• Question 237:

  Which access control mechanism allows for multiple systems to use a central authentication server (CAS)

  that permits users to authenticate once and gain access to multiple systems?

  A. Role Based Access Control (RBAC)

  B. Discretionary Access Control (DAC)

  C. Windows authentication

  D. Single sign-on

  Correct Answer: D Section: (none)

• Question 238:

  ........is an attack type for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. It is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hotspot by posing as a legitimate provider. This type of attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there.

  Fill in the blank with appropriate choice.

  A. Collision Attack

  B. Evil Twin Attack

  C. Sinkhole Attack

  D. Signal Jamming Attack

  Correct Answer: B Section: (none)

• Question 239:

  Which type of security feature stops vehicles from crashing through the doors of a building?

  A. Turnstile

  B. Bollards

  C. Mantrap

  D. Receptionist

  Correct Answer: B Section: (none)

• Question 240:

  In which phase of the ethical hacking process can Google hacking be employed? This is a technique that

  involves manipulating a search string with specific operators to search for vulnerabilities.

  Example:

  allintitle: root passwd

  A. Maintaining Access

  B. Gaining Access

  C. Reconnaissance

  D. Scanning and Enumeration

  Correct Answer: C Section: (none)