EC-COUNCIL 312-49 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-49 Online Questions & Answers

• Question 221:

  Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the web server's root directory?

  A. Parameter/form tampering
  B. Unvalidated input
  C. Directory traversal
  D. Security misconfiguration
  C. Directory traversal

• Question 222:

  When a router receives an update for its routing table, what is the metric value change to that path?

  A. Increased by 2
  B. Decreased by 1
  C. Increased by 1
  D. Decreased by 2
  C. Increased by 1

• Question 223:

  You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based on HTML, DHTML, and other web-based languages and how they have evolved over the years. You navigate to archive. org and view the HTML code of news.com. You then navigate to the current news.com website and copy over the source code. While searching through the code, you come across something abnormal: What have you found?

  A. Web bug
  B. CGI code
  C. Trojan.downloader
  D. Blind bug
  A. Web bug

• Question 224:

  Why is it still possible to recover files that have been emptied from the Recycle Bin on a Windows computer?

  A. The data is still present until the original location of the file is used
  B. The data is moved to the Restore directory and is kept there indefinitely
  C. The data will reside in the L2 cache on a Windows computer until it is manually deleted
  D. It is not possible to recover data that has been emptied from the Recycle Bin
  A. The data is still present until the original location of the file is used

• Question 225:

  What is the CIDR from the following screenshot?

  

  A. /24A./24A./24
  B. /32 B./32 B./32
  C. /16 C./16 C./16
  D. /8D./8D./8
  D. /8D./8D./8

• Question 226:

  In a FAT32 system, a 123 KB file will use how many sectors?

  A. 34
  B. 25
  C. 11
  D. 56
  B. 25

• Question 227:

  George is the network administrator of a large Internet company on the west coast. Per corporate policy, none of the employees in the company are allowed to use FTP or SFTP programs without obtaining approval from the IT department. Few managers are using SFTP program on their computers. Before talking to his boss, George wants to have some proof of their activity. George wants to use Ethereal to monitor network traffic, but only SFTP traffic to and from his network. What filter should George use in Ethereal?

  A. src port 23 and dst port 23
  B. udp port 22 and host 172.16.28.1/24
  C. net port 22
  D. src port 22 and dst port 22
  D. src port 22 and dst port 22

• Question 228:

  James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his network?

  A. Smurf
  B. Trinoo
  C. Fraggle
  D. SYN flood
  A. Smurf

• Question 229:

  Annie is searching for certain deleted files on a system running Windows XP OS. Where will she find the files if they were not completely deleted from the system?

  A. C: $Recycled.Bin
  B. C: \$Recycle.Bin
  C. C:\RECYCLER
  D. C:\$RECYCLER
  B. C: \$Recycle.Bin

• Question 230:

  Julia is a senior security analyst for Berber Consulting group. She is currently working on a contract for a small accounting firm in Florid a. They have given her permission to perform social engineering attacks on the company to see if their in-house training did any good. Julia calls the main number for the accounting firm and talks to the receptionist. Julia says that she is an IT technician from the company's main office in Iowa. She states that she needs the receptionist's network username and password to troubleshoot a problem they are having. Julia says that Bill Hammond, the CEO of the company, requested this information. After hearing the name of the CEO, the receptionist gave Julia all the information she asked for. What principal of social engineering did Julia use?

  A. Social Validation
  B. Scarcity
  C. Friendship/Liking
  D. Reciprocation
  D. Reciprocation