ECCouncil 312-50 Exam Made Easy: Step-by-Step Preparation Guide

Name: How to Pass 312-50 Exams
Brand: Examstrack
SKU: 312-50
Price: 36.75 USD
Availability: InStock

Questions 21

Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

Options:

Certificate issuance

Certificate validation

Certificate cryptography

Certificate revocation

ECCouncil 312-50 Premium Access

Jamari

05-Sep-2024

The tips and tricks in 312-50 are invaluable!

Questions 22

What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?

Options:

Due to the key size, the time it will take to encrypt and decrypt the message hinders efficient communication.

To get messaging programs to function with this algorithm requires complex configurations.

It has been proven to be a weak cipher; therefore, should not be trusted to protect sensitive data.

It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.

Questions 23

Which of the following descriptions is true about a static NAT?

Options:

A static NAT uses a many-to-many mapping.

A static NAT uses a one-to-many mapping.

A static NAT uses a many-to-one mapping.

A static NAT uses a one-to-one mapping.

Questions 24

An NMAP scan of a server shows port 69 is open. What risk could this pose?

Options:

Unauthenticated access

Weak SSL version

Cleartext login

Web portal data leak

Questions 25

A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firm's public facing web servers. The engineer decides to start by using netcat to port 80.

The engineer receives this output:

312-50 Question 25

Which of the following is an example of what the engineer performed?

Options:

Cross-site scripting

Banner grabbing

SQL injection

Whois database query

Questions 26

Passive reconnaissance involves collecting information through which of the following?

Options:

Social engineering

Network traffic sniffing

Man in the middle attacks

Publicly accessible sources

Questions 27

How can rainbow tables be defeated?

Options:

Password salting

Use of non-dictionary words

All uppercase character passwords

Lockout accounts under brute force password cracking attempts

Questions 28

What information should an IT system analysis provide to the risk assessor?

Options:

Management buy-in

Threat statement

Security architecture

Impact analysis

Questions 29

The following is a sample of output from a penetration tester's machine targeting a machine with the IP address of 192.168.1.106:

312-50 Question 29

What is most likely taking place?

Options:

Ping sweep of the 192.168.1.106 network

Remote service brute force attempt

Port scan of 192.168.1.106

Denial of service attack on 192.168.1.106

Questions 30

A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

Options:

Reject all invalid email received via SMTP.

Allow full DNS zone transfers.

Remove A records for internal hosts.

Enable null session pipes.