EC-COUNCIL 312-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50 Online Questions & Answers

• Question 341:

  Which port, when configured on a switch receives a copy of every packet that passes through it?

  

  A. R-DUPE Port
  B. MIRROR port
  C. SPAN port
  D. PORTMON
  C. SPAN port

• Question 342:

  While reviewing the results of a scan run against a target network you come across the following:

  

  What was used to obtain this output?

  A. An SNMP Walk
  B. Hping2 diagnosis
  C. A Bo2K System query
  D. Nmap protocol/port scan
  A. An SNMP Walk

  ---

  The snmpwalk command is designed to perform a sequence of chained GETNEXT requests automatically, rather than having to issue the necessary snmpgetnext requests by hand. The command takes a single OID, and will display a list of all the results which lie within the subtree rooted on this OID.

• Question 343:

  While performing a ping sweep of a subnet you receive an ICMP reply of Code 3/Type 13 for all the pings sent out. What is the most likely cause behind this response?

  A. The firewall is dropping the packets.
  B. An in-line IDS is dropping the packets.
  C. A router is blocking ICMP.
  D. The host does not respond to ICMP packets.
  C. A router is blocking ICMP.

  ---

  Type 3 message = Destination Unreachable [RFC792], Code 13 (cause) = Communication Administratively Prohibited [RFC1812]

• Question 344:

  _______ is one of the programs used to wardial.

  A. DialIT
  B. Netstumbler
  C. TooPac
  D. Kismet
  E. ToneLoc
  E. ToneLoc

  ---

  ToneLoc is one of the programs used to wardial. While this is considered an "old school" technique, it is still effective at finding backdoors and out of band network entry points.

• Question 345:

  Which of the following statements best describes the term Vulnerability?

  A. A weakness or error that can lead to a compromise
  B. An agent that has the potential to take advantage of a weakness
  C. An action or event that might prejudice security
  D. The loss potential of a threat.
  A. A weakness or error that can lead to a compromise

  ---

  Vulnerabilities are all weaknesses that can be exploited.

• Question 346:

  Shayla is an IT security consultant, specializing in social engineering and external penetration tests. Shayla has been hired on by Treks Avionics, a subcontractor for the Department of Defense. Shayla has been given authority to perform any and all tests necessary to audit the company's network security.

  No employees for the company, other than the IT director, know about Shayla's work she will be doing. Shayla's first step is to obtain a list of employees through company website contact pages. Then she befriends a female employee of the company through an online chat website. After meeting with the female employee numerous times, Shayla is able to gain her trust and they become friends. One day, Shayla steals the employee's access badge and uses it to gain unauthorized access to the Treks Avionics offices.

  What type of insider threat would Shayla be considered?

  A. She would be considered an Insider Affiliate
  B. Because she does not have any legal access herself, Shayla would be considered an Outside Affiliate
  C. Shayla is an Insider Associate since she has befriended an actual employee
  D. Since Shayla obtained access with a legitimate company badge; she would be considered a Pure Insider
  A. She would be considered an Insider Affiliate

• Question 347:

  After an attacker has successfully compromised a remote computer, what would be one of the last steps that would be taken to ensure that the compromise is not traced back to the source of the problem?

  A. Install pactehs
  B. Setup a backdoor
  C. Cover your tracks
  D. Install a zombie for DDOS
  C. Cover your tracks

  ---

  As a hacker you don't want to leave any traces that could lead back to you.

• Question 348:

  If a competitor wants to cause damage to your organization, steal critical secrets, or put you out of business, they just have to find a job opening, prepare someone to pass the interview, have that person hired, and they will be in the organization.

  

  How would you prevent such type of attacks?

  A. It is impossible to block these attacks
  B. Hire the people through third-party job agencies who will vet them for you
  C. Conduct thorough background checks before you engage them
  D. Investigate their social networking profiles
  C. Conduct thorough background checks before you engage them

• Question 349:

  In an attempt to secure his wireless network, Bob implements a VPN to cover the wireless communications. Immediately after the implementation, users begin complaining about how slow the wireless network is. After benchmarking the network's speed. Bob discovers that throughput has dropped by almost half even though the number of users has remained the same. Why does this happen in the VPN over wireless implementation?

  A. The stronger encryption used by the VPN slows down the network.
  B. Using a VPN with wireless doubles the overhead on an access point for all direct client to access point communications.
  C. VPNs use larger packets then wireless networks normally do.
  D. Using a VPN on wireless automatically enables WEP, which causes additional overhead.
  B. Using a VPN with wireless doubles the overhead on an access point for all direct client to access point communications.

  ---

  By applying VPN the access point will have to recalculate all headers destined for client and from clients twice.

• Question 350:

  What is the correct command to run Netcat on a server using port 56 that spawns command shell when connected?

  

  A. nc -port 56 -s cmd.exe
  B. nc -p 56 -p -e shell.exe
  C. nc -r 56 -c cmd.exe
  D. nc -L 56 -t -e cmd.exe
  D. nc -L 56 -t -e cmd.exe