A fully updated 2021 312-50v10 Exam Dumps exam guide from training expert Pass4sureCert
Provides complete coverage of every objective on exam and exam preparation 312-50v10
NEW QUESTION 285
Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?
- A. Directory
- B. Key escrow
- C. Recovery agent
- D. Key registry
Answer: B
NEW QUESTION 286
An attacker sniffs encrypted traffic from the network and is subsequently able to decrypt it.
The attacker can now use which cryptanalytic technique to attempt to discover the encryption key?
- A. Plaintext attack
- B. Birthday attack
- C. Chosen ciphertext attack
- D. Meet in the middle attack
Answer: C
NEW QUESTION 287
Which of the following parameters describe LM Hash (see exhibit):
Exhibit:
- A. I
- B. I, II, and III
- C. II
- D. I and II
Answer: B
Explanation:
The LM hash is computed as follows:
1. The user's password is restricted to a maximum of fourteen characters.
2. The user's password is converted to uppercase.
Etc.
14 character Windows passwords, which are stored with LM Hash, can be cracked in five seconds.
References: https://en.wikipedia.org/wiki/LM_hash
NEW QUESTION 288
Which of the following is the successor of SSL?
- A. RSA
- B. IPSec
- C. TLS
- D. GRE
Answer: C
NEW QUESTION 289
A company's security policy states that all Web browsers must automatically delete their HTTP browser cookies upon terminating. What sort of security breach is this policy attempting to mitigate?
- A. Attempts by attackers to access Web sites that trust the Web browser user by stealing the user's authentication credentials.
- B. Attempts by attackers to determine the user's Web browser usage patterns, including when sites were visited and for how long.
- C. Attempts by attackers to access the user and password information stored in the company's SQL database.
- D. Attempts by attackers to access password stored on the user's computer without the user's knowledge.
Answer: A
NEW QUESTION 290
Rebecca commonly sees an error on her Windows system that states that a Data Execution Prevention (DEP) error has taken place. Which of the following is most likely taking place?
- A. Malware is executing in either ROM or a cache memory area.
- B. A race condition is being exploited, and the operating system is containing the malicious process.
- C. Malicious code is attempting to execute instruction in a non-executable memory region.
- D. A page fault is occurring, which forces the operating system to write data from the hard drive.
Answer: C
NEW QUESTION 291
A specific site received 91 ICMP_ECHO packets within 90 minutes from 47 different sites.
77 of the ICMP_ECHO packets had an ICMP ID:39612 and Seq:57072. 13 of the ICMP_ECHO packets had an ICMP ID:0 and Seq:0. What can you infer from this information?
- A. 13 packets were from an external network and probably behind a NAT, as they had an ICMP ID 0 and Seq 0
- B. All 77 packets came from the same LAN segment and hence had the same ICMP ID and Seq number
- C. ICMP ID and Seq numbers were most likely set by a tool and not by the operating system
- D. The packets were sent by a worm spoofing the IP addresses of 47 infected sites
Answer: C
NEW QUESTION 292
During the security audit of IT processes, an IS auditor found that there were no documented security procedures. What should the IS auditor do?
- A. Create a procedures document
- B. Conduct compliance testing
- C. Terminate the audit
- D. Identify and evaluate existing practices
Answer: D
NEW QUESTION 293
Smart cards use which protocol to transfer the certificate in a secure manner?
- A. Point to Point Tunneling Protocol (PPTP)
- B. Extensible Authentication Protocol (EAP)
- C. Point to Point Protocol (PPP)
- D. Layer 2 Tunneling Protocol (L2TP)
Answer: B
NEW QUESTION 294
Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network.
Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.
- A. Solarwinds IP Network Browser
- B. SNMPUtil
- C. SNScan
- D. NMap
- E. SNMPScan
Answer: A,B,C
NEW QUESTION 295
The following is part of a log file taken from the machine on the network with the IP address of
192.168.1.106:
What type of activity has been logged?
- A. Teardrop attack targeting 192.168.1.106
- B. Denial of service attack targeting 192.168.1.103
- C. Port scan targeting 192.168.1.103
- D. Port scan targeting 192.168.1.106
Answer: D
NEW QUESTION 296
This asymmetry cipher is based on factoring the product of two large prime numbers.
What cipher is described above?
- A. RSA
- B. SHA
- C. RC5
- D. MD5
Answer: A
Explanation:
Explanation
RSA is based on the practical difficulty of factoring the product of two large prime numbers, the factoring problem.
Note: A user of RSA creates and then publishes a public key based on two large prime numbers, along with an auxiliary value. The prime numbers must be kept secret. Anyone can use the public key to encrypt a message, but with currently published methods, if the public key is large enough, only someone with knowledge of the prime numbers can feasibly decode the message.
References: https://en.wikipedia.org/wiki/RSA_(cryptosystem)
NEW QUESTION 297
Study the log below and identify the scan type.
- A. nmap -sS 192.168.1.10
- B. nmap -sO -T 192.168.1.10
- C. nmap -sR 192.168.1.10
- D. nmap -sV 192.168.1.10
Answer: B
NEW QUESTION 298
Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397-1872883824-861252104-501.
What needs to happen before Matthew has full administrator access?
- A. He needs to disable antivirus protection.
- B. He must perform privilege escalation.
- C. He already has admin privileges, as shown by the "501" at the end of the SID.
- D. He needs to gain physical access.
Answer: B
NEW QUESTION 299
You want to analyze packets on your wireless network. Which program would you use?
- A. Wireshark with Winpcap
- B. Ethereal with Winpcap
- C. Airsnort with Airpcap
- D. Wireshark with Airpcap
Answer: D
NEW QUESTION 300
An attacker changes the profile information of a particular user (victim) on the target website. The attacker
uses this string to update the victim's profile to a text file and then submit the data to the attacker's
database.
<iframe src=""http://www.vulnweb.com/updateif.php"" style=""display:none""></iframe>
What is this type of attack (that can use either HTTP GET or HTTP POST) called?
- A. Cross-Site Scripting
- B. SQL Injection
- C. Cross-Site Request Forgery
- D. Browser Hacking
Answer: C
NEW QUESTION 301
Gavin owns a white-hat firm and is performing a website security audit for one of his clients. He begins by running a scan which looks for common misconfigurations and outdated software versions. Which of the following tools is he most likely using?
- A. Nikto
- B. Metasploit
- C. Armitage
- D. Nmap
Answer: D
NEW QUESTION 302
Which of the following descriptions is true about a static NAT?
- A. A static NAT uses a many-to-many mapping.
- B. A static NAT uses a one-to-many mapping.
- C. A static NAT uses a one-to-one mapping.
- D. A static NAT uses a many-to-one mapping.
Answer: C
NEW QUESTION 303
......
Tested Material Used To 312-50v10: https://www.pass4surecert.com/EC-COUNCIL/312-50v10-practice-exam-dumps.html