Share ECCouncil 312-50V10 exam practice questions and answers from exam2pass latest updated 312-50V10 dumps free of charge.
Get the latest uploaded 312-50V10 dumps pdf from google driver online. To get the full ECCouncil 312-50V10 dumps PDF or dumps
VCE visit: https://www.exam2pass.com/312-50v10.html (Q&As: 747). all ECCouncil 312-50V10 exam questions have been updated, the answer has been corrected!
Make sure your exam questions are real and effective to help you pass your first exam!
[ECCouncil 312-50V10 Dumps pdf] Latest ECCouncil 312-50V10 Dumps PDF collected by exam2pass Google Drive:
https://drive.google.com/file/d/14b62RgluIs5WfsdSEfZW4HvJWhjrDZr8/
[ECCouncil 312-50V10 Youtube] ECCouncil 312-50V10 exam questions and answers are shared free of charge from Youtube watching uploads from exam2pass
Latest Update ECCouncil 312-50V10 Exam Practice Questions and Answers Online Test
QUESTION 1
Which of the following is an example of two factor authentication?
A. PIN Number and Birth Date
B. Username and Password
C. Digital Certificate and Hardware Token
D. Fingerprint and Smartcard ID
Correct Answer: D
QUESTION 2
Which protocol and port number might be needed in order to send log messages to a log analysis tool that resides
behind a firewall?
A. UDP 123
B. UDP 541
C. UDP 514
D. UDP 415
Correct Answer: C
QUESTION 3
The precaution of prohibiting employees from bringing personal computing devices into a facility is what type of security
control?
A. Physical
B. Procedural
C. Technical
D. Compliance
Correct Answer: B
QUESTION 4
WPA2 uses AES for wireless data encryption at which of the following encryption levels?
A. 64 bit and CCMP
B. 128 bit and CRC
C. 128 bit and CCMP
D. 128 bit and TKIP
Correct Answer: C
QUESTION 5
Fred is the network administrator for his company. Fred is testing an internal switch.
From an external IP address, Fred wants to try and trick this switch into thinking it already has established a session
with his computer. How can Fred accomplish this?
A. Fred can accomplish this by sending an IP packet with the RST/SIN bit and the source address of his computer.
B. He can send an IP packet with the SYN bit and the source address of his computer.
C. Fred can send an IP packet with the ACK bit set to zero and the source address of the switch.
D. Fred can send an IP packet to the switch with the ACK bit and the source address of his machine.
Correct Answer: D
QUESTION 6
Your team has won a contract to infiltrate an organization. The company wants to have the attack be as realistic as
possible; therefore, they did not provide any information besides the company name. What should be the first step in
security testing the client?
A. Reconnaissance
B. Enumeration
C. Scanning
D. Escalation
Correct Answer: A
Phases of hacking Phase 1–Reconnaissance Phase 2–Scanning Phase 3–Gaining Access Phase 4–Maintaining
Access Phase 5–Covering Tracks
Phase 1: Passive and Active Reconnaissance
References: http://hack-o-crack.blogspot.se/2010/12/five-stages-of-ethical-hacking.html
QUESTION 7
Your next-door neighbor, that you do not get along with, is having issues with their network, so he yells to his spouse the
network\\’s SSID and password and you hear them both clearly. What do you do with this information?
A. Nothing, but suggest to him to change the network\\’s SSID and password.
B. Sell his SSID and password to friends that come to your house, so it doesn\\’t slows down your network.
C. Log onto his network, after all, it\\’s his fault that you can get in.
D. Only use his network when you have large downloads so you don\\’t tax your own network.
Correct Answer: A
QUESTION 8
One of your team members has asked you to analyze the following SOA record. What is the version?
Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.) (Choose four.)
A. 200303028
B. 3600
C. 604800
D. 2400
E. 60
F. 4800
Correct Answer: A
QUESTION 9
In many states sending spam is illegal. Thus, the spammers have techniques to try and ensure that no one knows they
sent the spam out to thousands of users at a time. Which of the following best describes what spammers use to hide the
origin of these types of e- mails?
A. A blacklist of companies that have their mail server relays configured to allow traffic only to their specific domain
name.
B. Mail relaying, which is a technique of bouncing e-mail from internal to external mails servers continuously.
C. A blacklist of companies that have their mail server relays configured to be wide open.
D. Tools that will reconfigure a mail server\\’s relay component to send the e-mail back to the spammers occasionally.
Correct Answer: B
QUESTION 10
Which of the following is the greatest threat posed by backups?
A. A backup is the source of Malware or illicit information.
B. A backup is unavailable during disaster recovery.
C. A backup is incomplete because no verification was performed.
D. An un-encrypted backup can be misplaced or stolen.
Correct Answer: D
If the data written on the backup media is properly encrypted, it will be useless for anyone without the key. References:
http://resources.infosecinstitute.com/backup-media-encryption/
QUESTION 11
An attacker gains access to a Web server\\’s database and displays the contents of the table that holds all of the names,
passwords, and other user information. The attacker did this by entering information into the Web site\\’s user login page
that the software\\’s designers did not expect to be entered. This is an example of what kind of software design
problem?
A. Insufficient input validation
B. Insufficient exception handling
C. Insufficient database hardening
D. Insufficient security management
Correct Answer: A
The most common web application security weakness is the failure to properly validate input coming from the client or
from the environment before using it. This weakness leads to almost all of the major vulnerabilities in web applications,
such as cross-site scripting, SQL injection, interpreter injection, locale/Unicode attacks, file system attacks, and buffer
overflows.
References: https://www.owasp.org/index.php/Testing_for_Input_Validation
QUESTION 12
You are using NMAP to resolve domain names into IP addresses for a ping sweep later. Which of the following commands look for IP addresses?
A. >host -t a hackeddomain.com
B. >host -t soa hackeddomain.com
C. >host -t ns hackeddomain.com
D. >host -t AXFR hackeddomain.com
Correct Answer: A
The A record is an Address record. It returns a 32-bit IPv4 address, most commonly used to map hostnames to an IP
address of the host. References: https://en.wikipedia.org/wiki/List_of_DNS_record_types
QUESTION 13
Which of the following is a hashing algorithm?
A. MD5
B. PGP
C. DES
D. ROT13
Correct Answer: A
For the full ECCouncil 312-50V10 exam dumps from exam2pass 312-50V10 Dumps pdf or Dumps VCE visit: https://www.exam2pass.com/312-50v10.html (Q&As: 747 dumps)
ps.
Get free ECCouncil 312-50V10 dumps PDF online: https://drive.google.com/file/d/14b62RgluIs5WfsdSEfZW4HvJWhjrDZr8/