EC-Council 312-50v9 Exam Dumps 2021

NEW QUESTION 1
Which of the following incident handling process phases is responsible for defining rules, creating a back-up plan, and testing the plans for an enterprise?

• A. Preparation phase
• B. Recovery phase
• C. Identification phase
• D. Containment phase

Answer: A

NEW QUESTION 2
You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it.
What tool will help you with the task?

• A. Armitage
• B. Dimitry
• C. cdpsnarf
• D. Metagoofil

Answer: D

NEW QUESTION 3
Which of the following is a protocol specifically designed for transporting event messages?

• A. SMS
• B. SNMP
• C. SYSLOG
• D. ICMP

Answer: C

NEW QUESTION 4
You are the Systems Administrator for a large corporate organization. You need to monitor all network traffic on your local network for suspicious activities and receive notifications when an attack is occurring. Which tool would allow you to accomplish this goal?

• A. Host-based IDS
• B. Firewall
• C. Network-Based IDS
• D. Proxy

Answer: C

NEW QUESTION 5
The purpose of a is to deny network access to local area networks and other information assets by unauthorized wireless devices.

• A. Wireless Access Point
• B. Wireless Analyzer
• C. Wireless Access Control list
• D. Wireless Intrusion Prevention System

Answer: D

NEW QUESTION 6
env x= ‘(){ :;};echo exploit ‘ bash –c ‘cat/etc/passwd
What is the Shellshock bash vulnerability attempting to do on an vulnerable Linux host?

• A. Add new user to the passwd file
• B. Display passwd contents to prompt
• C. Change all password in passwd
• D. Remove the passwd file.

Answer: B

NEW QUESTION 7
Which of the following statements is TRUE?

• A. Sniffers operation on Layer 3 of the OSI model
• B. Sniffers operation on Layer 2 of the OSI model
• C. Sniffers operation on the Layer 1 of the OSI model
• D. Sniffers operation on both Layer 2 & Layer 3 of the OSImodel

Answer: D

NEW QUESTION 8
You’ve just been hired to perform a pentest on an organization that has been subjected to a large-scale attack. The CIO is concerned with mitigating threats and vulnerabilities to totally eliminate risk.
What is one of the first thing you should to when the job?

• A. Start the wireshark application to start sniffing network traffic.
• B. Establish attribution to suspected attackers.
• C. Explain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to acceptable levels.
• D. Interview all employees in the company to rule out possible insider threats.

Answer: C

NEW QUESTION 9
When you return to your desk after a lunch break, you notice a strange email in your inbox. The senders is someone you did business with recently but the subject line has strange characters in it.
What should you do?

• A. Forward the message to your company’s security response team and permanently delete the message from your computer.
• B. Delete the email and pretend nothing happened.
• C. Forward the message to your supervisor andask for her opinion on how to handle the situation.
• D. Reply to the sender and ask them for more information about the message contents.

Answer: A

NEW QUESTION 10
Which of the following tools is used to analyze the files produced by several packet-capture programs such as tcpdump, WinDump, Wireshark,and EtherPeek?

• A. Nessus
• B. Tcptraceroute
• C. Tcptrace
• D. OpenVAS

Answer: C

NEW QUESTION 11
A network administrator discovers several unknown files in the root directory of his Linux FTP server. One of the files is a tarball, two are shallscript files, and the third is a binary file is named “nc.” The FTP server’s access logs show that the anonymous user account logged in the server, uploaded the files, and extracted the contents of the tarball and ran the script using a function providedby the FTP server’s software. The ps command shows that the nc file is running as process, and the netstat command shows the nc process is listening on a network port.
Which kind of vulnerability must be present to make this remote attack possible?

• A. Filesystem permissions
• B. Brute Force Login
• C. Privilege Escalation
• D. Directory Traversal

Answer: D

NEW QUESTION 12
This international organizationregulates billions of transactions daily and provides security guidelines to protect personally identifiable information (PII). These security controls provide a baseline and prevent low-level hackers sometimes known as script kiddies from causing a data breach.
Which of the following organizations is being described?

• A. Payment Card Industry (PCI)
• B. International Security Industry Organization (ISIO)
• C. Institute of Electrical and Electronics Engineers (IEEE)
• D. Center for Disease Control (CDC)

Answer: B

NEW QUESTION 13
A Regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a single server.
Based on this information, what should be one of your key recommendations to the bank?

• A. Move the financial data to another server on the same IP subnet
• B. Place a front-end web server in a demilitarized zone that only handles external web traffic
• C. Issue new certificates to the web servers from the root certificate authority
• D. Require all employees to change their passwords immediately

Answer: A

NEW QUESTION 14
Which of the followingtypes of firewalls ensures that the packets are part of the established session?

• A. Switch-level firewall
• B. Stateful inspection firewall
• C. Application-level firewall
• D. Circuit-level firewall

Answer: B

NEW QUESTION 15
Which of the following is one of the most effective ways to prevent Cross-site Scripting (XSS) flaws in software applications?

• A. Verity access right before allowing access to protected information and UI controls
• B. Use security policies and procedures to define and implement proper security settings
• C. Validate and escape all information sent over to a server
• D. Use digital certificates to authenticate a server prior to sending data

Answer: A

NEW QUESTION 16
After trying multiple exploits, you’ve gained root access to a Centos 6 answer. To ensure you maintain access. What would you do first?

• A. Disable IPTables
• B. Create User Account
• C. Downloadand Install Netcat
• D. Disable Key Services

Answer: C

NEW QUESTION 17
A new wireless client is configured to join a 802.11 network. Thisclient uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client.
What is a possible source of this problem?

• A. The client cannot see the SSID of the wireless network
• B. The wireless client is not configured to use DHCP
• C. The WAP does not recognize the client's MAC address
• D. Client isconfigured for the wrong channel

Answer: C

NEW QUESTION 18
You just set up a security system in your network. In what kind of system would you find thefollowing string of characters used as a rule within its configuration?
alert tcp any any ->192.168.100.0/24 21 (msg: "FTP on the network!";)

• A. A firewall IPTable
• B. A Router IPTable
• C. An Intrusion Detection System
• D. FTP Server rule

Answer: C