Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
ECCouncil
Certified Ethical Hacker
312-50
Certified Ethical Hacker Exam Questions and Answers

Pass the ECCouncil Certified Ethical Hacker 312-50 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 312-50 Premium Access

View all detail and faqs for the 312-50 exam

Go to Exam

808 Students Passed

89% Average Score

90% Same Questions

Viewing page 4 out of 12 pages

Viewing questions 31-40 out of questions

Questions # 31:

The intrusion detection system at a software development company suddenly generates multiple alerts regarding attacks against the company's external webserver, VPN concentrator, and DNS servers. What should the security team do to determine which alerts to check first?

Options:

Investigate based on the maintenance schedule of the affected systems.

Investigate based on the service level agreements of the systems.

Investigate based on the potential effect of the incident.

Investigate based on the order that the alerts arrived in.

Answer

Questions # 32:

Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI). What must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust one another and each private PKI can validate digital certificates from the other company?

Options:

Poly key exchange

Cross certification

Poly key reference

Cross-site exchange

Answer

Questions # 33:

If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which other option could the tester use to get a response from a host using TCP?

Options:

Hping

Traceroute

TCP ping

Broadcast ping

Answer

Questions # 34:

Which of the following is a characteristic of Public Key Infrastructure (PKI)?

Options:

Public-key cryptosystems are faster than symmetric-key cryptosystems.

Public-key cryptosystems distribute public-keys within digital signatures.

Public-key cryptosystems do not require a secure key distribution channel.

Public-key cryptosystems do not provide technical non-repudiation via digital signatures.

Answer

Questions # 35:

Which NMAP feature can a tester implement or adjust while scanning for open ports to avoid detection by the network’s IDS?

Options:

Timing options to slow the speed that the port scan is conducted

Fingerprinting to identify which operating systems are running on the network

ICMP ping sweep to determine which hosts on the network are not available

Traceroute to control the path of the packets sent during the scan

Answer

Questions # 36:

What are the three types of compliance that the Open Source Security Testing Methodology Manual (OSSTMM) recognizes?

Options:

Legal, performance, audit

Audit, standards based, regulatory

Contractual, regulatory, industry

Legislative, contractual, standards based

Answer

Questions # 37:

Advanced encryption standard is an algorithm used for which of the following?

Options:

Data integrity

Key discovery

Bulk data encryption

Key recovery

Answer

Questions # 38:

A network security administrator is worried about potential man-in-the-middle attacks when users access a corporate web site from their workstations. Which of the following is the best remediation against this type of attack?

Options:

Implementing server-side PKI certificates for all connections

Mandating only client-side PKI certificates for all connections

Requiring client and server PKI certificates for all connections

Requiring strong authentication for all DNS queries

Answer

Questions # 39:

Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)?

Options:

CSIRT provides an incident response service to enable a reliable and trusted single point of contact for reporting computer security incidents worldwide.

CSIRT provides a computer security surveillance service to supply a government with important intelligence information on individuals travelling abroad.

CSIRT provides a penetration testing service to support exception reporting on incidents worldwide by individuals and multi-national corporations.

CSIRT provides a vulnerability assessment service to assist law enforcement agencies with profiling an individual's property or company's asset.

Answer

Questions # 40:

Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/IP specifications?