Name: EC-COUNCIL.312-50v10.v2020-10-01.q260 Question 182
Brand: freecram
SKU: 3c6ae844d63caef9
Price: 39.00 USD
Availability: InStock
Rating: 4.6 (1 reviews)

Valid 312-50v10 Dumps shared by ExamDiscuss.com for Helping Passing 312-50v10 Exam! ExamDiscuss.com now offer the newest 312-50v10 exam dumps, the ExamDiscuss.com 312-50v10 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 312-50v10 dumps with Test Engine here:

Access 312-50v10 Dumps Premium Version
(745 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 182/260

Darius is analysing logs from IDS. He want to understand what have triggered one alert and verify if it's true positive or false positive. Looking at the logs he copy and paste basic details like below:
source IP: 192.168.21.100
source port: 80
destination IP: 192.168.10.23
destination port: 63221
What is the most proper answer.

A. This is most probably true positive which triggered on secure communication between client and server.

B. This is most probably false-positive, because an alert triggered on reversed traffic.

C. This is most probably true negative.

D. This is most probably false-positive because IDS is monitoring one direction traffic.

Recent Comments (The most recent comments are at the top.)

Johnny Bravo - Jan 03, 2021

It should be false positive because there was an alert. If there is no alert then it should be true negative.

Question List (260q): 1 commentQuestion 1: A hacker has successfully infected an internet-facing server...; Question 2: Which of the following statements about a zone transfer is c...; Question 3: You are logged in as a local admin on a Windows 7 system and...; Question 4: Which of the following represents the initial two commands t...; Question 5: Which command line switch would be used in NMAP to perform o...; Question 6: How can telnet be used to fingerprint a web server?...; Question 7: The intrusion detection system at a software development com...; Question 8: Which of the following is the structure designed to verify a...; Question 9: It is a short-range wireless communication technology that a...; Question 10: Look at the following output. What did the hacker accomplish...; Question 11: When discussing passwords, what is considered a brute force ...; Question 12: While checking the settings on the internet browser, a techn...; Question 13: Which of the following tools is used by pen testers and anal...; Question 14: While reviewing the result of scanning run against a target ...; Question 15: Which of the following defines the role of a root Certificat...; Question 16: What is the minimum number of network connections in a multi...; Question 17: Which of the following is used to indicate a single-line com...; Question 18: A technician is resolving an issue where a computer is unabl...; Question 19: The practical realities facing organizations today make risk...; 1 commentQuestion 20: The security concept of "separation of duties" is most simil...; Question 21: Which Metasploit Framework tool can help penetration tester ...; Question 22: What are the three types of authentication?...; 1 commentQuestion 23: You are tasked to configure the DHCP server to lease the las...; Question 24: Which utility will tell you in real time which ports are lis...; Question 25: An ethical hacker for a large security research firm perform...; Question 26: You have successfully comprised a server having an IP addres...; Question 27: Yancey is a network security administrator for a large elect...; Question 28: In which of the following password protection technique, ran...; Question 29: Which of the following is an example of two factor authentic...; Question 30: To reduce the attack surface of a system, administrators sho...; Question 31: You are a Penetration Tester and are assigned to scan a serv...; Question 32: A certified ethical hacker (CEH) is approached by a friend w...; Question 33: Which type of cryptography does SSL, IKE and PGP belongs to?...; Question 34: If an e-commerce site was put into a live environment and th...; 2 commentQuestion 35: Which command can be used to show the current TCP/IP connect...; Question 36: It has been reported to you that someone has caused an infor...; Question 37: While conducting a penetration test, the tester determines t...; Question 38: What does a firewall check to prevent particular ports and a...; Question 39: Which service in a PKI will vouch for the identity of an ind...; Question 40: A penetration tester is conducting a port scan on a specific...; Question 41: An LDAP directory can be used to store information similar t...; Question 42: Which of the following types of firewall inspects only heade...; Question 43: An attacker with access to the inside network of a small com...; Question 44: Within the context of Computer Security, which of the follow...; Question 45: Which of the following network attacks takes advantage of we...; Question 46: An attacker changes the profile information of a particular ...; Question 47: What is the most common method to exploit the "Bash Bug" or ...; Question 48: Which tool allows analysts and pen testers to examine links ...; Question 49: Bluetooth uses which digital modulation technique to exchang...; Question 50: Bob is acknowledged as a hacker of repute and is popular amo...; Question 51: Matthew, a black hat, has managed to open a meterpreter sess...; Question 52: You're doing an internal security audit and you