exam questions

Exam 312-50 All Questions

View all questions & answers for the 312-50 exam

Exam 312-50 topic 8 question 19 discussion

Actual exam question from ECCouncil's 312-50
Question #: 19
Topic #: 8
[All 312-50 Questions]

Under the "Post-attack Phase and Activities", it is the responsibility of the tester to restore the systems to a pre-test state.
Which of the following activities should not be included in this phase? (see exhibit)
Exhibit:

  • A. III
  • B. IV
  • C. III and IV
  • D. All should be included.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
The post-attack phase revolves around returning any modified system(s) to the pretest state. Examples of such activities:
✑ Removal of any files, tools, exploits, or other test-created objects uploaded to the system during testing
✑ Removal or reversal of any changes to the registry made during system testing
References: Computer and Information Security Handbook, John R. Vacca (2012), page 531

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
XX20Jim20XX
8 months, 1 week ago
Selected Answer: C
why not C?
upvoted 1 times
...
Goki_28
2 years ago
Selected Answer: B
you should not be maintaining backdoor.
upvoted 1 times
...
Qwertyzloy
2 years, 7 months ago
A is the correct one, you should do all other - remove all, except the network mapping.
upvoted 1 times
...
IamStuding
3 years, 4 months ago
It's not B. You are the tester and you are finished your work. Why you still to have access after you did your job? It is not legal.
upvoted 4 times
...
kevintoshi
3 years, 8 months ago
Answer wrong . it should be B.
upvoted 4 times
thebigdax
3 years, 8 months ago
exactly, backdoor should not be maintained
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...