EC-COUNCIL 312-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50 Online Questions & Answers

• Question 211:

  Nathalie would like to perform a reliable scan against a remote target. She is not concerned about being stealth at this point. Which of the following type of scans would be the most accurate and reliable?

  A. A FIN Scan
  B. A Half Scan
  C. A UDP Scan
  D. The TCP Connect Scan
  D. The TCP Connect Scan

  ---

  The connect() system call provided by your operating system is used to open a connection to every interesting port on the machine. If the port is listening, connect () will succeed, otherwise the port isn't reachable. One strong advantage to this technique is that you don't need any special privileges. This is the fastest scanning method supported by nmap, and is available with the -t (TCP) option. The big downside is that this sort of scan is easily detectable and filterable.

• Question 212:

  What is War Dialing?

  A. War dialing involves the use of a program in conjunction with a modem to penetrate the modem/PBX-based systems
  B. War dialing is a vulnerability scanning technique that penetrates Firewalls
  C. It is a social engineering technique that uses Phone calls to trick victims
  D. Involves IDS Scanning Fragments to bypass Internet filters and stateful Firewalls
  A. War dialing involves the use of a program in conjunction with a modem to penetrate the modem/PBX-based systems

• Question 213:

  Matthew re-injects a captured wireless packet back onto the network. He does this hundreds of times within a second. The packet is correctly encrypted and Matthew assumes it is an ARP request packet. The wireless host responds with a

  stream of responses, all individually encrypted with different IVs.

  What is this attack most appropriately called?

  A. Spoof attack
  B. Replay attack
  C. Injection attack
  D. Rebound attack
  B. Replay attack

  ---

  A replay attack is a form of network attack in which a valid data transmission is maliciously or fraudulently repeated or delayed. This is carried out either by the originator or by an adversary who intercepts the data and retransmits it, possibly as part of a masquerade attack by IP packet substitution (such as stream cipher attack).

• Question 214:

  Jack Hacker wants to break into Brown Co.'s computers and obtain their secret double fudge cookie recipe. Jack calls Jane, an accountant at Brown Co., pretending to be an administrator from Brown Co. Jack tells Jane that there has been a problem with some accounts and asks her to tell him her password 'just to double check our records'. Jane believes that Jack is really an administrator, and tells him her password. Jack now has a user name and password, and can access Brown Co.'s computers, to find the cookie recipe. This is an example of what kind of attack?

  A. Reverse Psychology
  B. Social Engineering
  C. Reverse Engineering
  D. Spoofing Identity
  E. Faking Identity
  B. Social Engineering

  ---

  This is a typical case of pretexting. Pretexting is the act of creating and using an invented scenario (the pretext) to persuade a target to release information or perform an action and is usually done over the telephone.

• Question 215:

  A client has approached you with a penetration test requirements. They are concerned with the possibility of external threat, and have invested considerable resources in protecting their Internet exposure. However, their main concern is the possibility of an employee elevating his/her privileges and gaining access to information outside of their respective department.

  What kind of penetration test would you recommend that would best address the client's concern?

  A. A Black Box test
  B. A Black Hat test
  C. A Grey Box test
  D. A Grey Hat test
  E. A White Box test
  F. A White Hat test
  C. A Grey Box test

• Question 216:

  Which of the following tool would be considered as Signature Integrity Verifier (SIV)?

  A. Nmap
  B. SNORT
  C. VirusSCAN
  D. Tripwire
  D. Tripwire

• Question 217:

  What are the differences between SSL and S-HTTP?

  A. SSL operates at the network layer and S-HTTP operates at the application layer
  B. SSL operates at the application layer and S-HTTP operates at the network layer
  C. SSL operates at the transport layer and S-HTTP operates at the application layer
  D. SSL operates at the application layer and S-HTTP operates at the transport layer
  C. SSL operates at the transport layer and S-HTTP operates at the application layer

  ---

  The main difference between the protocols is the layer at which they operate. SSL operates at the transport layer and mimics the "socket library," while S-HTTP operates at the application layer. Encryption of the transport layer allows SSL to be application-independent, while S-HTTP is limited to the specific software implementing it. The protocols adopt different philosophies towards encryption as well, with SSL encrypting the entire communications channel and S-HTTP encrypting each message independently.

• Question 218:

  Choose one of the following pseudo codes to describe this statement:

  If we have written 200 characters to the buffer variable, the stack should stop because it cannot hold any more data.

  A. If (I > 200) then exit (1)
  B. If (I < 200) then exit (1)
  C. If (I
  D. If (I >= 200) then exit (1)
  D. If (I >= 200) then exit (1)

• Question 219:

  Trojan horse attacks pose one of the most serious threats to computer security. The image below shows different ways a Trojan can get into a system. Which are the easiest and most convincing ways to infect a computer?

  

  A. IRC (Internet Relay Chat)
  B. Legitimate "shrink-wrapped" software packaged by a disgruntled employee
  C. NetBIOS (File Sharing)
  D. Downloading files, games and screensavers from Internet sites
  B. Legitimate "shrink-wrapped" software packaged by a disgruntled employee

• Question 220:

  You have just received an assignment for an assessment at a company site. Company's management is concerned about external threat and wants to take appropriate steps to insure security is in place. Anyway the management is also worried about possible threats coming from inside the site, specifically from employees belonging to different Departments. What kind of assessment will you be performing ?

  A. Black box testing
  B. Black hat testing
  C. Gray box testing
  D. Gray hat testing
  E. White box testing
  F. White hat testing
  C. Gray box testing

  ---

  Internal Testing is also referred to as Gray-box testing.