EC-COUNCIL 312-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50 Online Questions & Answers

• Question 491:

  Which of the following buffer overflow exploits are related to Microsoft IIS web server? (Choose three)

  A. Internet Printing Protocol (IPP) buffer overflow
  B. Code Red Worm
  C. Indexing services ISAPI extension buffer overflow
  D. NeXT buffer overflow
  A. Internet Printing Protocol (IPP) buffer overflow
  B. Code Red Worm
  C. Indexing services ISAPI extension buffer overflow

  ---

  Both the buffer overflow in the Internet Printing Protocol and the ISAPI extension buffer overflow is explained in Microsoft Security Bulletin MS01-023. The Code Red worm was a computer worm released on the Internet on July 13, 2001. It attacked computers running Microsoft's IIS web server.

• Question 492:

  Peter is a Linux network admin. As a knowledgeable security consultant, he turns to you to look for help on a firewall. He wants to use Linux as his firewall and use the latest freely available version that is offered. What do you recommend? Select the best answer.

  A. Ipchains
  B. Iptables
  C. Checkpoint FW for Linux
  D. Ipfwadm
  B. Iptables

  ---

  Ipchains was improved over ipfwadm with its chaining mechanism so that it can have multiple rulesets. However, it isn't the latest version of a free Linux firewall. Iptables replaced ipchains and is the latest of the free Linux firewall tools. Any Checkpoint firewall is not going to meet Jason's desire to have a free firewall. Ipfwadm is used to build Linux firewall rules prior to 2.2.0. It is a outdated version.

• Question 493:

  An attacker has been successfully modifying the purchase price of items purchased at a web site. The security administrators verify the web server and Oracle database have not been compromised directly. They have also verified the IDS logs and found no attacks that could have caused this. What is the mostly likely way the attacker has been able to modify the price?

  A. By using SQL injection
  B. By using cross site scripting
  C. By changing hidden form values in a local copy of the web page
  D. There is no way the attacker could do this without directly compromising either the web server or the database
  C. By changing hidden form values in a local copy of the web page

  ---

  Changing hidden form values is possible when a web site is poorly built and is trusting the visitors computer to submit vital data, like the price of a product, to the database.

• Question 494:

  Web servers often contain directories that do not need to be indexed. You create a text file with search engine indexing restrictions and place it on the root directory of the Web Server.

  User-agent: * Disallow: /images/ Disallow: /banners/ Disallow: /Forms/ Disallow: /Dictionary/ Disallow: /_borders/ Disallow: /_fpclass/ Disallow: /_overlay/ Disallow: /_private/ Disallow: /_themes/

  What is the name of this file?

  A. robots.txt
  B. search.txt
  C. blocklist.txt
  D. spf.txt
  A. robots.txt

• Question 495:

  Daryl is a network administrator working for Dayton Technologies. Since Daryl's background is in web application development, many of the programs and applications his company uses are web-based. Daryl sets up a simple forms-based logon screen for all the applications he creates so they are secure.

  The problem Daryl is having is that his users are forgetting their passwords quite often and sometimes he does not have the time to get into his applications and change the passwords for them. Daryl wants a tool or program that can monitor web-based passwords and notify him when a password has been changed so he can use that tool whenever a user calls him and he can give them their password right then.

  What tool would work best for Daryl's needs?

  A. Password sniffer
  B. L0phtcrack
  C. John the Ripper
  D. WinHttrack
  A. Password sniffer

  ---

  L0phtCrack is a password auditing and recovery application (now called LC5), originally produced by Mudge from L0pht Heavy Industries. It is used to test password strength and sometimes to recover lost Microsoft Windows passwords.

  John the Ripper is one of the most popular password testing/breaking programs as it combines a number of password crackers into one package, autodetects password hash types, and includes a customisable cracker. It can be run against

  various encrypted password formats including several crypt password hash types WinHttrack is a offline browser.

  A password sniffer would give Daryl the passwords when they are changed as it is a web based authentication over a simple form but still it would be more correct to give the users new passwords instead of keeping a copy of the passwords

  in clear text.

• Question 496:

  You are doing IP spoofing while you scan your target. You find that the target has port 23 open.Anyway you are unable to connect. Why?

  A. A firewall is blocking port 23
  B. You cannot spoof + TCP
  C. You need an automated telnet tool
  D. The OS does not reply to telnet even if port 23 is open
  A. A firewall is blocking port 23

  ---

  The question is not telling you what state the port is being reported by the scanning utility, if the program used to conduct this is nmap, nmap will show you one of three states "open", "closed", or "filtered" a port can be in an "open" state yet filtered, usually by a stateful packet inspection filter (ie. Netfilter for linux, ipfilter for bsd). C and D to make any sense for this question, their bogus, and B, "You cannot spoof + TCP", well you can spoof + TCP, so we strike that out.

• Question 497:

  Yancey is a network security administrator for a large electric company. This company provides power for over 100,000 people in Las Vegas. Yancey has worked for his company for over 15 years and has become very successful. One day, Yancey comes in to work and finds out that the company will be downsizing and he will be out of a job in two weeks. Yancey is very angry and decides to place logic bombs, viruses, Trojans, and backdoors all over the network to take down the company once he has left. Yancey does not care if his actions land him in jail for 30 or more years, he just wants the company to pay for what they are doing to him. What would Yancey be considered?

  A. Yancey would be considered a Suicide Hacker
  B. Since he does not care about going to jail, he would be considered a Black Hat
  C. Because Yancey works for the company currently; he would be a White Hat
  D. Yancey is a Hacktivist Hacker since he is standing up to a company that is downsizing
  A. Yancey would be considered a Suicide Hacker

• Question 498:

  What are twp types of ICMP code used when using the ping command?

  A. It uses types 0 and 8.
  B. It uses types 13 and 14.
  C. It uses types 15 and 17.
  D. The ping command does not use ICMP but uses UDP.
  A. It uses types 0 and 8.

  ---

  ICMP Type 0 = Echo Reply, ICMP Type 8 = Echo

• Question 499:

  _____ is a type of symmetric-key encryption algorithm that transforms a fixed-length block of plaintext (unencrypted text) data into a block of ciphertext (encrypted text) data of the same length.

  A. Bit Cipher
  B. Hash Cipher
  C. Block Cipher
  D. Stream Cipher
  C. Block Cipher

  ---

  A block cipher is a symmetric key cipher which operates on fixed-length groups of bits, termed blocks, with an unvarying transformation. When encrypting, a block cipher might take a (for example) 128-bit block of plaintext as input, and output a corresponding 128-bit block of ciphertext.

• Question 500:

  How do you defend against Privilege Escalation?

  A. Use encryption to protect sensitive data
  B. Restrict the interactive logon privileges
  C. Run services as unprivileged accounts
  D. Allow security settings of IE to zero or Low
  E. Run users and applications on the least privileges
  A. Use encryption to protect sensitive data
  B. Restrict the interactive logon privileges
  C. Run services as unprivileged accounts
  E. Run users and applications on the least privileges