EC-COUNCIL EC-COUNCIL Certifications 312-50V9 Questions & Answers

• Question 561:

  This configuration allows NIC to pass all traffic it receives to the Central Processing Unit (CPU), instead of passing only the frames that the controller is intended to receive. Select the option that BEST describes the above statement.

  A. Multi-cast mode

  B. WEM

  C. Promiscuous mode

  D. Port forwarding

  Correct Answer: C Section: (none)

• Question 562:

  Which of the following is the BEST way to protect Personally Identifiable Information (PII) from being exploited due to vulnerabilities of varying web applications?

  A. Use cryptographic storage to store all PII

  B. Use full disk encryption on all hard drives to protect PII

  C. Use encrypted communications protocols to transmit PII

  D. Use a security token to log into all Web applications that use PII

  Correct Answer: C Section: (none)

• Question 563:

  A new wireless client that is 802.11 compliant cannot connect to a wireless network given that the client can see the network and it has compatible hardware and software installed. Upon further tests and investigation it was found out that the Wireless Access Point (WAP) was not responding to the association requests being sent by the wireless client. What MOST likely is the issue on this scenario?

  A. The client cannot see the SSID of the wireless network

  B. The WAP does not recognize the client's MAC address.

  C. The wireless client is not configured to use DHCP.

  D. Client is configured for the wrong channel

  Correct Answer: B Section: (none)

• Question 564:

  A possibly malicious sequence of packets that were sent to a web server has been captured by an Intrusion Detection System (IDS) and was saved to a PCAP file. As a network administrator, you need to determine whether this packets are indeed malicious. What tool are you going to use?

  A. Intrusion Prevention System (IPS)

  B. Vulnerability scanner

  C. Protocol analyzer

  D. Network sniffer

  Correct Answer: C Section: (none)

• Question 565:

  You've just gained root access to a Centos 6 server after days of trying. What tool should you use to maintain access?

  A. Disable Key Services

  B. Create User Account

  C. Download and Install Netcat

  D. Disable IPTables

  Correct Answer: B Section: (none)

• Question 566:

  What type of malware is it that restricts access to a computer system that it infects and demands that the user pay a certain amount of money, cryptocurrency, etc. to the operators of the malware to remove the restriction?

  A. Ransomware

  B. Riskware

  C. Adware

  D. Spyware

  Correct Answer: A Section: (none)

• Question 567:

  The following are types of Bluetooth attack EXCEPT_____?

  A. Bluejacking

  B. Bluesmaking

  C. Bluesnarfing

  D. Bluedriving

  Correct Answer: D Section: (none)

• Question 568:

  Which of the following is the BEST approach to prevent Cross-site Scripting (XSS) flaws?

  A. Use digital certificates to authenticate a server prior to sending data.

  B. Verify access right before allowing access to protected information and UI controls.

  C. Verify access right before allowing access to protected information and UI controls.

  D. Validate and escape all information sent to a server.

  Correct Answer: D Section: (none)

• Question 569:

  What tool and process are you going to use in order to remain undetected by an IDS while pivoting and passing traffic over a server you've compromised and gained root access to?

  A. Install and use Telnet to encrypt all outgoing traffic from this server.

  B. Install Cryptcat and encrypt outgoing packets from this server.

  C. Use HTTP so that all traffic can be routed via a browser, thus evading the internal Intrusion Detection Systems.

  D. Use Alternate Data Streams to hide the outgoing packets from this server.

  Correct Answer: B Section: (none)

• Question 570:

  Defining rules, collaborating human workforce, creating a backup plan, and testing the plans are within what phase of the Incident Handling Process?

  A. Preparation phase

  B. Containment phase

  C. Recovery phase

  D. Identification phase

  Correct Answer: A Section: (none)