Free EC-COUNCIL 312-50 Exam Dumps Questions & Answers

You are the chief security officer at AlphaTech, a tech company that specializes in data storage solutions. Your company is developing a new cloud storage platform where users can store their personal files. To ensure data security, the development team is proposing to use symmetric encryption for data at rest. However, they are unsure of how to securely manage and distribute the symmetric keys to users. Which of the following strategies would you recommend to them?

• A.  implement the Diffie-Hellman protocol for secure key exchange.
• B.  Use digital signatures to encrypt the symmetric keys.
• C.  Use HTTPS protocol for secure key transfer.
• D.  Use hash functions to distribute the keys.

As a security analyst for Sky Secure Inc., you are working with a client that uses a multi-cloud strategy, utilizing services from several cloud providers. The client wants to implement a system that will provide unified security management across all their cloud platforms. They need a solution that allows them to consistently enforce security policies, identify and respond to threats, and maintain visibility of all their cloud resources. Which of the following should you recommend as the best solution?

• A.  implement separate security management tools for each cloud platform.
• B.  Rely on the built-in security features of each cloud platform.
• C.  Use a Cloud Access Security Broker (CASB).
• D.  Use a hardware-based firewall to secure all cloud resources.

Which definition among those given below best describes a covert channel?

• A.  It is one of the weak channels used by WEP which makes it insecure
• B.  A server program using a port that is not well known.
• C.  It is the multiplexing taking place on a communication link.
• D.  Making use of a protocol in a way it is not intended to be used.

You are an ethical hacker contracted to conduct a security audit for a company. During the audit, you discover that the company's wireless network is using WEP encryption. You understand the vulnerabilities associated with WEP and plan to recommend a more secure encryption method. Which of the following would you recommend as a Suitable replacement to enhance the security of the company's wireless network?

• A.  Open System authentication
• B.  SSID broadcast disabling
• C.  WPA2-PSK with AES encryption
• D.  MAC address filtering

Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397-1872883824-861252104-501. What needs to happen before Matthew has full administrator access?

• A.  He needs to gain physical access.
• B.  He must perform privilege escalation.
• C.  He already has admin privileges, as shown by the "501" at the end of the SID.
• D.  He needs to disable antivirus protection.