Free EC-COUNCIL 312-50v10 Exam Dumps Questions & Answers

DHCP snooping is a great solution to prevent rogue DHCP servers on your network. Which security feature on switches leverages the DHCP snooping database to help prevent man-in-the-middle attacks?

• A.  A Layer 2 Attack Prevention Protocol (LAPP)
• B.  Dynamic ARP inspection (DAI)
• C.  Port security
• D.  Spanning tree

The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic. After he applied his ACL configuration in the router, nobody can access to the ftp, and the permitted hosts cannot access the Internet. According to the next configuration, what is happening in the network?

• A.  The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router
• B.  The ACL 104 needs to be first because is UDP
• C.  The ACL for FTP must be before the ACL 110
• D.  The ACL 110 needs to be changed to port 80

The network in ABC company is using the network address 192.168.1.64 with mask 255.255.255.192. In the network the servers are in the addresses 192.168.1.122, 192.168.1.123 and 192.168.1.124.
An attacker is trying to find those servers but he cannot see them in his scanning. The command he is using is:
nmap 192.168.1.64/28.
Why he cannot see the servers?

• A.  He is scanning from 192.168.1.64 to 192.168.1.78 because of the mask /28 and the servers are not in that range.
• B.  He needs to add the command ''''ip address'''' just before the IP address.
• C.  He needs to change the address to 192.168.1.0 with the same mask.
• D.  The network must be down and the nmap command and IP address are ok.

Which security control role does encryption meet?

• A.  Detective
• B.  Offensive
• C.  Defensive
• D.  Preventative

Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/IP specifications?

• A.  Ping of death
• B.  SYN flooding
• C.  TCP hijacking
• D.  Smurf attack