want to find...; Question 53: Which of the following is a serious vulnerability in the pop...; Question 54: Which of the following is a strong post designed to stop a c...; Question 55: When does the Payment Card Industry Data Security Standard (...; Question 56: Why should the security analyst disable/remove unnecessary I...; Question 57: What is the known plaintext attack used against DES which gi...; Question 58: Which of the following is an application that requires a hos...; Question 59: Which of the following is a protocol specifically designed f...; Question 60: Which element of Public Key Infrastructure (PKI) verifies th...; Question 61: Which of the following tools are used for enumeration? (Choo...; Question 62: (Exhibit) What does the option * indicate?...; Question 63: From the following table, identify the wrong answer in terms...; Question 64: Based on the below log, which of the following sentences are...; Question 65: Sophia travels a lot and worries that her laptop containing ...; Question 66: One of your team members has asked you to analyze the follow...; Question 67: What is a successful method for protecting a router from pot...; Question 68: Take a look at the following attack on a Web Server using ob...; Question 69: What is the purpose of DNS AAAA record?...; Question 70: While examining audit logs, you discover that people are abl...; Question 71: A developer for a company is tasked with creating a program ...; Question 72: You are about to be hired by a well-known Bank to perform pe...; 1 commentQuestion 73: A possibly malicious sequence of packets that were sent to a...; Question 74: You have successfully gained access to your client's interna...; Question 75: Bob, your senior colleague, has sent you a mail regarding a ...; Question 76: Which of the following is the least-likely physical characte...; Question 77: The network administrator for a company is setting up a webs...; Question 78: Which of the following levels of algorithms does Public Key ...; Question 79: Bob, a system administrator at TPNQM SA, concluded one day t...; Question 80: A network administrator discovers several unknown files in t...; Question 81: What type of analysis is performed when an attacker has part...; Question 82: What statement is true regarding LM hashes?...; Question 83: What is the process of logging, recording, and resolving eve...; Question 84: Bob, a network administrator at BigUniversity, realized that...; Question 85: A company is using Windows Server 2003 for its Active Direct...; Question 86: The establishment of a TCP connection involves a negotiation...; Question 87: You are monitoring the network of your organizations. You no...; Question 88: When purchasing a biometric system, one of the consideration...; Question 89: While doing a technical assessment to determine network vuln...; Question 90: The following are types of Bluetooth attack EXCEPT_____?...; 1 commentQuestion 91: Email is transmitted across the Internet using the Simple Ma...; Question 92: Which of the following network attacks relies on sending an ...; Question 93: You are using NMAP to resolve domain names into IP addresses...; Question 94: Fingerprinting VPN firewalls is possible with which of the f...; Question 95: What type of malware is it that restricts access to a comput...; Question 96: Destination unreachable administratively prohibited messages...; Question 97: It is a kind of malware (malicious software) that criminals ...; Question 98: env x=`(){ :;};echo exploit` bash -c 'cat /etc/passwd' What ...; Question 99: What is the main security service a cryptographic hash provi...; Question 100: Which method of password cracking takes the most time and ef...; Question 101: Which of the following lists are valid data-gathering activi...; Question 102: Which type of intrusion detection system can monitor and ale...; Question 103: What is the role of test automation in security testing?...; Question 104: The "white box testing" methodology enforces what kind of re...; Question 105: Which protocol and port number might be needed in order to s...; Question 106: Which of the following examples best represents a logical or...; Question 107: During a recent security assessment, you discover the organi...; Question 108: A large company intends to use Blackberry for corporate mobi...; Question 109: To determine if a software program properly handles a wide r...; Question 110: You work for Acme Corporation as Sales Manager. The company ...; Question 111: An Internet Service Provider (ISP) has a need to authenticat...; Question 112: Fingerprinting an Operating System helps a cracker because:...; Question 113: You want to do an ICMP scan on a remote computer using hping...; Question 114: An attacker has captured a target file that is encrypted wit...; Question 115: Which of the following techniques does a vulnerability scann...; Question 116: Which of the following business challenges could be solved b...; Question 117: What port number is used by LDAP protocol?...; Question 118: What kind of detection techniques is being used in antivirus...; Question 119: On performing a risk assessment, you need to determine the p...; Question 120: What is the benefit of performing an unannounced Penetration...; 1 commentQuestion 121: Which tool is used to automate SQL injections and exploit a ...; Question 122: When tuning security alerts, what is the best approach?...; Question 123: Which