EC-COUNCIL 312-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50 Online Questions & Answers

• Question 691:

  Jimmy, an attacker, knows that he can take advantage of poorly designed input validation routines to create or alter SQL commands to gain access to private data or execute commands in the database. What technique does Jimmy use to compromise a database?

  A. Jimmy can submit user input that executes an operating system command to compromise a target system
  B. Jimmy can utilize this particular database threat that is an SQL injection technique to penetrate a target system
  C. Jimmy can utilize an incorrect configuration that leads to access with higher-than-expected privilege of the database
  D. Jimmy can gain control of system to flood the target system with requests, preventing legitimate users from gaining access
  B. Jimmy can utilize this particular database threat that is an SQL injection technique to penetrate a target system

  ---

  SQL injection is a security vulnerability that occurs in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is in fact an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another.

• Question 692:

  Because UDP is a connectionless protocol: (Select 2)

  A. UDP recvfrom() and write() scanning will yield reliable results
  B. It can only be used for Connect scans
  C. It can only be used for SYN scans
  D. There is no guarantee that the UDP packets will arrive at their destination
  E. ICMP port unreachable messages may not be returned successfully
  D. There is no guarantee that the UDP packets will arrive at their destination
  E. ICMP port unreachable messages may not be returned successfully

  ---

  Neither UDP packets, nor the ICMP errors are guaranteed to arrive, so UDP scanners must also implement retransmission of packets that appear to be lost (or you will get a bunch of false positives).

• Question 693:

  What happens when one experiences a ping of death?

  A. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP) and the "type" field in the ICMP header is set to 18 (Address Mask Reply).
  B. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP), the Last Fragment bit is set, and (IP offset ` 8) + (IP data length) >65535.In other words, the IP offset (which represents the starting position of this fragment in the original packet, and which is in 8-byte units) plus the rest of the packet is greater than the maximum size for an IP packet.
  C. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP) and the source equal to destination address.
  D. This is when an the IP header is set to 1 (ICMP) and the "type" field in the ICMP header is set to 5 (Redirect).
  B. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP), the Last Fragment bit is set, and (IP offset ` 8) + (IP data length) >65535.In other words, the IP offset (which represents the starting position of this fragment in the original packet, and which is in 8-byte units) plus the rest of the packet is greater than the maximum size for an IP packet.

  ---

  A hacker can send an IP packet to a vulnerable machine such that the last fragment contains an offest where (IP offset *8) + (IP data length)>65535. This means that when the packet is reassembled, its total length is larger than the legal limit, causing buffer overruns in the machine's OS (becouse the buffer sizes are defined only to accomodate the maximum allowed size of the packet based on RFC 791)...IDS can generally recongize such attacks by looking for packet fragments that have the IP header's protocol field set to 1 (ICMP), the last bit set, and (IP offset *8) +(IP data length)>65535" CCIE Professional Development Network Security Principles and Practices by Saadat Malik pg 414 "Ping of Death" attacks cause systems to react in an unpredictable fashion when receiving oversized IP packets. TCP/IP allows for a maximum packet size of up to 65536 octets (1 octet = 8 bits of data), containing a minimum of 20 octets of IP header information and zero or more octets of optional information, with the rest of the packet being data. Ping of Death attacks can cause crashing, freezing, and rebooting.

• Question 694:

  Dave has been assigned to test the network security of Acme Corp. The test was announced to the employees. He created a webpage to discuss the progress of the tests with employees who were interested in following the test. Visitors were allowed to click on a sand clock to mark the progress of the test. Dave successfully embeds a keylogger. He also added some statistics on the webpage. The firewall protects the network well and allows strict Internet access. How was security compromised and how did the firewall respond?

  A. The attack did not fall through as the firewall blocked the traffic
  B. The attack was social engineering and the firewall did not detect it
  C. The attack was deception and security was not directly compromised
  D. Security was not compromised as the webpage was hosted internally
  B. The attack was social engineering and the firewall did not detect it

  ---

  This was just another way to trick the information out of the users without the need to hack into any systems. All traffic is outgoing and initiated by the user so the firewall will not react.

• Question 695:

  What is the goal of a Denial of Service Attack?

