EC-COUNCIL Certified Ethical Hacker Exam (CEH v10) - 312-50v10 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

This TCP flag instructs the sending system to transmit all buffered data immediately.

A. URG B. RST C. SYN D. PSH E. FIN

Discussion 0

Correct Answer: D Vote an answer

Question 2

A common cryptographical tool is the use of XOR. XOR the following binary values:
10110001
00111010

A. 10001011 B. 10011101 C. 10111100 D. 11011000

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

_________ is a set of extensions to DNS that provide to DNS clients (resolvers) origin authentication of DNS data to reduce the threat of DNS poisoning, spoofing, and similar attacks types.

A. DNSSEC B. Zone transfer C. Resource transfer D. Resource records

Discussion 0

Correct Answer: A Vote an answer

Question 4

While conducting a penetration test, the tester determines that there is a firewall between the tester's machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model. Which type of firewall is the tester trying to traverse?

A. Application-level firewall B. Circuit-level gateway firewall C. Packet filtering firewall D. Stateful multilayer inspection firewall

Discussion 0

Correct Answer: B Vote an answer

Question 5

You work as a Security Analyst for a retail organization. In securing the company's network, you set up a firewall and an IDS. However, hackers are able to attack the network. After investigating, you discover that your IDS is not configured properly and therefore is unable to trigger alarms when needed. What type of alert is the IDS giving?

A. True Positive B. True Negative C. False Negative D. False Positive

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Craig received a report of all the computers on the network that showed all the missing patches and weak passwords. What type of software generated this report?

A. a vulnerability scanner B. a port scanner C. a malware scanner D. a virus scanner

Discussion 0

Correct Answer: A Vote an answer

Question 7

Risks = Threats x Vulnerabilities is referred to as the:

A. Disaster recovery formula B. BIA equation C. Risk equation D. Threat assessment

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

A. Reflective B. Distributive C. Passive D. Active

Discussion 0

Correct Answer: D Vote an answer

Question 9

On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which you can determine those critical business?

A. Risk Mitigation B. Disaster Recovery Planning (DRP) C. Business Impact Analysis (BIA) D. Emergency Plan Response (EPR)

Discussion 0

Correct Answer: C Vote an answer

Question 10

Darius is analysing logs from IDS. He want to understand what have triggered one alert and verify if it's true positive or false positive. Looking at the logs he copy and paste basic details like below:
source IP: 192.168.21.100
source port: 80
destination IP: 192.168.10.23
destination port: 63221
What is the most proper answer.

A. This is most probably true positive which triggered on secure communication between client and server. B. This is most probably false-positive because IDS is monitoring one direction traffic. C. This is most probably false-positive, because an alert triggered on reversed traffic. D. This is most probably true negative.

Discussion 0

Correct Answer: D Vote an answer

Question 11

Elliot is in the process of exploiting a web application that uses SQL as a back-end database. He's determined that the application is vulnerable to SQL injection, and has introduced conditional timing delays into injected queries to determine whether they are successful. What type of SQL injection is Elliot most likely performing?

A. Union-based SQL injection B. Error-based SQL injection C. NoSQL injection D. Blind SQL injection

Discussion 0

Correct Answer: D Vote an answer

Question 12

Which of the following techniques will identify if computer files have been changed?

A. Firewall alerts B. Permission sets C. Integrity checking hashes D. Network sniffing

Discussion 0

Correct Answer: C Vote an answer

Question 13

Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI). What must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust one another and each private PKI can validate digital certificates from the other company?

A. Poly key exchange B. Cross-site exchange C. Cross certification D. Poly key reference

Discussion 0

Correct Answer: C Vote an answer

Question 14

Which of the following statements regarding ethical hacking is incorrect?

A. An organization should use ethical hackers who do not sell vendor hardware/software or other consulting services. B. Ethical hacking should not involve writing to or modifying the target systems. C. Ethical hackers should never use tools or methods that have the potential of exploiting vulnerabilities in an organization's systems. D. Testing should be remotely performed offsite.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).