Free EC-COUNCIL 312-50v9 Exam Dumps Questions & Answers

Risk = Threats x Vulnerabilities is referred to as the:

• A.  Risk equation
• B.  Disaster recovery formula
• C.  Threat assessment
• D.  BIA equation

You've just been hired to perform a pentest on an organization that has been subjected to a large-scale attack. The CIO is concerned with mitigating threats and vulnerabilities to totally eliminate risk.
What is one of the first thing you should to when the job?

• A.  Explain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to acceptable levels.
• B.  Interview all employees in the company to rule out possible insider threats.
• C.  Start the wireshark application to start sniffing network traffic.
• D.  Establish attribution to suspected attackers.

When you return to your desk after a lunch break, you notice a strange email in your inbox. The senders is someone you did business with recently but the subject line has strange characters in it.
What should you do?

• A.  Forward the message to your company's security response team and permanently delete the message from your computer.
• B.  Delete the email and pretend nothing happened.
• C.  Forward the message to your supervisor andask for her opinion on how to handle the situation.
• D.  Reply to the sender and ask them for more information about the message contents.

Which of the following parameters describe LM Hash:
I - The maximum password length is 14 characters.
II - There are no distinctions between uppercase and lowercase.
III - It's a simple algorithm, so 10,000,000 hashes can be generated per second.

• A.  I, II and III
• B.  I
• C.  II
• D.  I and II

The "Gray box testing" methodology enforces what kind of restriction?

• A.  The internal operation of a system is only partly accessible to the tester.
• B.  Only the internal operation of a system is known to the tester.
• C.  The internal operation of a system is completely known to the tester.
• D.  Only the external operation of a system is accessible to the tester.