Intrusion Detection System is best applicable for larg...; Question 124: Which of the following is a vulnerability in GNU's bash shel...; Question 125: The use of alert thresholding in an IDS can reduce the volum...; Question 126: Eric has discovered a fantastic package of tools named Dsnif...; Question 127: Which of the following cryptography attack is an understatem...; Question 128: The "black box testing" methodology enforces which kind of r...; 1 commentQuestion 129: Which of the below hashing functions are not recommended for...; 1 commentQuestion 130: Gavin owns a white-hat firm and is performing a website secu...; Question 131: Defining rules, collaborating human workforce, creating a ba...; Question 132: Rebecca commonly sees an error on her Windows system that st...; Question 133: Some clients of TPNQM SA were redirected to a malicious site...; Question 134: You are looking for SQL injection vulnerability by sending a...; Question 135: A Security Engineer at a medium-sized accounting firm has be...; Question 136: PGP, SSL, and IKE are all examples of which type of cryptogr...; Question 137: This phase will increase the odds of success in later phases...; Question 138: Which of the following Secure Hashing Algorithm (SHA) produc...; Question 139: Which of the following is designed to identify malicious att...; Question 140: An attacker gains access to a Web server's database and disp...; Question 141: Nathan is testing some of his network devices. Nathan is usi...; Question 142: A tester has been hired to do a web application security tes...; Question 143: Which of the following is a component of a risk assessment?...; Question 144: The Heartbleed bug was discovered in 2014 and is widely refe...; Question 145: Which of the following descriptions is true about a static N...; Question 146: Which one of the following Google advanced search operators ...; Question 147: What is the BEST alternative if you discover that a rootkit ...; Question 148: TCP/IP stack fingerprinting is the passive collection of con...; Question 149: Every company needs a formal written document which spells o...; Question 150: What is the algorithm used by LM for Windows2000 SAM?...; Question 151: When setting up a wireless network, an administrator enters ...; Question 152: Which of the following is a design pattern based on distinct...; Question 153: Employees in a company are no longer able to access Internet...; Question 154: You need a tool that can do network intrusion prevention and...; Question 155: Which of the following resources does NMAP need to be used a...; Question 156: A big company, who wanted to test their security infrastruct...; Question 157: A recently hired network security associate at a local bank ...; Question 158: If there is an Intrusion Detection System (IDS) in intranet,...; Question 159: The chance of a hard drive failure is once every three years...; Question 160: Which of the following areas is considered a strength of sym...; Question 161: What would you enter, if you wanted to perform a stealth sca...; Question 162: What is not a PCI compliance recommendation?...; Question 163: On a Linux device, which of the following commands will star...; Question 164: A computer science student needs to fill some information in...; Question 165: A penetration tester is conducting a port scan on a specific...; Question 166: The following is a sample of output from a penetration teste...; Question 167: What is the correct PCAP filter to capture all TCP traffic g...; Question 168: An NMAP scan of a server shows port 25 is open. What risk co...; Question 169: A penetration tester was hired to perform a penetration test...; Question 170: Which NMAP command combination would let a tester scan every...; Question 171: Which of the following can take an arbitrary length of input...; Question 172: Which of the following is considered an exploit framework an...; Question 173: What is the proper response for a NULL scan if the port is c...; Question 174: Which is the first step followed by Vulnerability Scanners f...; Question 175: This TCP flag instructs the sending system to transmit all b...; Question 176: You work as a Security Analyst for a retail organization. In...; Question 177: The fundamental difference between symmetric and asymmetric ...; Question 178: Which of the following will perform an Xmas scan using NMAP?...; Question 179: How can a rootkit bypass Windows 7 operating system's kernel...; Question 180: How does the Address Resolution Protocol (ARP) work?...; Question 181: When analyzing the IDS logs, the system administrator notice...; 1 commentQuestion 182: Darius is analysing logs from IDS. He want to understand wha...; Question 183: Which of the following tools will scan a network to perform ...; Question 184: Which of the following is a primary service of the U.S. Comp...; 1 commentQuestion 185: Which of the following steps for risk assessment methodology...; Question 186: What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht...; Question 187: A company's Web development team has become aware of a certa...; Question 188: Which tool can be used to silently copy files from USB devic...; Question 189: Windows LAN Manager (LM) hashes are known to be weak. Which ...; Question 190: In the field of cryptanalysis, what is meant by a "rubber-ho...; Question 191: This international organization regulates billions of transa...; Question 192: Least