EC-COUNCIL 312-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50 Online Questions & Answers

• Question 411:

  Access control is often implemented through the use of MAC address filtering on wireless Access Points. Why is this considered to be a very limited security measure?

  A. Vendors MAC address assignment is published on the Internet.
  B. The MAC address is not a real random number.
  C. The MAC address is broadcasted and can be captured by a sniffer.
  D. The MAC address is used properly only on Macintosh computers.
  C. The MAC address is broadcasted and can be captured by a sniffer.

• Question 412:

  This is an authentication method in which is used to prove that a party knows a password without transmitting the password in any recoverable form over a network. This authentication is secure because the password is never transmitted over the network, even in hashed form; only a random number and an encrypted random number are sent.

  A. Realm Authentication
  B. SSL Authentication
  C. Basic Form Authentication
  D. Cryptographic Authentication
  E. Challenge/Response Authentication
  E. Challenge/Response Authentication

  ---

  Challenge-Response Authentication The secure Challenge-Response Authentication Mechanism (CRAM-MD5) avoids passing a cleartext password over the network when you access your email account, ensuring that your login details cannot be captured and used by anyone in transit. http://www.neomailbox.com/component/content/article/212-hardware-token-authentication

• Question 413:

  Sara is making use of Digest Authentication for her Web site. Why is this considered to be more secure than Basic authentication?

  A. Basic authentication is broken
  B. The password is never sent in clear text over the network
  C. The password sent in clear text over the network is never reused.
  D. It is based on Kerberos authentication protocol
  B. The password is never sent in clear text over the network

  ---

  Digest access authentication is one of the agreed methods a web page can use to negotiate credentials with a web user (using the HTTP protocol). This method builds upon (and obsoletes) the basic authentication scheme, allowing user identity to be established without having to send a password in plaintext over the network.

• Question 414:

  What is the name of the software tool used to crack a single account on Netware Servers using a dictionary attack?

  A. NPWCrack
  B. NWPCrack
  C. NovCrack
  D. CrackNov
  E. GetCrack
  B. NWPCrack

  ---

  NWPCrack is the software tool used to crack single accounts on Netware servers.

• Question 415:

  You are the CIO for Avantes Finance International, a global finance company based in Geneva. You are responsible for network functions and logical security throughout the entire corporation. Your company has over 250 servers running Windows Server, 5000 workstations running Windows Vista, and 200 mobile users working from laptops on Windows 7.

  Last week, 10 of your company's laptops were stolen from salesmen while at a conference in Amsterdam. These laptops contained proprietary company information. While doing damage assessment on the possible public relations nightmare this may become, a news story leaks about the stolen laptops and also that sensitive information from those computers was posted to a blog online.

  What built-in Windows feature could you have implemented to protect the sensitive information on these laptops?

  A. You should have used 3DES which is built into Windows
  B. If you would have implemented Pretty Good Privacy (PGP) which is built into Windows, the sensitive information on the laptops would not have leaked out
  C. You should have utilized the built-in feature of Distributed File System (DFS) to protect the sensitive information on the laptops
  D. You could have implemented Encrypted File System (EFS) to encrypt the sensitive files on the laptops
  D. You could have implemented Encrypted File System (EFS) to encrypt the sensitive files on the laptops

• Question 416:

  Exhibit:

  

  You are conducting pen-test against a company's website using SQL Injection techniques. You enter "anuthing or 1=1-" in the username filed of an authentication form. This is the output returned from the server. What is the next step you should do?

  A. Identify the user context of the web application by running_http://www.example.com/order/include_rsa_asp?pressReleaseID=5ANDUSER_NAME() = `dbo'
  B. Identify the database and table name by running:http://www.example.com/order/include_rsa.asp? pressReleaseID=5ANDascii(lower(substring((SELECT TOP 1 name FROM sysobjects WHERExtype='U'),1))) > 109
  C. Format the C: drive and delete the database by running:http://www.example.com/order/include_rsa.asp?pressReleaseID=5 ANDxp_cmdshell `format c: /q /yes `; drop database myDB; -
  D. Reboot the web server by running:http://www.example.com/order/include_rsa.asp? pressReleaseID=5AND xp_cmdshell `iisreset reboot'; -
  A. Identify the user context of the web application by running_http://www.example.com/order/include_rsa_asp?pressReleaseID=5ANDUSER_NAME() = `dbo'

• Question 417:

  What does an ICMP (Code 13) message normally indicates?

  A. It indicates that the destination host is unreachable
  B. It indicates to the host that the datagram which triggered the source quench message will need to be re-sent
  C. It indicates that the packet has been administratively dropped in transit
  D. It is a request to the host to cut back the rate at which it is sending traffic to the Internet destination
  C. It indicates that the packet has been administratively dropped in transit

  ---

  CODE 13 and type 3 is destination unreachable due to communication administratively prohibited by filtering hence maybe they meant "code 13", therefore would be C). Note:A - Type 3B - Type 4C - Type 3 Code 13D - Typ4 4

• Question 418:

  What type of session hijacking attack is shown in the exhibit?

  

  A. Cross-site scripting Attack
  B. SQL Injection Attack
  C. Token sniffing Attack
  D. Session Fixation Attack
  D. Session Fixation Attack

• Question 419:

  In this attack, a victim receives an e-mail claiming from PayPal stating that their account has been disabled and confirmation is required before activation. The attackers then scam to collect not one but two credit card numbers, ATM PIN

  number and other personal details. Ignorant users usually fall prey to this scam.

  Which of the following statement is incorrect related to this attack?

  A. Do not reply to email messages or popup ads asking for personal or financial information
  B. Do not trust telephone numbers in e-mails or popup ads
  C. Review credit card and bank account statements regularly
  D. Antivirus, anti-spyware, and firewall software can very easily detect these type of attacks
  E. Do not send credit card numbers, and personal or financial information via e-mail
  A. Do not reply to email messages or popup ads asking for personal or financial information

• Question 420:

  What does the this symbol mean?

  

  A. Open Access Point
  B. WPA Encrypted Access Point
  C. WEP Encrypted Access Point
  D. Closed Access Point
  A. Open Access Point

  ---

  This symbol is a "warchalking" symbol for a open node (open circle) with the SSID tsunami and the bandwidth 2.0 Mb/s