EC-Council 312-50 Exam Questions
Ethical Hacker Certified (Page 3 )

Updated On: 17-Feb-2026

What are the two basic types of attacks?(Choose two.

  1. DoS
  2. Passive
  3. Sniffing
  4. Active
  5. Cracking

Answer(s): B,D

Explanation:

Passive and active attacks are the two basic types of attacks.



The United Kingdom (UK) he passed a law that makes hacking into an unauthorized network a felony.
The law states:
Section1 of the Act refers to unauthorized access to computer material. This states that a person commits an offence if he causes a computer to perform any function with intent to secure unauthorized access to any program or data held in any computer. For a successful conviction under this part of the Act, the prosecution must prove that the access secured is unauthorized and that the suspect knew that this was the case. This section is designed to deal with common-or-graden hacking.
Section 2 of the deals with unauthorized access with intent to commit or facilitate the commission of further offences. An offence is committed under Section 2 if a Section 1 offence has been committed and there is the intention of committing or facilitating a further offense (any offence which attacks a custodial sentence of more than five years, not necessarily one covered but the Act). Even if it is not possible to prove the intent to commit the further offence, the Section 1 offence is still committed.
Section 3 Offences cover unauthorized modification of computer material, which generally means the creation and distribution of viruses. For conviction to succeed there must have been the intent to cause the modifications and knowledge that the modification had not been authorized.
What is the law called?

  1. Computer Misuse Act 1990
  2. Computer incident Act 2000
  3. Cyber Crime Law Act 2003
  4. Cyber Space Crime Act 1995

Answer(s): A

Explanation:

Computer Misuse Act (1990) creates three criminal offences:



Which of the following best describes Vulnerability?

  1. The loss potential of a threat
  2. An action or event that might prejudice security
  3. An agent that could take advantage of a weakness
  4. A weakness or error that can lead to compromise

Answer(s): D

Explanation:

A vulnerability is a flaw or weakness in system security procedures, design or implementation that could be exercised (accidentally triggered or intentionally exploited) and result in a harm to an IT system or activity.



Steven works as a security consultant and frequently performs penetration tests for Fortune 500 companies. Steven runs external and internal tests and then creates reports to show the companies where their weak areas are. Steven always signs a non-disclosure agreement before performing his tests. What would Steven be considered?

  1. Whitehat Hacker
  2. BlackHat Hacker
  3. Grayhat Hacker
  4. Bluehat Hacker

Answer(s): A

Explanation:

A white hat hacker, also rendered as ethical hacker, is, in the realm of information technology, a person who is ethically opposed to the abuse of computer systems. Realization that the Internet now represents human voices from around the world has made the defense of its integrity an important pastime for many. A white hat generally focuses on securing IT systems, whereas a black hat (the opposite) would like to break into them.



Which of the following act in the united states specifically criminalizes the transmission of unsolicited commercial e-mail(SPAM) without an existing business relationship.

  1. 2004 CANSPAM Act
  2. 2003 SPAM Preventing Act
  3. 2005 US-SPAM 1030 Act
  4. 1990 Computer Misuse Act

Answer(s): A

Explanation:

The CAN-SPAM Act of 2003 (Controlling the Assault of Non-Solicited Pornography and Marketing Act) establishes requirements for those who send commercial email, spells out penalties for spammers and companies whose products are advertised in spam if they violate the law, and gives consumers the right to ask emailers to stop spamming them. The law, which became effective January 1, 2004, covers email whose primary purpose is advertising or promoting a commercial product or service, including content on a Web site. A "transactional or relationship message" – email that facilitates an agreed-upon transaction or updates a customer in an existing business relationship – may not contain false or misleading routing information, but otherwise is exempt from most provisions of the CAN-SPAM Act.






Post your Comments and Discuss EC-Council 312-50 exam dumps with other Community members:

Join the 312-50 Discussion