ECCouncil 312-50 today updated questions - Verified by ECCouncil Experts

Ethical Hacking and Countermeasures Questions and Answers

Question 1

A security policy will be more accepted by employees if it is consistent and has the support of

Options:

coworkers.

executive management.

the security officer.

a supervisor.

Question 2

While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

Options:

Validate web content input for query strings.

Validate web content input with scanning tools.

Validate web content input for type, length, and range.

Validate web content input for extraneous queries.

Question 3

Which of the following examples best represents a logical or technical control?

Options:

Security tokens

Heating and air conditioning

Smoke and fire alarms

Corporate security policy

Question 4

Which type of scan measures a person's external features through a digital video camera?

Options:

Iris scan

Retinal scan

Facial recognition scan

Signature kinetics scan

Question 5

A circuit level gateway works at which of the following layers of the OSI Model?

Options:

Layer 5 - Application

Layer 4 – TCP

Layer 3 – Internet protocol

Layer 2 – Data link

Question 6

During a wireless penetration test, a tester detects an access point using WPA2 encryption. Which of the following attacks should be used to obtain the key?

Options:

The tester must capture the WPA2 authentication handshake and then crack it.

The tester must use the tool inSSIDer to crack it using the ESSID of the network.

The tester cannot crack WPA2 because it is in full compliance with the IEEE 802.11i standard.

The tester must change the MAC address of the wireless network card and then use the AirTraf tool to obtain the key.

Question 7

When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's computer to update the router configuration. What type of an alert is this?

Options:

False positive

False negative

True positve

True negative

Question 8

The network administrator for a company is setting up a website with e-commerce capabilities. Packet sniffing is a concern because credit card information will be sent electronically over the Internet. Customers visiting the site will need to encrypt the data with HTTPS. Which type of certificate is used to encrypt and decrypt the data?

Options:

Asymmetric

Confidential

Symmetric

Non-confidential

Question 9

In the software security development life cycle process, threat modeling occurs in which phase?

Options:

Design

Requirements

Verification

Implementation

Question 10

During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?

Options:

Using the Metasploit psexec module setting the SA / Admin credential

Invoking the stored procedure xp_shell to spawn a Windows command shell

Invoking the stored procedure cmd_shell to spawn a Windows command shell

Invoking the stored procedure xp_cmdshell to spawn a Windows command shell

Question 11

One way to defeat a multi-level security solution is to leak data via

Options:

a bypass regulator.

steganography.

a covert channel.

asymmetric routing.

Question 12

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results?

Options:

The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.

The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.

The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.

The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.

Question 13

Which of the following ensures that updates to policies, procedures, and configurations are made in a controlled and documented fashion?

Options:

Regulatory compliance

Peer review

Change management

Penetration testing

Question 14

Which type of security document is written with specific step-by-step details?

Options:

Process

Procedure

Policy

Paradigm

Question 15

Which of the following guidelines or standards is associated with the credit card industry?

Options:

Control Objectives for Information and Related Technology (COBIT)

Sarbanes-Oxley Act (SOX)

Health Insurance Portability and Accountability Act (HIPAA)

Payment Card Industry Data Security Standards (PCI DSS)

Question 16

Which method can provide a better return on IT security investment and provide a thorough and comprehensive assessment of organizational security covering policy, procedure design, and implementation?

Options:

Penetration testing

Social engineering

Vulnerability scanning

Access control list reviews

Question 17

How do employers protect assets with security policies pertaining to employee surveillance activities?

Options:

Employers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.

Employers use informal verbal communication channels to explain employee monitoring activities to employees.

Employers use network surveillance to monitor employee email traffic, network access, and to record employee keystrokes.

Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.

Question 18

When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

Options:

At least once a year and after any significant upgrade or modification

At least once every three years or after any significant upgrade or modification

At least twice a year or after any significant upgrade or modification

At least once every two years and after any significant upgrade or modification

Question 19

International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

Options:

guidelines and practices for security controls.

financial soundness and business viability metrics.

standard best practice for configuration management.

contract agreement writing standards.

Question 20

How can a policy help improve an employee's security awareness?

Options:

By implementing written security procedures, enabling employee security training, and promoting the benefits of security

By using informal networks of communication, establishing secret passing procedures, and immediately terminating employees

By sharing security secrets with employees, enabling employees to share secrets, and establishing a consultative help line

By decreasing an employee's vacation time, addressing ad-hoc employment clauses, and ensuring that managers know employee strengths

Question 21

Which of the following tools would be the best choice for achieving compliance with PCI Requirement 11?

Options:

Truecrypt

Sub7

Nessus

Clamwin

Question 22

Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial reports?

