Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
ECCouncil
Certified Ethical Hacker
312-50
Certified Ethical Hacker Exam Questions and Answers

Pass the ECCouncil Certified Ethical Hacker 312-50 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 312-50 Premium Access

View all detail and faqs for the 312-50 exam

Go to Exam

808 Students Passed

89% Average Score

90% Same Questions

Viewing page 3 out of 12 pages

Viewing questions 21-30 out of questions

Questions # 21:

The security concept of "separation of duties" is most similar to the operation of which type of security device?

Options:

Firewall

Bastion host

Intrusion Detection System

Honeypot

Answer

Explanation

In most enterprises the engineer making a firewall change is also the one reviewing the firewall metrics for unauthorized changes. What if the firewall administrator wanted to hide something? How would anyone ever find out? This is where the separation of duties comes in to focus on the responsibilities of tasks within security.

References: http://searchsecurity.techtarget.com/tip/Modern-security-management-strategy-requires-security-separation-of-duties

Questions # 22:

Which of the following is a wireless network detector that is commonly found on Linux?

Options:

Kismet

Abel

Netstumbler

Nessus

Answer

Questions # 23:

You are a Network Security Officer. You have two machines. The first machine (192.168.0.99) has snort installed, and the second machine (192.168.0.150) has kiwi syslog installed. You perform a syn scan in your network, and you notice that kiwi syslog is not receiving the alert message from snort. You decide to run wireshark in the snort machine to check if the messages are going to the kiwi syslog machine.

What wireshark filter will show the connections from the snort machine to kiwi syslog machine?

Options:

tcp.dstport==514 && ip.dst==192.168.0.150

tcp.srcport==514 && ip.src==192.168.0.99

tcp.dstport==514 && ip.dst==192.168.0.0/16

tcp.srcport==514 && ip.src==192.168.150

Answer

Explanation

We need to configure destination port at destination ip. The destination ip is 192.168.0.150, where the kiwi syslog is installed.

References: https://wiki.wireshark.org/DisplayFilters

Questions # 24:

When comparing the testing methodologies of Open Web Application Security Project (OWASP) and Open Source Security Testing Methodology Manual (OSSTMM) the main difference is

Options:

OWASP is for web applications and OSSTMM does not include web applications.

OSSTMM is gray box testing and OWASP is black box testing.

OWASP addresses controls and OSSTMM does not.

OSSTMM addresses controls and OWASP does not.

Answer

Questions # 25:

Which of the following descriptions is true about a static NAT?

Options:

A static NAT uses a many-to-many mapping.

A static NAT uses a one-to-many mapping.

A static NAT uses a many-to-one mapping.

A static NAT uses a one-to-one mapping.

Answer

Questions # 26:

Which element of Public Key Infrastructure (PKI) verifies the applicant?

Options:

Certificate authority

Validation authority

Registration authority

Verification authority

Answer

Questions # 27:

Which of the following can take an arbitrary length of input and produce a message digest output of 160 bit?

Options:

SHA-1

MD5

HAVAL

MD4

Answer

Questions # 28:

An attacker sniffs encrypted traffic from the network and is subsequently able to decrypt it. The attacker can now use which cryptanalytic technique to attempt to discover the encryption key?