Ultimate Guide to Prepare Free EC-COUNCIL 312-50v10 Exam Questions & Answer [Q354-Q375]

NO.354 Your team has won a contract to infiltrate an organization. The company wants to have the attack be as realistic as possible; therefore, they did not provide any information besides the company name. What should be the first step in security testing the client?

NO.355 First thing you do every office day is to check your email inbox. One morning, you received an email from your best friend and the subject line is quite strange. What should you do?

NO.356 Shellshock allowed an unauthorized user to gain access to a server. It affected many Internet-facing services, which OS did it not directly affect?

NO.357 A security analyst in an insurance company is assigned to test a new web application that will be used by clients to help them choose and apply for an insurance plan. The analyst discovers that the application is developed in ASP scripting language and it uses MSSQL as a database backend. The analyst locates the application’s search form and introduces the following code in the search input field:

When the analyst submits the form, the browser returns a pop-up window that says “Vulnerable”.
Which web applications vulnerability did the analyst discover?

NO.358 Which of the following Linux commands will resolve a domain name into IP address?

NO.359 Cryptography is the practice and study of techniques for secure communication in the presence of third parties (called adversaries.) More generally, it is about constructing and analyzing protocols that overcome the influence of adversaries and that are related to various aspects in information security such as data confidentiality, data integrity, authentication, and non-repudiation. Modern cryptography intersects the disciplines of mathematics, computer science, and electrical engineering. Applications of cryptography include ATM cards, computer passwords, and electronic commerce.
Basic example to understand how cryptography works is given below:

Which of the following choices is true about cryptography?

NO.360 Bluetooth uses which digital modulation technique to exchange information between paired devices?

NO.361 You have compromised a server on a network and successfully opened a shell. You aimed to identify all operating systems running on the network. However, as you attempt to fingerprint all machines in the network using the nmap syntax below, it is not going through.

What seems to be wrong?

NO.362 An attacker changes the profile information of a particular user (victim) on the target website. The attacker
uses this string to update the victim’s profile to a text file and then submit the data to the attacker’s
database.
<iframe src=””http://www.vulnweb.com/updateif.php”” style=””display:none””></iframe>
What is this type of attack (that can use either HTTP GET or HTTP POST) called?

NO.363 The collection of potentially actionable, overt, and publicly available information is known as

NO.364 A distributed port scan operates by:

NO.365 What hacking attack is challenge/response authentication used to prevent?

NO.366 Which of the following is the structure designed to verify and authenticate the identity of individuals within
the enterprise taking part in a data exchange?

NO.367 SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts. Which of the following features makes this possible? (Choose two.)

NO.368 You are tasked to configure the DHCP server to lease the last 100 usable IP addresses in subnet
10.1.4.0/23.
Which of the following IP addresses could be leased as a result of the new configuration?

NO.369 During the security audit of IT processes, an IS auditor found that there were no documented security procedures. What should the IS auditor do?

NO.370 In order to have an anonymous Internet surf, which of the following is best choice?

NO.371 It is an entity or event with the potential to adversely impact a system through unauthorized acces, destruction, disclosure, denial of service or modification of data. Which of the following terms best matches the definition?

NO.372 What is the most common method to exploit the “Bash Bug” or “ShellShock” vulnerability?

NO.373 Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI). What must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust one another and each private PKI can validate digital certificates from the other company?

NO.374 Firewalk has just completed the second phase (the scanning phase) and a technician receives the output
shown below. What conclusions can be drown based on these scan results?
TCP port 21 – no response
TCP port 22 – no response
TCP port 23 – Time-to-live exceeded

NO.375 The establishment of a TCP connection involves a negotiation called three-way handshake. What type of message does the client send to the server in order to begin this negotiation?