Options:

Sarbanes-Oxley Act (SOX)

Gramm-Leach-Bliley Act (GLBA)

Fair and Accurate Credit Transactions Act (FACTA)

Federal Information Security Management Act (FISMA)

Question 23

Fingerprinting an Operating System helps a cracker because:

Options:

It defines exactly what software you have installed

It opens a security-delayed window based on the port being scanned

It doesn't depend on the patches that have been applied to fix existing security holes

It informs the cracker of which vulnerabilities he may be able to exploit on your system

Question 24

This configuration allows NIC to pass all traffic it receives to the Central Processing Unit (CPU), instead of passing only the frames that the controller is intended to receive. Select the option that BEST describes the above statement.

Options:

Multi-cast mode

WEM

Promiscuous mode

Port forwarding

Question 25

A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

Options:

Ignore the problem completely and let someone else deal with it.

Create a document that will crash the computer when opened and send it to friends.

Find an underground bulletin board and attempt to sell the bug to the highest bidder.

Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.

Question 26

A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.P.'s computer. What is the consultant's obligation to the financial organization?

Options:

Say nothing and continue with the security testing.

Stop work immediately and contact the authorities.

Delete the pornography, say nothing, and continue security testing.

Bring the discovery to the financial organization's human resource department.

Question 27

A certified ethical hacker (CEH) completed a penetration test of the main headquarters of a company almost two months ago, but has yet to get paid. The customer is suffering from financial problems, and the CEH is worried that the company will go out of business and end up not paying. What actions should the CEH take?

Options:

Threaten to publish the penetration test results if not paid.

Follow proper legal procedures against the company to request payment.

Tell other customers of the financial problems with payments from this company.

Exploit some of the vulnerabilities found on the company webserver to deface it.

Question 28

An ethical hacker for a large security research firm performs penetration tests, vulnerability tests, and risk assessments. A friend recently started a company and asks the hacker to perform a penetration test and vulnerability assessment of the new company as a favor. What should the hacker's next step be before starting work on this job?

Options:

Start by foot printing the network and mapping out a plan of attack.

Ask the employer for authorization to perform the work outside the company.

Begin the reconnaissance phase with passive information gathering and then move into active information gathering.

Use social engineering techniques on the friend's employees to help identify areas that may be susceptible to attack.

Question 29

A certified ethical hacker (CEH) is approached by a friend who believes her husband is cheating. She offers to pay to break into her husband's email account in order to find proof so she can take him to court. What is the ethical response?

Options:

Say no; the friend is not the owner of the account.

Say yes; the friend needs help to gather evidence.

Say yes; do the job for free.

Say no; make sure that the friend knows the risk she’s asking the CEH to take.

Question 30

Which initial procedure should an ethical hacker perform after being brought into an organization?

Options:

Begin security testing.

Turn over deliverables.

Sign a formal contract with non-disclosure.

Assess what the organization is trying to protect.

Question 31

What are the three types of authentication?

Options:

Something you: know, remember, prove

Something you: have, know, are

Something you: show, prove, are

Something you: show, have, prove

Question 32

Which of the following is used to indicate a single-line comment in structured query language (SQL)?

Options:

Question 33

Which tool can be used to silently copy files from USB devices?

Options:

USB Grabber

USB Dumper

USB Sniffer

USB Snoopy

Question 34

Which command line switch would be used in NMAP to perform operating system detection?

Options:

-OS

-sO

-sP

-O

Question 35

The use of technologies like IPSec can help guarantee the following: authenticity, integrity, confidentiality and

Options:

non-repudiation.

operability.

security.

usability.

Question 36

A company has five different subnets: 192.168.1.0, 192.168.2.0, 192.168.3.0, 192.168.4.0 and 192.168.5.0. How can NMAP be used to scan these adjacent Class C networks?

Options:

NMAP -P 192.168.1-5.

NMAP -P 192.168.0.0/16

NMAP -P 192.168.1.0,2.0,3.0,4.0,5.0

NMAP -P 192.168.1/17

Question 37

A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS?

Options:

The host is likely a Windows machine.

The host is likely a Linux machine.

The host is likely a router.

The host is likely a printer.

Question 38

If the final set of security controls does not eliminate all risk in a system, what could be done next?

Options:

Continue to apply controls until there is zero risk.

Ignore any remaining risk.

If the residual risk is low enough, it can be accepted.

Remove current controls since they are not completely effective.

Question 39

Passive reconnaissance involves collecting information through which of the following?