  A. Capture files from a remote computer.
  B. Render a network or computer incapable of providing normal service.
  C. Exploit a weakness in the TCP stack.
  D. Execute service at PS 1009.
  B. Render a network or computer incapable of providing normal service.

  ---

  In computer security, a denial-of-service attack (DoS attack) is an attempt to make a computer resource unavailable to its intended users. Typically the targets are high-profile web servers, and the attack attempts to make the hosted web pages unavailable on the Internet. It is a computer crime that violates the Internet proper use policy as indicated by the Internet Architecture Board (IAB).

• Question 696:

  Liza has forgotten her password to an online bookstore. The web application asks her to key in her email so that they can send her the password. Liza enters her email [email protected]'. The application displays server error. What is wrong with the web application?

  A. The email is not valid
  B. User input is not sanitized
  C. The web server may be down
  D. The ISP connection is not reliable
  B. User input is not sanitized

  ---

  All input from web browsers, such as user data from HTML forms and cookies, must be stripped of special characters and HTML tags as described in the following CERT advisories: http://www.cert.org/advisories/CA-1997-25.html http://www.cert.org/advisories/CA-2000-02.html

• Question 697:

  Bob is a very security conscious computer user. He plans to test a site that is known to have malicious applets, code, and more. Bob always make use of a basic Web Browser to perform such testing. Which of the following web browser can adequately fill this purpose?

  A. Internet Explorer
  B. Mozila
  C. Lynx
  D. Tiger
  C. Lynx

  ---

  Lynx is a program used to browse the World Wide Web, which works on simple text terminals, rather than requiring a graphical computer display terminal.

• Question 698:

  Steven is the senior network administrator for Onkton Incorporated, an oil well drilling company in Oklahoma City. Steven and his team of IT technicians are in charge of keeping inventory for the entire company; including computers, software, and oil well equipment. To keep track of everything, Steven has decided to use RFID tags on their entire inventory so they can be scanned with either a wireless scanner or a handheld scanner. These RFID tags hold as much information as possible about the equipment they are attached to. When Steven purchased these tags, he made sure they were as state of the art as possible. One feature he really liked was the ability to disable RFID tags if necessary. This comes in very handy when the company actually sells oil drilling equipment to other companies. All Steven has to do is disable the RFID tag on the sold equipment and it cannot give up any information that was previously stored on it. What technology allows Steven to disable the RFID tags once they are no longer needed?

  A. Newer RFID tags can be disabled by using Terminator Switches built into the chips
  B. RFID Kill Switches built into the chips enable Steven to disable them
  C. The company's RFID tags can be disabled by Steven using Replaceable ROM technology
  D. The technology used to disable an RFIP chip after it is no longer needed, or possibly stolen, is called RSA Blocking
  D. The technology used to disable an RFIP chip after it is no longer needed, or possibly stolen, is called RSA Blocking

  ---

  http://www.rsa.com/rsalabs/node.asp?id=2060

• Question 699:

  Microsoft Authenticode technology is used for:

  A. Digital Signing Activex controls
  B. Digitally signing SSL Certificates
  C. Digitally Signing JavaScript Files
  D. Digitally Signing Java Applets
  A. Digital Signing Activex controls

  ---

  Authenticode identifies the publisher of signed software and verifies that it hasn't been tampered with, before users download software to their PCs. As a result, end users can make a more informed decision as to whether or not to download code. Authenticode relies on digital certificates and is based on specifications that have been used successfully in the industry for some time, including Public Key Cryptography Standards (PKCS) #7 (encrypted key specification), PKCS #10 (certificate request formats), X.509 (certificate specification), and Secure Hash Algorithm (SHA) and MD5 hash algorithms.

• Question 700:

  How many bits encryption does SHA-1 use?

  A. 64 bits
  B. 128 bits
  C. 160 bits
  D. 256 bits
  C. 160 bits

  ---

  SHA-1 (as well as SHA-0) produces a 160-bit digest from a message with a maximum length of 264 - 1 bits, and is based on principles similar to those used by Professor Ronald L. Rivest of MIT in the design of the MD4 and MD5 message digest algorithms.