The latest ECCouncil 312-50V10 dumps by exam2pass helps you pass the 312-50V10 exam for the first time! exam2pass Latest Update ECCouncil 312-50V10 VCE Dump and 312-50V10 PDF Dumps, exam2pass 312-50V10 Exam Questions Updated, Answers corrected! Get the latest exam2pass 312-50V10 dumps with Vce and PDF: https://www.exam2pass.com/312-50v10.html (Q&As: 747 dumps)
[Free 312-50V10 PDF] Latest ECCouncil 312-50V10 Dumps PDF collected by exam2pass Google Drive:
https://drive.google.com/file/d/1zp17jIeNizInoV9DRP42c44sFrJAZN20/
[exam2pass 312-50V10 Youtube] ECCouncil 312-50V10 Dumps can be viewed on Youtube shared by exam2pass
Latest ECCouncil 312-50V10 Exam Practice Questions and Answers
QUESTION 1
A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While
it is effective, the tester finds it tedious to perform extended functions. On further research, the tester comes across a Perl
script that runs the following msadc functions: 
Which exploit is indicated by this script?
A. A buffer overflow exploit
B. A chained exploit
C. A SQL injection exploit
D. A denial of service exploit
Correct Answer: B
QUESTION 2
If an attacker uses the command SELECT*FROM user WHERE name = `x\\’ AND userid IS NULL; –`; which type of
SQL injection attack is the attacker performing?
A. End of Line Comment
B. UNION SQL Injection
C. Illegal/Logically Incorrect Query
D. Tautology
Correct Answer: D
QUESTION 3
A company\\’s security policy states that all Web browsers must automatically delete their HTTP browser cookies upon
terminating. What sort of security breach is this policy attempting to mitigate?
A. Attempts by attackers to access Web sites that trust the Web browser user by stealing the user\\’s authentication
credentials.
B. Attempts by attackers to access the user and password information stored in the company\\’s SQL database.
C. Attempts by attackers to access passwords stored on the user\\’s computer without the user\\’s knowledge.
D. Attempts by attackers to determine the user\\’s Web browser usage patterns, including when sites were visited and
for how long.
Correct Answer: A
Cookies can store passwords and form content a user has previously entered, such as a credit card number or an
address.
Cookies can be stolen using a technique called cross-site scripting. This occurs when an attacker takes advantage of a website that allows its users to post unfiltered HTML and JavaScript content.
References: https://en.wikipedia.org/wiki/HTTP_cookie#Cross-site_scripting_.E2.80.93_cookie_theft
QUESTION 4
Password cracking programs reverse the hashing process to recover passwords. (True/False.)
A. True
B. False
Correct Answer: B
QUESTION 5
Which security strategy requires using several, varying methods to protect IT systems against attacks?
A. Defense in depth
B. Three-way handshake
C. Covert channels
D. Exponential backoff algorithm
Correct Answer: A
QUESTION 6
Which of the following lists are valid data-gathering activities associated with a risk assessment?
A. Threat identification, vulnerability identification, control analysis
B. Threat identification, response identification, mitigation identification
C. Attack profile, defense profile, loss profile
D. System profile, vulnerability identification, security determination
Correct Answer: A
QUESTION 7
> NMAP -sn 192.168.11.200-215
The NMAP command above performs which of the following?
A. A ping scan
B. A trace sweep
C. An operating system detect
D. A port scan
Correct Answer: A
NMAP -sn (No port scan)
This option tells Nmap not to do a port scan after host discovery, and only print out the available hosts that responded to
the host discovery probes. This is often known as a “ping scan”, but you can also request that traceroute and NSE host
scripts are run.
References: https://nmap.org/book/man-host-discovery.html
QUESTION 8
A security policy will be more accepted by employees if it is consistent and has the support of:
A. coworkers.
B. executive management.
C. the security officer.
D. a supervisor.
Correct Answer: B
QUESTION 9
An LDAP directory can be used to store information similar to a SQL database. LDAP uses a _____ database structure
instead of SQL\\’s _____ structure. Because of this, LDAP has difficulty representing many-to-one relationships.
A. Relational, Hierarchical
B. Strict, Abstract
C. Hierarchical, Relational
D. Simple, Complex
Correct Answer: C
QUESTION 10
Which of the following tools can be used to perform a zone transfer?
A. NSLookup
B. Finger
C. Dig
D. Sam Spade
E. Host
F. Netcat
G. Neotrace
Correct Answer: ACDE
QUESTION 11
You are performing a penetration test. You achieved access via a buffer overflow exploit and you proceed to find
interesting data, such as files with usernames and passwords. You find a hidden folder that has the administrator\\’s
bank account password and login information for the administrator\\’s bitcoin account.
What should you do?
A. Report immediately to the administrator
B. Do not report it and continue the penetration test.
C. Transfer money from the administrator\\’s account to another account.
D. Do not transfer the money but steal the bitcoins.
Correct Answer: A
QUESTION 12
To reduce the attack surface of a system, administrators should perform which of the following processes to remove
unnecessary software, services, and insecure configuration settings?
A. Harvesting
B. Windowing
C. Hardening
D. Stealthing
Correct Answer: C
QUESTION 13
Which utility will tell you in real-time which ports are listening or in another state?
A. Netstat
B. TCPView
C. Nmap
D. Loki
Correct Answer: B
latest updated ECCouncil 312-50V10 exam questions from the exam2pass 312-50V10 dumps! 100% pass the 312-50V10 exam! Download exam2pass 312-50V10 VCE and PDF dumps: https://www.exam2pass.com/312-50v10.html (Q&As: 747 dumps)
Get free ECCouncil 312-50V10 dumps PDF online: https://drive.google.com/file/d/1zp17jIeNizInoV9DRP42c44sFrJAZN20/