Options:

Social engineering

Network traffic sniffing

Man in the middle attacks

Publicly accessible sources

Question 40

When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

Options:

Vulnerability scanning

Social engineering

Application security testing

Network sniffing

Question 41

A covert channel is a channel that

Options:

transfers information over, within a computer system, or network that is outside of the security policy.

transfers information over, within a computer system, or network that is within the security policy.

transfers information via a communication path within a computer system, or network for transfer of data.

transfers information over, within a computer system, or network that is encrypted.

Question 42

Which system consists of a publicly available set of databases that contain domain name registration contact information?

Options:

WHOIS

IANA

CAPTCHA

IETF

Question 43

The following is part of a log file taken from the machine on the network with the IP address of 192.168.1.106:

What type of activity has been logged?

Options:

Port scan targeting 192.168.1.103

Teardrop attack targeting 192.168.1.106

Denial of service attack targeting 192.168.1.103

Port scan targeting 192.168.1.106

Question 44

Which of the following is considered an acceptable option when managing a risk?

Options:

Reject the risk.

Deny the risk.

Mitigate the risk.

Initiate the risk.

Question 45

What is one thing a tester can do to ensure that the software is trusted and is not changing or tampering with critical data on the back end of a system it is loaded on?

Options:

Proper testing

Secure coding principles

Systems security and architecture review

Analysis of interrupts within the software

Question 46

A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?

Options:

Perform a vulnerability scan of the system.

Determine the impact of enabling the audit feature.

Perform a cost/benefit analysis of the audit feature.

Allocate funds for staffing of audit log review.

Question 47

How can rainbow tables be defeated?

Options:

Password salting

Use of non-dictionary words

All uppercase character passwords

Lockout accounts under brute force password cracking attempts

Question 48

What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

Options:

Passive

Reflective

Active

Distributive

Question 49

A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the corporate network. What tool should the analyst use to perform a Blackjacking attack?

Options:

Paros Proxy

BBProxy

BBCrack

Blooover

Question 50

Which statement is TRUE regarding network firewalls preventing Web Application attacks?

Options:

Network firewalls can prevent attacks because they can detect malicious HTTP traffic.

Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.

Network firewalls can prevent attacks if they are properly configured.

Network firewalls cannot prevent attacks because they are too complex to configure.

Question 51

Which of the following can the administrator do to verify that a tape backup can be recovered in its entirety?

Options:

Restore a random file.

Perform a full restore.

Read the first 512 bytes of the tape.

Read the last 512 bytes of the tape.

Question 52

In order to show improvement of security over time, what must be developed?

Options:

Reports

Testing tools

Metrics

Taxonomy of vulnerabilities

Question 53

Which of the following is a hardware requirement that either an IDS/IPS system or a proxy server must have in order to properly function?

Options:

Fast processor to help with network traffic analysis

They must be dual-homed

Similar RAM requirements

Fast network interface cards

Question 54

Which of the following programs is usually targeted at Microsoft Office products?

Options:

Polymorphic virus

Multipart virus

Macro virus

Stealth virus

Question 55

Which of the following describes the characteristics of a Boot Sector Virus?

Options:

Moves the MBR to another location on the RAM and copies itself to the original location of the MBR

Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

Modifies directory table entries so that directory entries point to the virus code instead of the actual program

Overwrites the original MBR and only executes the new virus code

Question 56

Bluetooth uses which digital modulation technique to exchange information between paired devices?

Options:

PSK (phase-shift keying)

FSK (frequency-shift keying)

ASK (amplitude-shift keying)

QAM (quadrature amplitude modulation)

Question 57

Which of the following is an application that requires a host application for replication?

Options:

Micro

Worm

Trojan

Virus

Question 58

An attacker sniffs encrypted traffic from the network and is subsequently able to decrypt it. The attacker can now use which cryptanalytic technique to attempt to discover the encryption key?

Options:

Birthday attack

Plaintext attack

Meet in the middle attack

Chosen ciphertext attack

Question 59

Which of the following is a characteristic of Public Key Infrastructure (PKI)?

Options:

Public-key cryptosystems are faster than symmetric-key cryptosystems.

Public-key cryptosystems distribute public-keys within digital signatures.

Public-key cryptosystems do not require a secure key distribution channel.

Public-key cryptosystems do not provide technical non-repudiation via digital signatures.

Question 60

Which security strategy requires using several, varying methods to protect IT systems against attacks?

Options:

Defense in depth

Three-way handshake

Covert channels

Exponential backoff algorithm

Load More 312-50 Questions

Summer Special Flat 65% Limited Time Discount offer - Ends in 0d 00h 00m 00s - Coupon code: suredis

ECCouncil 312-50 Ethical Hacking and Countermeasures Exam Practice Test

Ethical Hacking and Countermeasures Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options: