EC-COUNCIL EC-COUNCIL Certifications 312-50V9 Questions & Answers

• Question 51:

  The intrusion detection system at a software development company suddenly generates multiple alerts regarding attacks against the company's external webserver, VPN concentrator, and DNS servers. What should the security team do to determine which alerts to check first?

  A. Investigate based on the maintenance schedule of the affected systems.

  B. Investigate based on the service level agreements of the systems.

  C. Investigate based on the potential effect of the incident.

  D. Investigate based on the order that the alerts arrived in.

  Correct Answer: C Section: (none)

• Question 52:

  Which of the following is a common Service Oriented Architecture (SOA) vulnerability?

  A. Cross-site scripting

  B. SQL injection

  C. VPath injection

  D. XML denial of service issues

  Correct Answer: D Section: (none)

• Question 53:

  To reduce the attack surface of a system, administrators should perform which of the following processes to remove unnecessary software, services, and insecure configuration settings?

  A. Harvesting

  B. Windowing

  C. Hardening

  D. Stealthing

  Correct Answer: C Section: (none)

• Question 54:

  Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?

  A. Key registry

  B. Recovery agent

  C. Directory

  D. Key escrow

  Correct Answer: D Section: (none)

• Question 55:

  An attacker has captured a target file that is encrypted with public key cryptography. Which of the attacks below is likely to be used to crack the target file?

  A. Timing attack

  B. Replay attack

  C. Memory trade-off attack

  D. Chosen plain-text attack

  Correct Answer: D Section: (none)

• Question 56:

  Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

  A. Certificate issuance

  B. Certificate validation

  C. Certificate cryptography

  D. Certificate revocation

  Correct Answer: B Section: (none)

• Question 57:

  When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true?

  A. The key entered is a symmetric key used to encrypt the wireless data.

  B. The key entered is a hash that is used to prove the integrity of the wireless data.

  C. The key entered is based on the Diffie-Hellman method.

  D. The key is an RSA key used to encrypt the wireless data.

  Correct Answer: A Section: (none)

• Question 58:

  A Certificate Authority (CA) generates a key pair that will be used for encryption and decryption of email. The integrity of the encrypted email is dependent on the security of which of the following?

  A. Public key

  B. Private key

  C. Modulus length

  D. Email server certificate

  Correct Answer: B Section: (none)

• Question 59:

  What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?

  A. Due to the key size, the time it will take to encrypt and decrypt the message hinders efficient communication.

  B. To get messaging programs to function with this algorithm requires complex configurations.

  C. It has been proven to be a weak cipher; therefore, should not be trusted to protect sensitive data.

  D. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.

  Correct Answer: D Section: (none)

• Question 60:

  An attacker sniffs encrypted traffic from the network and is subsequently able to decrypt it. The attacker can now use which cryptanalytic technique to attempt to discover the encryption key?

  A. Birthday attack

  B. Plaintext attack

  C. Meet in the middle attack

  D. Chosen ciphertext attack

  Correct Answer: D Section: (none)