[Feb-2022] Free 312-50v10 Exam Questions 312-50v10 Actual Free Exam Questions
Verified 312-50v10 dumps and 745 unique questions
How to study the 312-50v10 Exam
ExamPrepAway expert team recommends you to prepare some notes on these topics along with it don't forget to practice EC Council Certified Ethical Hacker v10 Exam 312-50v10 Exam which been written by our expert team, Both these will help you a lot to clear this exam with good marks.
NEW QUESTION 282
Jim's company regularly performs backups of their critical servers. But the company cannot afford to send backup tapes to an off-site vendor for long-term storage and archiving. Instead, Jim's company keeps the backup tapes in a safe in the office. Jim's company is audited each year, and the results from this year's audit show a risk because backup tapes are not stored off-site. The Manager of Information Technology has a plan to take the backup tapes home with him and wants to know what two things he can do to secure the backup tapes while in transit?
- A. Encrypt the backup tapes and transport them in a lock box.
- B. Hash the backup tapes and transport them in a lock box.
- C. Encrypt the backup tapes and use a courier to transport them.
- D. Degauss the backup tapes and transport them in a lock box.
Answer: A
NEW QUESTION 283
This is an attack that takes advantage of a web site vulnerability in which the site displays content that includes un-sanitized user-provided data.
What is this attack?
- A. Buffer Overflow attack
- B. URL Traversal attack
- C. SQL Injection
- D. Cross-site-scripting attack
Answer: D
NEW QUESTION 284
Diffie-Hellman (DH) groups determine the strength of the key used in the key exchange process. Which of the following is the correct bit size of the Diffie-Hellman (DH) group 5?
- A. 1536 bit key
- B. 768 bit key
- C. 2048 bit key
- D. 1025 bit key
Answer: A
NEW QUESTION 285
A possibly malicious sequence of packets that were sent to a web server has been captured by an Intrusion Detection System (IDS) and was saved to a PCAP file. As a network administrator, you need to determine whether this packets are indeed malicious.
What tool are you going to use?
- A. Vulnerability scanner
- B. Protocol analyzer
- C. Network sniffer
- D. Intrusion Prevention System (IPS)
Answer: B
NEW QUESTION 286
On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which you can determine those critical business?
- A. Disaster Recovery Planning (DRP)
- B. Business Impact Analysis (BIA)
- C. Risk Mitigation
- D. Emergency Plan Response (EPR)
Answer: B
NEW QUESTION 287
What is the outcome of the comm"nc -l -p 2222 | nc 10.1.0.43 1234"?
- A. Netcat will listen on port 2222 and output anything received to a remote connection on 10.1.0.43 port
1234. - B. Netcat will listen on the 10.1.0.43 interface for 1234 seconds on port 2222.
- C. Netcat will listen for a connection from 10.1.0.43 on port 1234 and output anything received to port
2222. - D. Netcat will listen on port 2222 and then output anything received to local interface 10.1.0.43.
Answer: A
NEW QUESTION 288
Which of the following is one of the most effective ways to prevent Cross-site Scripting (XSS) flaws in
software applications?
- A. Use security policies and procedures to define and implement proper security settings.
- B. Verify acces right before allowing access to protected information and UI controls.
- C. Use digital certificates to authenticate a server prior to sending data.
- D. Validate and escape all information sent to a server.
Answer: D
NEW QUESTION 289
>NMAP -sn 192.168.11.200-215 The NMAP command above performs which of the following?
- A. A ping scan
- B. A trace sweep
- C. A port scan
- D. An operating system detect
Answer: C
NEW QUESTION 290
Which of the following parameters describe LM Hash (see exhibit):
Exhibit:
- A. I, II, and III
- B. I
- C. I and II
- D. II
Answer: A
Explanation:
The LM hash is computed as follows:
1. The user's password is restricted to a maximum of fourteen characters.
2. The user's password is converted to uppercase.
Etc.
14 character Windows passwords, which are stored with LM Hash, can be cracked in five seconds.
References: https://en.wikipedia.org/wiki/LM_hash
NEW QUESTION 291
Which of the following is a common Service Oriented Architecture (SOA) vulnerability?
