EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 131:

  The process of creating a system which divides documents based on their security level to manage access to private data is known as

  A. security coding

  B. data security system

  C. data classification

  D. privacy protection

  Correct Answer: C

• Question 132:

  The ability to hold intruders accountable in a court of law is important. Which of the following activities are needed to ensure the highest possibility for successful prosecution?

  A. Well established and defined digital forensics process

  B. Establishing Enterprise-owned Botnets for preemptive attacks

  C. Be able to retaliate under the framework of Active Defense

  D. Collaboration with law enforcement

  Correct Answer: A

• Question 133:

  The process for identifying, collecting, and producing digital information in support of legal proceedings is called

  A. chain of custody.

  B. electronic discovery.

  C. evidence tampering.

  D. electronic review.

  Correct Answer: B

• Question 134:

  The process of identifying and classifying assets is typically included in the

  A. Threat analysis process

  B. Asset configuration management process

  C. Business Impact Analysis

  D. Disaster Recovery plan

  Correct Answer: B

• Question 135:

  Which wireless encryption technology makes use of temporal keys?

  A. Wireless Application Protocol (WAP)

  B. Wifi Protected Access version 2 (WPA2)

  C. Wireless Equivalence Protocol (WEP)

  D. Extensible Authentication Protocol (EAP)

  Correct Answer: B

• Question 136:

  Which of the following backup sites takes the longest recovery time?

  A. Cold site

  B. Hot site

  C. Warm site

  D. Mobile backup site

  Correct Answer: A

• Question 137:

  Network Forensics is the prerequisite for any successful legal action after attacks on your Enterprise Network. Which is the single most important factor to introducing digital evidence into a court of law?

  A. Comprehensive Log-Files from all servers and network devices affected during the attack

  B. Fully trained network forensic experts to analyze all data right after the attack

  C. Uninterrupted Chain of Custody

  D. Expert forensics witness

  Correct Answer: C

• Question 138:

  Your organization provides open guest wireless access with no captive portals. What can you do to assist with law enforcement investigations if one of your guests is suspected of committing an illegal act using your network?

  A. Configure logging on each access point

  B. Install a firewall software on each wireless access point.

  C. Provide IP and MAC address

  D. Disable SSID Broadcast and enable MAC address filtering on all wireless access points.

  Correct Answer: C

• Question 139:

  You are having a penetration test done on your company network and the leader of the team says they discovered all the network devices because no one had changed the Simple Network Management Protocol (SNMP) community strings from the defaults. Which of the following is a default community string?

  A. Execute

  B. Read

  C. Administrator

  D. Public

  Correct Answer: D

• Question 140:

  An access point (AP) is discovered using Wireless Equivalent Protocol (WEP). The ciphertext sent by the AP is encrypted with the same key and cipher used by its stations. What authentication method is being used?

  A. Shared key

  B. Asynchronous

  C. Open

  D. None

  Correct Answer: A