EC-COUNCIL 312-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50 Online Questions & Answers

• Question 311:

  Here is the ASCII Sheet.

  You want to guess the DBO username juggyboy (8 characters) using Blind SQL Injection technique.

  What is the correct syntax?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 312:

  While doing fast scan using F option, which file is used to list the range of ports to scan by nmap?

  A. services
  B. nmap-services
  C. protocols
  D. ports
  B. nmap-services

  ---

  Nmap uses the nmap-services file to provide additional port detail for almost every scanning method. Every time a port is referenced, it's compared to an available description in this support file. If the nmap-services file isn't available, nmap reverts to the /etc/services file applicable for the current operating system.

• Question 313:

  What does the term "Ethical Hacking" mean?

  A. Someone who is hacking for ethical reasons.
  B. Someone who is using his/her skills for ethical reasons.
  C. Someone who is using his/her skills for defensive purposes.
  D. Someone who is using his/her skills for offensive purposes.
  C. Someone who is using his/her skills for defensive purposes.

  ---

  Ethical hacking is only about defending your self or your employer against malicious persons by using the same techniques and skills.

• Question 314:

  Data is sent over the network as clear text (unencrypted) when Basic Authentication is configured on Web Servers.

  A. True
  B. False
  A. True

  ---

  Using HTTP basic authentication will result in your password being sent over the internet as clear text. Don't use this technique unless you understand what the ramifications of this are.

• Question 315:

  Smurf is a simple attack based on IP spoofing and broadcasts. A single packet (such as an ICMP Echo Request) is sent as a directed broadcast to a subnet on the Internet. All the machines on that subnet respond to this broadcast. By

  spoofing the source IP Address of the packet, all the responses will get sent to the spoofed IP Address. Thus, a hacker can often flood a victim with hundreds of responses for every request the hacker sends out.

  Who are the primary victims of these attacks on the Internet today?

  A. IRC servers are the primary victim to smurf attacks
  B. IDS devices are the primary victim to smurf attacks
  C. Mail Servers are the primary victim to smurf attacks
  D. SPAM filters are the primary victim to surf attacks
  A. IRC servers are the primary victim to smurf attacks

  ---

  IRC servers are the primary victim to smurf attacks. Script-kiddies run programs that scan the Internet looking for "amplifiers" (i.e. subnets that will respond). They compile lists of these amplifiers and exchange them with their friends. Thus, when a victim is flooded with responses, they will appear to come from all over the Internet. On IRCs, hackers will use bots (automated programs) that connect to IRC servers and collect IP addresses. The bots then send the forged packets to the amplifiers to inundate the victim.

• Question 316:

  Jacob is looking through a traffic log that was captured using Wireshark. Jacob has come across what appears to be SYN requests to an internal computer from a spoofed IP address. What is Jacob seeing here?

  A. Jacob is seeing a Smurf attack.
  B. Jacob is seeing a SYN flood.
  C. He is seeing a SYN/ACK attack.
  D. He has found evidence of an ACK flood.
  B. Jacob is seeing a SYN flood.

• Question 317:

  Which of the following keyloggers cannot be detected by anti-virus or anti-spyware products?

  A. Covert keylogger
  B. Stealth keylogger
  C. Software keylogger
  D. Hardware keylogger
  D. Hardware keylogger

  ---

  As the hardware keylogger never interacts with the Operating System it is undetectable by anti-virus or anti-spyware products.

• Question 318:

  The United Kingdom (UK) he passed a law that makes hacking into an unauthorized network a felony. The law states:

  Section1 of the Act refers to unauthorized access to computer material. This states that a person commits an offence if he causes a computer to perform any function with intent to secure unauthorized access to any program or data held in any computer. For a successful conviction under this part of the Act, the prosecution must prove that the access secured is unauthorized and that the suspect knew that this was the case. This section is designed to deal with common- orgraden hacking.

  Section 2 of the deals with unauthorized access with intent to commit or facilitate the commission of further offences. An offence is committed under Section 2 if a Section 1 offence has been committed and there is the intention of committing or facilitating a further offense (any offence which attacks a custodial sentence of more than five years, not necessarily one covered but the Act). Even if it is not possible to prove the intent to commit the further offence, the Section 1 offence is still committed.

  Section 3 Offences cover unauthorized modification of computer material, which generally means the creation and distribution of viruses. For conviction to succeed there must have been the intent to cause the modifications and knowledge that the modification had not been authorized

  What is the law called?

  A. Computer Misuse Act 1990
  B. Computer incident Act 2000
  C. Cyber Crime Law Act 2003
  D. Cyber Space Crime Act 1995
  A. Computer Misuse Act 1990

  ---

  Computer Misuse Act (1990) creates three criminal offences:

• Question 319:

  What is the proper response for a FIN scan if the port is closed?

  A. SYN
  B. ACK
  C. FIN
  D. PSH
  E. RST
  E. RST

  ---

  Closed ports respond to a FIN scan with a RST.

• Question 320:

  You are footprinting the www.xsecurity.com domain using the Google Search Engine. You would like to determine what sites link to www.xsecurity .com at the first level of revelance. Which of the following operator in Google search will you use to achieve this?

  A. Link: www.xsecurity.com
  B. serch?l:www.xsecurity.com
  C. level1.www.security.com
  D. pagerank:www.xsecurity.com
  A. Link: www.xsecurity.com

  ---

  The query [link:] will list webpages that have links to the specified webpage. For instance, [link:www.google.com] will list webpages that have links pointing to the Google homepage. Note there can be no space between the "link:" and the web page url.