Home / ECCouncil / 312-50v12

ECCouncil 312-50v12 Practice Test - Questions Answers, Page 10

Question list

List of questions

Question 91

(0)

What is the purpose of a demilitarized zone on a network?

Question 92

(0)

Which of the following Linux commands will resolve a domain name into IP address?

Question 93

(0)

Shellshock allowed an unauthorized user to gain access to a server. It affected many Internet-facing services, which OS did it not directly affect?

Question 94

(0)

Which regulation defines security and privacy controls for Federal information systems and organizations?

Question 95

(0)

What is a "Collision attack" in cryptography?

Question 96

(0)

Which of the following tools can be used for passive OS fingerprinting?

Question 97

(0)

Which of the following describes the characteristics of a Boot Sector Virus?

Question 98

(0)

Your company was hired by a small healthcare provider to perform a technical assessment on the network. What is the best approach for discovering vulnerabilities on a Windows-based computer?

Question 99

(0)

Which of the following is a command line packet analyzer similar to GUI-based Wireshark?

Question 100

(0)

DHCP snooping is a great solution to prevent rogue DHCP servers on your network. Which security feature on switchers leverages the DHCP snooping database to help prevent man-in-the-middle attacks?

Related questions

The "Gray-box testing" methodology enforces what kind of restriction?

A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?

In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various search engines, social networking sites, and web spidering tools. In this process, she also uses an automated tool to gather a list of words from the target website to further perform a brute-force attack on the previously gathered email addresses. What is the tool used by Hailey for gathering a list of words from the target website?

Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. Identify the behavior of the adversary In the above scenario.

You are the Network Admin, and you get a complaint that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL. What may be the problem?

Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?

Upon establishing his new startup, Tom hired a cloud service provider (CSP) but was dissatisfied with their service and wanted to move to another CSP. What part of the contract might prevent him from doing so?

A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?

A penetration tester was assigned to scan a large network range to find live hosts. The network is known for using strict TCP filtering rules on its firewall, which may obstruct common host discovery techniques. The tester needs a method that can bypass these firewall restrictions and accurately identify live systems. What host discovery technique should the tester use?

Attacker Rony Installed a rogue access point within an organization's perimeter and attempted to Intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by Johnson in the above scenario?

Question 91

What is the purpose of a demilitarized zone on a network?

To scan all traffic coming through the DMZ to the internal network

To only provide direct access to the nodes within the DMZ and protect the network behind it

To provide a place to put the honeypot

To contain the network devices you wish to protect

Show Answer Comment (0)

Question 92

Which of the following Linux commands will resolve a domain name into IP address?

>host-t a hackeddomain.com

>host-t ns hackeddomain.com

>host -t soa hackeddomain.com

>host -t AXFR hackeddomain.com

Show Answer Comment (0)

Question 93

Shellshock allowed an unauthorized user to gain access to a server. It affected many Internet-facing services, which OS did it not directly affect?

Linux

Unix

OS X

Windows

Show Answer Comment (0)

Question 94

Which regulation defines security and privacy controls for Federal information systems and organizations?

HIPAA

EU Safe Harbor

PCI-DSS

NIST-800-53

Show Answer Comment (0)

Question 95

What is a "Collision attack" in cryptography?

Collision attacks try to get the public key

Collision attacks try to break the hash into three parts to get the plaintext value

Collision attacks try to break the hash into two parts, with the same bytes in each part to get the private key

Collision attacks try to find two inputs producing the same hash

Show Answer Comment (0)

Question 96

Which of the following tools can be used for passive OS fingerprinting?

nmap

tcpdump

tracert

ping

Show Answer Comment (0)

Question 97

Which of the following describes the characteristics of a Boot Sector Virus?

Modifies directory table entries so that directory entries point to the virus code instead of the actual program.

Moves the MBR to another location on the RAM and copies itself to the original location of the MBR.

Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR.

Overwrites the original MBR and only executes the new virus code.

Show Answer Comment (0)

Question 98

Your company was hired by a small healthcare provider to perform a technical assessment on the network.

What is the best approach for discovering vulnerabilities on a Windows-based computer?

Use the built-in Windows Update tool

Use a scan tool like Nessus

Check MITRE.org for the latest list of CVE findings

Create a disk image of a clean Windows installation

Show Answer Comment (0)

Question 99

Which of the following is a command line packet analyzer similar to GUI-based Wireshark?

nessus

tcpdump

ethereal

jack the ripper

Show Answer Comment (0)

Question 100

DHCP snooping is a great solution to prevent rogue DHCP servers on your network. Which security feature on switchers leverages the DHCP snooping database to help prevent man-in-the-middle attacks?

Spanning tree

Dynamic ARP Inspection (DAI)

Port security

Layer 2 Attack Prevention Protocol (LAPP)

Show Answer Comment (0)

Total 573 questions

8 9 10 11 12

Go to page: of 58