312-50v10 by EC-COUNCIL Valid Free Exam Practice Test

Question 1

A hacker is an intelligent individual with excellent computer skills and the ability to explore a computer's software and hardware without the owner's permission. Their intention can either be to simply gain knowledge or to illegally make changes. Which of the following class of hacker refers to an individual who works both offensively and defensively at various times?

A. Black Hat B. White Hat C. Suicide Hacker D. Gray Hat

Correct Answer: D

Question 2

Which of the following types of jailbreaking allows user-level access but does not allow iboot-level access?

A. Bootrom Exploit B. iBoot Exploit C. Userland Exploit D. Sandbox Exploit

Correct Answer: C

Question 3

In an internal security audit, the white hat hacker gains control over a user account and attempts to acquire access to another account's confidential files and information. How can he achieve this?

A. Privilege Escalation B. Shoulder-Surfing C. Port Scanning D. Hacking Active Directory

Correct Answer: A

Question 4

What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?

A. All are tools that are only effective against Linux B. All are hacking tools developed by the legion of doom C. All are tools that can be used not only by hackers, but also security personnel D. All are DDOS tools E. All are tools that are only effective against Windows

Correct Answer: D

Question 5

Trinity needs to scan all hosts on a /16 network for TCP port 445 only. What is the fastest way she can accomplish this with Nmap? Stealth is not a concern.

A. nmap -p 445 -max -Pn 10.1.0.0/16 B. nmap -p 445 -n -T4 -open 10.1.0.0/16 C. nmap -s 445 -sU -T5 10.1.0.0/16 D. nmap -sn -sF 10.1.0.0/16 445

Correct Answer: B

Question 6

Which of the following is a characteristic of Public Key Infrastructure (PKI)?

A. Public-key cryptosystems do not provide technical non-repudiation via digital signatures. B. Public-key cryptosystems do not require a secure key distribution channel. C. Public-key cryptosystems distribute public-keys within digital signatures. D. Public-key cryptosystems are faster than symmetric-key cryptosystems.

Correct Answer: C

Question 7

A hacker is attempting to use nslookup to query Domain Name Service (DNS). The hacker uses the nslookup interactive mode for the search. Which command should the hacker type into the command shell to request the appropriate records?

A. Locate type=ns B. Request type=ns C. Set type=ns D. Transfer type=ns

Correct Answer: C

Question 8

Which of the following processes evaluates the adherence of an organization to its stated security policy?

A. Vulnerability assessment B. Risk assessment C. Security auditing D. Penetration testing

Correct Answer: C

Question 9

A hacker was able to easily gain access to a website. He was able to log in via the frontend user login form of the website using default or commonly used credentials. This exploitation is an example of what Software design flaw?

A. Insufficient database hardening B. Insufficient exception handling C. Insufficient input validation D. Insufficient security management

Correct Answer: A

Question 10

Which of the following programs is usually targeted at Microsoft Office products?

A. Polymorphic virus B. Stealth virus C. Macro virus D. Multipart virus

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 11

During a penetration test, a tester finds that the web application being analyzed is vulnerable to Cross Site Scripting (XSS). Which of the following conditions must be met to exploit this vulnerability?

A. The web application does not have the secure flag set. B. The session cookies do not have the HttpOnly flag set. C. The victim's browser must have ActiveX technology enabled. D. The victim user should not have an endpoint security solution.

Correct Answer: B

Question 12

An attacker has captured a target file that is encrypted with public key cryptography. Which of the attacks below is likely to be used to crack the target file?

A. Memory trade-off attack B. Timing attack C. Chosen plain-text attack D. Replay attack

Correct Answer: C

EC-COUNCIL Certified Ethical Hacker Exam (CEH v10) - 312-50v10 Exam Practice Test