EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 231:

  A company is using Windows Server 2003 for its Active Directory (AD). What is the most efficient way to crack the passwords for the AD users?

  A. Perform a dictionary attack.

  B. Perform a brute force attack.

  C. Perform an attack with a rainbow table.

  D. Perform a hybrid attack.

  Correct Answer: C

• Question 232:

  When an alert rule is matched in a network-based IDS like snort, the IDS does which of the following?

  A. Drops the packet and moves on to the next one

  B. Continues to evaluate the packet until all rules are checked

  C. Stops checking rules, sends an alert, and lets the packet continue

  D. Blocks the connection with the source IP address in the packet

  Correct Answer: B

• Question 233:

  Passive reconnaissance involves collecting information through which of the following?

  A. Social engineering

  B. Network traffic sniffing

  C. Man in the middle attacks

  D. Publicly accessible sources

  Correct Answer: D

• Question 234:

  During a penetration test, the tester conducts an ACK scan using NMAP against the external interface of the DMZ firewall. NMAP reports that port 80 is unfiltered. Based on this response, which type of packet inspection is the firewall conducting?

  A. Host

  B. Stateful

  C. Stateless

  D. Application

  Correct Answer: C

• Question 235:

  During a wireless penetration test, a tester detects an access point using WPA2 encryption. Which of the following attacks should be used to obtain the key?

  A. The tester must capture the WPA2 authentication handshake and then crack it.

  B. The tester must use the tool inSSIDer to crack it using the ESSID of the network.

  C. The tester cannot crack WPA2 because it is in full compliance with the IEEE 802.11i standard.

  D. The tester must change the MAC address of the wireless network card and then use the AirTraf tool to obtain the key.

  Correct Answer: A

• Question 236:

  Which of the following conditions must be given to allow a tester to exploit a Cross-Site Request Forgery (CSRF) vulnerable web application?

  A. The victim user must open the malicious link with an Internet Explorer prior to version 8.

  B. The session cookies generated by the application do not have the HttpOnly flag set.

  C. The victim user must open the malicious link with a Firefox prior to version 3.

  D. The web application should not use random tokens.

  Correct Answer: D

• Question 237:

  Which of the following items of a computer system will an anti-virus program scan for viruses?

  A. Boot Sector

  B. Deleted Files

  C. Windows Process List

  D. Password Protected Files

  Correct Answer: A

• Question 238:

  Which of the following can take an arbitrary length of input and produce a message digest output of 160 bit?

  A. SHA-1

  B. MD5

  C. HAVAL

  D. MD4

  Correct Answer: A

• Question 239:

  A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.

  Which cryptography attack is the student attempting?

  A. Man-in-the-middle attack

  B. Brute-force attack

  C. Dictionary attack

  D. Session hijacking

  Correct Answer: C

• Question 240:

  A hacker, who posed as a heating and air conditioning specialist, was able to install a sniffer program in a switched environment network. Which attack could the hacker use to sniff all of the packets in the network?

  A. Fraggle

  B. MAC Flood

  C. Smurf

  D. Tear Drop

  Correct Answer: B