Mar 03, 2025 Step by Step Guide to Prepare for 312-50v10 Exam BrainDumps
Certified Ethical Hacker 312-50v10 Real Exam Questions and Answers FREE Updated on 2025
In order to prepare for the CEH v10 Certification Exam, candidates should have a strong foundation in cybersecurity and ethical hacking. Candidates should also have experience working in the field of cybersecurity and should be familiar with the tools and techniques used in ethical hacking. There are many resources available to help candidates prepare for the exam, including study guides, practice exams, and training courses.
NEW QUESTION # 398
A large mobile telephony and data network operator has a data center that houses network elements.
These are essentially large computers running on Linux. The perimeter of the data center is secured with
firewalls and IPS systems.
What is the best security policy concerning this setup?
- A. As long as the physical access to the network elements is restricted, there is no need for additional
measures. - B. Network elements must be hardened with user ids and strong passwords. Regular security tests and
audits should be performed. - C. The operator knows that attacks and down time are inevitable and should have a backup site.
- D. There is no need for specific security measures on the network elements as long as firewalls and IPS
systems exist.
Answer: B
NEW QUESTION # 399
Which of the following conditions must be given to allow a tester to exploit a Cross-Site Request Forgery (CSRF) vulnerable web application?
- A. The web application should not use random tokens.
- B. The session cookies generated by the application do not have the HttpOnly flag set.
- C. The victim user must open the malicious link with an Internet Explorer prior to version 8.
- D. The victim user must open the malicious link with a Firefox prior to version 3.
Answer: A
NEW QUESTION # 400
Which of the following statements is FALSE with respect to Intrusion Detection Systems?
- A. Intrusion Detection Systems can be configured to distinguish specific content in network packets
- B. Intrusion Detection Systems require constant update of the signature library
- C. Intrusion Detection Systems can easily distinguish a malicious payload in an encrypted traffic
- D. Intrusion Detection Systems can examine the contents of the data n context of the network protocol
Answer: C
NEW QUESTION # 401
Identify the UDP port that Network Time Protocol (NTP) uses as its primary means of communication?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 402
An attacker tries to do banner grabbing on a remote web server and executes the following command.
Service
detection performed. Please report any incorrect results at http://nmap.org/submit/.
Nmap done: 1 IP address (1 host up) scanned in 6.42 seconds
What did the hacker accomplish?
- A. nmap can't retrieve the version number of any running remote service.
- B. The hacker successfully completed the banner grabbing.
- C. The hacker failed to do banner grabbing as he didn't get the version of the Apache web server.
- D. The hacker should've used nmap -O host.domain.com.
Answer: B
NEW QUESTION # 403
Security Policy is a definition of what it means to be secure for a system, organization or other entity. For
Information Technologies, there are sub-policies like Computer Security Policy, Information Protection
Policy, Information Security Policy, network Security Policy, Physical Security Policy, Remote Access
Policy, and User Account Policy.
What is the main theme of the sub-policies for Information Technologies?
- A. Authenticity, Confidentiality, Integrity
- B. Authenticity, Integrity, Non-repudiation
- C. Confidentiality, Integrity, Availability
- D. Availability, Non-repudiation, Confidentiality
Answer: C
NEW QUESTION # 404
You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions. Which command-line utility are you most likely to use?
- A. Notepad
- B. MS Excel
- C. Grep
- D. Relational Database
Answer: C
NEW QUESTION # 405
Your business has decided to add credit card numbers to the data it backs up to tape. Which of the following represents the best practice your business should observe?
- A. Do not back up cither the credit card numbers or then hashes.
- B. Encrypt backup tapes that are sent off-site.
- C. Back up the hashes of the credit card numbers not the actual credit card numbers.
- D. Hire a security consultant to provide direction.
Answer: D
NEW QUESTION # 406
A recent security audit revealed that there were indeed several occasions that the company's network was breached. After investigating, you discover that your IDS is not configured properly and therefore is unable to trigger alarms when needed. What type of alert is the IDS giving?
- A. False Positive
- B. False Positive
- C. False Negative
- D. True Positive
Answer: C
Explanation:
Explanation
New questions
NEW QUESTION # 407
A hacker, who posed as a heating and air conditioning specialist, was able to install a sniffer program in a switched environment network. Which attack could the hacker use to sniff all of the packets in the network?
- A. Tear Drop
- B. Smurf
- C. MAC Flood
- D. Fraggle
Answer: C
NEW QUESTION # 408
Why containers are less secure that virtual machines?
- A. Host OS on containers has a larger surface attack.
- B. Containers may full fill disk space of the host.
- C. Containers are attached to the same virtual network.
- D. A compromise container may cause a CPU starvation of the host.
Answer: A
NEW QUESTION # 409
During the process of encryption and decryption, what keys are shared?
- A. User passwords
- B. Public and private keys
- C. Private keys
- D. Public keys
Answer: D
Explanation:
Explanation
NEW QUESTION # 410
Which set of access control solutions implements two-factor authentication?
- A. Account and password
- B. Password and PIN
- C. Fingerprint scanner and retina scanner
- D. USB token and PIN
Answer: D
NEW QUESTION # 411
What is attempting an injection attack on a web server based on responses to True/False questions
called?
- A. DMS-specific SQLi
- B. Classic SQLi
- C. Compound SQLi
- D. Blind SQLi
Answer: D
NEW QUESTION # 412
A large mobile telephony and data network operator has a data that houses network elements. These are essentially large computers running on Linux. The perimeter of the data center is secured with firewalls and IPS systems. What is the best security policy concerning this setup?
- A. There is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.
- B. As long as the physical access to the network elements is restricted, there is no need for additional measures.
- C. The operator knows that attacks and down time are inevitable and should have a backup site.
- D. Network elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.
Answer: D
NEW QUESTION # 413
You receive an e-mail like the one shown below. When you click on the link contained in the mail, you are redirected to a website seeking you to download free Anti-Virus software.
Dear valued customers,
We are pleased to announce the newest version of Antivirus 2010 for Windows which will probe you with total security against the latest spyware, malware, viruses, Trojans and other online threats. Simply visit the link below and enter your antivirus code:
or you may contact us at the following address:
Media Internet Consultants, Edif. Neptuno, Planta
Baja, Ave. Ricardo J. Alfaro, Tumba Muerto, n/a Panama
How will you determine if this is Real Anti-Virus or Fake Anti-Virus website?
- A. Download and install Anti-Virus software from this suspicious looking site, your Windows
7 will prompt you and stop the installation if the downloaded file is a malware - B. Download and install Anti-Virus software from this suspicious looking site, your Windows
7 will prompt you and stop the installation if the downloaded file is a malware - C. Search using the URL and Anti-Virus product name into Google and lookout for suspicious warnings against this site
- D. Look at the website design, if it looks professional then it is a Real Anti-Virus website
- E. Connect to the site using SSL, if you are successful then the website is genuine
Answer: C
NEW QUESTION # 414
PGP, SSL, and IKE are all examples of which type of cryptography?
- A. Hash Algorithm
- B. Digest
- C. Public Key
- D. Secret Key
Answer: C
Explanation:
Explanation
NEW QUESTION # 415
......
Ultimate Guide to Prepare 312-50v10 Certification Exam for Certified Ethical Hacker: https://actualtests.testbraindump.com/312-50v10-exam-prep.html
