EC-COUNCIL EC-COUNCIL Certifications 312-50V9 Questions & Answers

• Question 571:

  Which of the following BEST describes how Address Resolution Protocol (ARP) works?

  A. It sends a reply packet for a specific IP, asking for the MAC address

  B. It sends a reply packet to all the network elements, asking for the MAC address from a specific IP

  C. It sends a request packet to all the network elements, asking for the domain name from a specific IP

  D. It sends a request packet to all the network elements, asking for the MAC address from a specific IP

  Correct Answer: D Section: (none)

• Question 572:

  Which of the following is a form of penetration testing that relies heavily on human interaction and often involves tricking people into breaking normal security procedures?

  A. Social Engineering

  B. Piggybacking

  C. Tailgating

  D. Eavesdropping

  Correct Answer: A Section: (none)

• Question 573:

  A server has been infected by a certain type of Trojan. The hacker intended to utilize it to send and host

  junk mails. What type of Trojan did the hacker use?

  A. Turtle Trojans

  B. Ransomware Trojans

  C. Botnet Trojan

  D. Banking Trojans

  Correct Answer: C Section: (none)

• Question 574:

  First thing you do every office day is to check your email inbox. One morning, you received an email from your best friend and the subject line is quite strange. What should you do?

  A. Delete the email and pretend nothing happened.

  B. Forward the message to your supervisor and ask for her opinion on how to handle the situation.

  C. Forward the message to your company's security response team and permanently delete the message from your computer.

  D. Reply to the sender and ask them for more information about the message contents.

  Correct Answer: C Section: (none)

• Question 575:

  LM hash is a compromised password hashing function. Which of the following parameters describe LM

  Hash:?

  I ?The maximum password length is 14 characters.

  II ?There are no distinctions between uppercase and lowercase.

  III ?It's a simple algorithm, so 10,000,000 hashes can be generated per second.

  A. I

  B. I, II, and III

  C. II

  D. I and II

  Correct Answer: B Section: (none)

• Question 576:

  Which of the following BEST describes the mechanism of a Boot Sector Virus?

  A. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

  B. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR

  C. Overwrites the original MBR and only executes the new virus code

  D. Modifies directory table entries so that directory entries point to the virus code instead of the actual program

  Correct Answer: A Section: (none)

• Question 577:

  What is the term coined for logging, recording and resolving events in a company?

  A. Internal Procedure

  B. Security Policy

  C. Incident Management Process

  D. Metrics

  Correct Answer: C Section: (none)

• Question 578:

  XOR is a common cryptographic tool. 10110001 XOR 00111010 is?

  A. 10111100

  B. 11011000

  C. 10011101

  D. 10001011

  Correct Answer: D Section: (none)

• Question 579:

  In order to prevent particular ports and applications from getting packets into an organization, what does a firewall check?

  A. Network layer headers and the session layer port numbers

  B. Presentation layer headers and the session layer port numbers

  C. Application layer port numbers and the transport layer headers

  D. Transport layer port numbers and application layer headers

  Correct Answer: D Section: (none)

• Question 580:

  Suppose you've gained access to your client's hybrid network. On which port should you listen to in order to know which Microsoft Windows workstations has its file sharing enabled?

  A. 1433

  B. 161

  C. 445

  D. 3389

  Correct Answer: C Section: (none)