privilege is a security concept that requires that a u...; 2 commentQuestion 193: Based on the following extract from the log of a compromised...; Question 194: Jimmy is standing outside a secure entrance to a facility. H...; Question 195: Which cipher encrypts the plain text digit (bit or byte) one...; Question 196: Neil notices that a single address is generating traffic fro...; Question 197: A consultant is hired to do physical penetration testing at ...; Question 198: A hacker is an intelligent individual with excellent compute...; Question 199: What hacking attack is challenge/response authentication use...; Question 200: Bob is doing a password assessment for one of his clients. B...; Question 201: During a wireless penetration test, a tester detects an acce...; Question 202: A hacker is attempting to use nslookup to query Domain Name ...; 1 commentQuestion 203: Analyst is investigating proxy logs and found out that one o...; Question 204: What are two things that are possible when scanning UDP port...; Question 205: In the context of password security, a simple dictionary att...; Question 206: Diffie-Hellman (DH) groups determine the strength of the key...; Question 207: An unauthorized individual enters a building following an em...; Question 208: How do employers protect assets with security policies perta...; Question 209: The network in ABC company is using the network address 192....; Question 210: Which address translation scheme would allow a single public...; Question 211: Which of the following describes the characteristics of a Bo...; Question 212: (Exhibit) Identify the correct terminology that defines the ...; Question 213: Which among the following is a Windows command that a hacker...; Question 214: It is a short-range wireless communication technology intend...; Question 215: A medium-sized healthcare IT business decides to implement a...; Question 216: How does a denial-of-service attack work?...; Question 217: When a security analyst prepares for the formal security ass...; Question 218: An attacker attaches a rogue router in a network. He wants t...; Question 219: How can a policy help improve an employee's security awarene...; Question 220: Which of the following DoS tools is used to attack target we...; Question 221: Which of the following is considered as one of the most reli...; Question 222: Fred is the network administrator for his company. Fred is t...; Question 223: Which of the following is the best countermeasure to encrypt...; Question 224: What kind of risk will remain even if all theoretically poss...; Question 225: Attempting an injection attack on a web server based on resp...; Question 226: _________ is a tool that can hide processes from the process...; Question 227: Which security control role does encryption meet?...; Question 228: At a Windows Server command prompt, which command could be u...; Question 229: During a penetration test, a tester finds a target that is r...; Question 230: While performing ping scans into a target network you get a ...; 1 commentQuestion 231: After trying multiple exploits, you've gained root access to...; Question 232: The tools which receive event logs from servers, network equ...; Question 233: Which of the following is one of the most effective ways to ...; Question 234: Which of the following is a preventive control?...; Question 235: Which of the following processes of PKI (Public Key Infrastr...; Question 236: A network administrator received an administrative alert at ...; Question 237: Which of the following is a hashing algorithm?...; Question 238: Cross-site request forgery involves:...; Question 239: Craig received a report of all the computers on the network ...; Question 240: You are performing a penetration test for a client and have ...; Question 241: The Open Web Application Security Project (OWASP) is the wor...; Question 242: In order to show improvement of security over time, what mus...; Question 243: Bob finished a C programming course and created a small C ap...; Question 244: What does a type 3 code 13 represent? (Choose two.)...; Question 245: A person approaches a network administrator and wants advice...; Question 246: If a tester is attempting to ping a target that exists but r...; Question 247: Which of the following is a hardware requirement that either...; Question 248: The following is an entry captured by a network IDS. You are...; Question 249: Jack was attempting to fingerprint all machines in the netwo...; Question 250: A consultant has been hired by the V.P. of a large financial...; Question 251: Which of the following is a restriction being enforced in "w...; Question 252: Which of the following statements is TRUE?...; Question 253: What is the following command used for? net use \targetipc$ ...; Question 254: Suppose you've gained access to your client's hybrid network...; Question 255: If the final set of security controls does not eliminate all...; Question 256: One way to defeat a multi-level security solution is to leak...; Question 257: The use of technologies like IPSec can help guarantee the fo...; Question 258: The "gray box testing" methodology enforces what kind of res...; Question 259: Tremp is an IT Security Manager, and he is planning to deplo...; Question 260: A zone file consists of which of the following Resource Reco...

Question 182/260

Recent Comments (The most recent comments are at the top.)

LEAVE A REPLY

Download PDF File