Eccouncil 312-50 Exam - Topic 5 Question 50 Discussion

Actual exam question for Eccouncil's 312-50 exam

Question #: 50
Topic #: 5

Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers.

Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?

AHardware, Software, and Sniffing.

BHardware and Software Keyloggers.

CPasswords are always best obtained using Hardware key loggers.

DSoftware only, they are the most effective.

Show Suggested Answer

Suggested Answer: A

by Delmy at May 08, 2022, 02:26 PM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ty

4 months ago

B is solid, but I’d lean towards A for a comprehensive approach.

upvoted 0 times

...

Ronald

4 months ago

Wait, can you really retrieve passwords like that? Sounds risky.

upvoted 0 times

...

Marshall

4 months ago

I think C is too extreme, not always hardware.

upvoted 0 times

...

Carry

4 months ago

Totally agree, hardware and software are key!

upvoted 0 times

...

Dottie

5 months ago

A is the best option, covers all bases.

upvoted 0 times

...

Ben

5 months ago

I recall that software keyloggers can be really effective, but I wonder if relying solely on them is a good idea, like option D suggests.

upvoted 0 times

...

Cecil

5 months ago

I feel like I’ve seen practice questions where hardware keyloggers were emphasized, but I’m not entirely convinced that they’re the only way to go.

upvoted 0 times

...

Buffy

5 months ago

I think option A makes the most sense since it covers multiple methods, but I’m a bit confused about the effectiveness of sniffing in this context.

upvoted 0 times

...

Marquetta

5 months ago

I remember discussing how hardware and software can both be used to capture passwords, but I'm not sure if sniffing is really the best option here.

upvoted 0 times

...

Diane

5 months ago

Hmm, this seems straightforward. I think the answer is Asset and Image, since those are the two content types that can be used to provide product-related information to buyers.

upvoted 0 times

...

Yuette

5 months ago

This seems like a straightforward ethical question. I'll need to carefully consider the options and choose the one that best aligns with ethical standards.

upvoted 0 times

...

Page

5 months ago

Option C looks interesting - retrieving the credentials from the instance metadata. That could be a good way to avoid storing them in the application config. I'll have to think that one through a bit more.

upvoted 0 times

...

Lisandra

5 months ago

I'm a bit confused by the benchmark YTM information. Does that mean the G-Sec rate has changed? I'll need to double-check the relationship between bond prices, yields, and interest rates to make sure I'm on the right track.

upvoted 0 times

...

Xuan

5 months ago

Okay, let me break this down. A multi-homed firewall needs to have at least two network interfaces, one for the external network and one for the internal network. So the minimum number of connections would be 4, right?

upvoted 0 times

...