- A. VPath injection
- B. SQL injection
- C. Cross-site scripting
- D. XML denial of service issues
Answer: D
NEW QUESTION 292
You have successfully logged on a Linux system. You want to now cover your trade Your login attempt may be logged on several files located in /var/log. Which file does NOT belongs to the list:
- A. wtmp
- B. user.log
- C. btmp
- D. auth.fesg
Answer: A
NEW QUESTION 293
During the process of encryption and decryption, what keys are shared?
During the process of encryption and decryption, what keys are shared?
- A. User passwords
- B. Public and private keys
- C. Public keys
- D. Private keys
Answer: C
NEW QUESTION 294
Sophia travels a lot and worries that her laptop containing confidential documents might be stolen. What is the best protection that will work for her?
- A. Password protected files
- B. Hidden folders
- C. BIOS password
- D. Disk encryption
Answer: D
NEW QUESTION 295
Which tool allows analysts and pen testers to examine links between data using graphs and link analysis?
- A. Cain & Abel
- B. Wireshark
- C. Maltego
- D. Metasploit
Answer: C
Explanation:
Maltego is proprietary software used for open-source intelligence and forensics, developed by Paterva. Maltego focuses on providing a library of transforms for discovery of data from open sources, and visualizing that information in a graph format, suitable for link analysis and data mining.
References: https://en.wikipedia.org/wiki/Maltego
NEW QUESTION 296
You are attempting to man-in-the-middle a session. Which protocol will allow you to guess a sequence number?
- A. UPD
- B. UPX
- C. TCP
- D. ICMP
Answer: C
NEW QUESTION 297
A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.
Which cryptography attack is the student attempting?
- A. Dictionary attack
- B. Brute-force attack
- C. Man-in-the-middle attack
- D. Session hijacking
Answer: A
NEW QUESTION 298
The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic.
After he applied his ACL configuration in the router, nobody can access to the ftp, and the permitted hosts cannot access the Internet. According to the next configuration, what is happening in the network?
- A. The ACL 104 needs to be first because is UDP
- B. The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router
- C. The ACL 110 needs to be changed to port 80
- D. The ACL for FTP must be before the ACL 110
Answer: B
NEW QUESTION 299
You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c
What is the hexadecimal value of NOP instruction?
- A. 0x60
- B. 0x80
- C. 0x70
- D. 0x90
Answer: D
NEW QUESTION 300
An Internet Service Provider (ISP) has a need to authenticate users connecting using analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network.
Which AAA protocol is most likely able to handle this requirement?
- A. DIAMETER
- B. RADIUS
- C. TACACS+
- D. Kerberos
Answer: B
Explanation:
Because of the broad support and the ubiquitous nature of the RADIUS protocol, it is often used by ISPs and enterprises to manage access to the Internet or internal networks, wireless networks, and integrated e-mail services. These networks may incorporate modems, DSL, access points, VPNs, network ports, web servers, etc.
References: https://en.wikipedia.org/wiki/RADIUS
NEW QUESTION 301
John is an incident handler at a financial institution. His steps in a recent incident are not up to the standards of the company. John frequently forgets some steps and procedures while handling responses as they are very stressful to perform. Which of the following actions should John take to overcome this problem with the least administrative effort?
- A. Create an incident checklist.
- B. Read the incident manual every time it occurs.
- C. Select someone else to check the procedures.
- D. Increase his technical skills.
Answer: D
NEW QUESTION 302
It has been reported to you that someone has caused an information spillage on their computer. You go to
the computer, disconnect it from the network, remove the keyboard and mouse, and power it down. What
step in incident handling did you just complete?
- A. Discovery
- B. Recovery
- C. Eradication
- D. Containment
Answer: D
NEW QUESTION 303
You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line.
Which command would you use?
- A. c:\compmgmt.msc
- B. c:\gpedit
- C. c:\services.msc
- D. c:\ncpa.cp
Answer: A
Explanation:
To start the Computer Management Console from command line just type compmgmt.msc
/computer:computername in your run box or at the command line and it should automatically open the Computer Management console.
References: http://www.waynezim.com/tag/compmgmtmsc/
NEW QUESTION 304
......
Latest 100% Passing Guarantee - Brilliant 312-50v10 Exam Questions PDF: https://www.examprepaway.com/EC-COUNCIL/braindumps.312-50v10.ete.file.html