Exit demo 312-50V9 EC-Council Certified Ethical Hacker (C|EH v9) PDF format · free preview

EC-COUNCIL 312-50V9 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/312-50v9.html

Question 1
Single choice

It has been reported to you that someone has caused an information spillage on their computer. You go to the computer, disconnect it from the network, remove the keyboard and mouse, and power it down.

What step in incident handling did you just complete?

A.

Containment

B.

Eradication

C.

Recovery

D.

Discovery

Question 2
Single choice

What is the code written for?

A.

Buffer Overflow

B.

Encryption

C.

Bruteforce

D.

Denial-of-service (Dos)

Question 3
Single choice

An enterprise recently moved to a new office and the new neighborhood is a little risky. The CEO wants to monitor the physical perimeter and the entrance doors 24 hours.

What is the best option to do this job?

A.

Use fences in the entrance doors.

B.

Install a CCTV with cameras pointing to the entrance doors and the street.

C.

Use an IDS in the entrance doors and install some of them near the corners.

D.

Use lights in all the entrance doors and along the company's perimeter.

Question 4
Single choice

Which of the following is a serious vulnerability in the popular OpenSSL cryptographic software library.
This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet.

A.

Heartbleed Bug

B.

POODLE

C.

SSL/TLS Renegotiation Vulnerability

D.

Shellshock

Question 5
Single choice

There are several ways to gain insight on how a cryptosystem works with the goal of reverse engineering the process.
A term describes when two pieces of data result in the same value is?

A.

Collision

B.

Collusion

C.

Polymorphism

D.

Escrow

Question 6
Single choice

Which of the following security policies defines the use of VPN for gaining access to an internal corporate network?

A.

Network security policy

B.

Remote access policy

C.

Information protection policy

D.

Access control policy

Question 7
Single choice

One of the Forbes 500 companies has been subjected to a large scale attack. You are one of the shortlisted pen testers that they may hire. During the interview with the CIO, he emphasized that he wants to totally eliminate all risks.

What is one of the first things you should do when hired?

A.

Interview all employees in the company to rule out possible insider threats.

B.

Establish attribution to suspected attackers.

C.

Explain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to acceptable levels.

D.

Start the Wireshark application to start sniffing network traffic.

Question 8
Single choice

Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?

A.

http-git

B.

http-headers

C.

http enum

D.

http-methods

Question 9
Single choice

Which of the following is the most important phase of ethical hacking wherein you need to spend considerable amount of time?

A.

Gaining access

B.

Escalating privileges

C.

Network mapping

D.

Footprinting

Question 10
Single choice

It is a short-range wireless communication technology that allows mobile phones, computers and other devices to connect and communicate. This technology intends to replace cables connecting portable devices with high regards to security.

A.

Bluetooth

B.

Radio-Frequency Identification

C.

WLAN

D.

InfraRed

Showing 10 of 614 questions · Unlock the full set