EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 141:

  Which of the following is the MAIN security concern for public cloud computing?

  A. Unable to control physical access to the servers

  B. Unable to track log on activity

  C. Unable to run anti-virus scans

  D. Unable to patch systems as needed

  Correct Answer: A

• Question 142:

  Security related breaches are assessed and contained through which of the following?

  A. The IT support team.

  B. A forensic analysis.

  C. Incident response

  D. Physical security team.

  Correct Answer: C

• Question 143:

  Which of the following is a symmetric encryption algorithm?

  A. 3DES

  B. MD5

  C. ECC

  D. RSA

  Correct Answer: A

• Question 144:

  What is the FIRST step in developing the vulnerability management program?

  A. Baseline the Environment

  B. Maintain and Monitor

  C. Organization Vulnerability

  D. Define Policy

  Correct Answer: A

• Question 145:

  What is the term describing the act of inspecting all real-time Internet traffic (i.e., packets) traversing a major Internet backbone without introducing any apparent latency?

  A. Traffic Analysis

  B. Deep-Packet inspection

  C. Packet sampling

  D. Heuristic analysis

  Correct Answer: B

• Question 146:

  Your penetration testing team installs an in-line hardware key logger onto one of your network machines. Which of the following is of major concern to the security organization?

  A. In-line hardware keyloggers don't require physical access

  B. In-line hardware keyloggers don't comply to industry regulations

  C. In-line hardware keyloggers are undetectable by software

  D. In-line hardware keyloggers are relatively inexpensive

  Correct Answer: C

• Question 147:

  In terms of supporting a forensic investigation, it is now imperative that managers, first- responders, etc., accomplish the following actions to the computer under investigation:

  A. Secure the area and shut-down the computer until investigators arrive

  B. Secure the area and attempt to maintain power until investigators arrive

  C. Immediately place hard drive and other components in an anti-static bag

  D. Secure the area.

  Correct Answer: B

• Question 148:

  Which of the following statements about Encapsulating Security Payload (ESP) is true?

  A. It is an IPSec protocol.

  B. It is a text-based communication protocol.

  C. It uses TCP port 22 as the default port and operates at the application layer.

  D. It uses UDP port 22

  Correct Answer: A

• Question 149:

  The general ledger setup function in an enterprise resource package allows for setting accounting periods. Access to this function has been permitted to users in finance, the shipping department, and production scheduling. What is the most likely reason for such broad access?

  A. The need to change accounting periods on a regular basis.

  B. The requirement to post entries for a closed accounting period.

  C. The need to create and modify the chart of accounts and its allocations.

  D. The lack of policies and procedures for the proper segregation of duties.

  Correct Answer: D

• Question 150:

  Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus. Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

  A. Containment

  B. Recovery

  C. Identification

  D. Eradication

  Correct Answer: D