EC-COUNCIL EC-COUNCIL Certifications 312-50V9 Questions & Answers

• Question 551:

  While performing online banking using a Web browser, Kyle receives an email that contains an image of a well-crafted art. Upon clicking the image, a new tab on the web browser opens and shows an animated GIF of bills and coins being swallowed by a crocodile. After several days, Kyle noticed that all his funds on the bank was gone. What Web browser-based security vulnerability got exploited by the hacker?

  A. Clickjacking

  B. Web Form Input Validation

  C. Cross-Site Request Forgery

  D. Cross-Site Scripting

  Correct Answer: C Section: (none)

• Question 552:

  Jack was attempting to fingerprint all machines in the network using the following Nmap syntax:

  invictus@victim_server:~$ nmap -T4 -0 10.10.0.0/24

  TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxx. QUITTING!

  Obviously, it is not going through. What is the issue here?

  A. OS Scan requires root privileges

  B. The nmap syntax is wrong.

  C. The outgoing TCP/IP fingerprinting is blocked by the host firewall

  D. This is a common behavior for a corrupted nmap application

  Correct Answer: A Section: (none)

• Question 553:

  When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should you implement?

  A. AH Tunnel mode

  B. AH promiscuous

  C. ESP transport mode

  D. ESP confidential

  Correct Answer: C Section: (none)

• Question 554:

  What would you type on the Windows command line in order to launch the Computer Management Console provided that you are logged in as an admin?

  A. c:\compmgmt.msc

  B. c:\gpedit

  C. c:\ncpa.cpl

  D. c:\services.msc

  Correct Answer: A Section: (none)

• Question 555:

  Which of the following is a wireless network detector that is commonly found on Linux?

  A. Kismet

  B. Abel

  C. Netstumbler

  D. Nessus

  Correct Answer: A Section: (none)

• Question 556:

  Which specific element of security testing is being assured by using hash?

  A. Authentication

  B. Integrity

  C. Confidentiality

  D. Availability

  Correct Answer: B Section: (none)

• Question 557:

  Which of the following is a restriction being enforced in "white box testing?"

  A. Only the internal operation of a system is known to the tester

  B. The internal operation of a system is completely known to the tester

  C. The internal operation of a system is only partly accessible to the tester

  D. Only the external operation of a system is accessible to the tester

  Correct Answer: B Section: (none)

• Question 558:

  Which of the following is a vulnerability in GNU's bash shell (discovered in September of 2014) that gives attackers access to run remote commands on a vulnerable system?

  A. Shellshock

  B. Rootshell

  C. Rootshock

  D. Shellbash

  Correct Answer: A Section: (none)

• Question 559:

  A software tester is randomly generating invalid inputs in an attempt to crash the program. Which of the following is a software testing technique used to determine if a software program properly handles a wide range of invalid input?

  A. Mutating

  B. Randomizing

  C. Fuzzing

  D. Bounding

  Correct Answer: C Section: (none)

• Question 560:

  Which of the following is designed to verify and authenticate individuals taking part in a data exchange within an enterprise?

  A. SOA

  B. Single-Sign On

  C. PKI

  D. Biometrics

  Correct Answer: C Section: (none)