EC-COUNCIL EC-COUNCIL Certifications 312-50V9 Questions & Answers

• Question 581:

  Which of the following is NOT an ideal choice for biometric controls?

  A. Iris patterns

  B. Fingerprints

  C. Height and weight

  D. Voice

  Correct Answer: C Section: (none)

• Question 582:

  While you were gathering information as part of security assessments for one of your clients, you were able to gather data that show your client is involved with fraudulent activities. What should you do?

  A. Immediately stop work and contact the proper legal authorities

  B. Ignore the data and continue the assessment until completed as agreed

  C. Confront the client in a respectful manner and ask her about the data

  D. Copy the data to removable media and keep it in case you need it

  Correct Answer: A Section: (none)

• Question 583:

  You've just discovered a server that is currently active within the same network with the machine you recently compromised. You ping it but it did not respond. What could be the case?

  A. TCP/IP doesn't support ICMP

  B. ARP is disabled on the target server

  C. ICMP could be disabled on the target server D. You need to run the ping command with root privileges

  Correct Answer: C Section: (none)

• Question 584:

  What tool should you use when you need to analyze extracted metadata from files you collected when you were in the initial stage of penetration test (information gathering)?

  A. Armitage

  B. Dimitry

  C. Metagoofil

  D. cdpsnarf

  Correct Answer: C Section: (none)

• Question 585:

  What is the best Nmap command to use when you want to list all devices in the same network quickly after you successfully identified a server whose IP address is 10.10.0.5?

  A. nmap -T4 -F 10.10.0.0/24

  B. nmap -T4 -q 10.10.0.0/24

  C. nmap -T4 -O 10.10.0.0/24

  D. nmap -T4 -r 10.10.1.0/24

  Correct Answer: A Section: (none)

• Question 586:

  While doing a technical assessment to determine network vulnerabilities, you used the TCP XMAS scan. What would be the response of all open ports?

  A. The port will send an ACK

  B. The port will send a SYN

  C. The port will ignore the packets

  D. The port will send an RST

  Correct Answer: C Section: (none)

  Reference: https://nmap.org/book/man-port-scanning-techniques.html

• Question 587:

  Which of the following tools is used by pen testers and analysts specifically to analyze links between data using link analysis and graphs?

  A. Metasploit

  B. Wireshark

  C. Maltego

  D. Cain and Abel

  Correct Answer: C Section: (none)

• Question 588:

  If you are to determine the attack surface of an organization, which of the following is the BEST thing to do?

  A. Running a network scan to detect network services in the corporate DMZ

  B. Reviewing the need for a security clearance for each employee

  C. Using configuration management to determine when and where to apply security patches

  D. Training employees on the security policy regarding social engineering

  Correct Answer: A Section: (none)

• Question 589:

  It is a widely used standard for message logging. It permits separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. This protocol is specifically designed for transporting event messages. Which of the following is being described?

  A. SNMP

  B. ICMP

  C. SYSLOG

  D. SMS

  Correct Answer: C Section: (none)

• Question 590:

  The chance of a hard drive failure is known to be once every four years. The cost of a new hard drive is $500. EF (Exposure Factor) is about 0.5. Calculate for the Annualized Loss Expectancy (ALE).

  A. $62.5

  B. $250

  C. $125

  D. $65.2

  Correct Answer: A Section: (none)