EC-COUNCIL Certified Ethical Hacker 312-50V7 Questions & Answers

• Question 471:

  Which of the following statements would NOT be a proper definition for a Trojan Horse?

  A. An authorized program that has been designed to capture keyboard keystroke while the user is unaware of such activity being performed

  B. An unauthorized program contained within a legitimate program. This unauthorized program performs functions unknown (and probably unwanted) by the user

  C. A legitimate program that has been altered by the placement of unauthorized code within it; this code performs functions unknown (and probably unwanted) by the user

  D. Any program that appears to perform a desirable and necessary function but that (because of unauthorized code within it that is unknown to the user) performs functions unknown (and definitely unwanted) by the user

  Correct Answer: A

• Question 472:

  This attack uses social engineering techniques to trick users into accessing a fake Web site and divulging personal information. Attackers send a legitimate-looking e-mail asking users to update their information on the company's Web site, but the URLs in the e-mail actually point to a false Web site.

  A. Wiresharp attack

  B. Switch and bait attack

  C. Phishing attack

  D. Man-in-the-Middle attack

  Correct Answer: C

• Question 473:

  How many bits encryption does SHA-1 use?

  A. 64 bits

  B. 128 bits

  C. 256 bits

  D. 160 bits

  Correct Answer: D

• Question 474:

  In Trojan terminology, what is required to create the executable file chess.exe as shown below?

  

  A. Mixer

  B. Converter

  C. Wrapper

  D. Zipper

  Correct Answer: C

• Question 475:

  Syslog is a standard for logging program messages. It allows separation of the software that generates messages from the system that stores them and the software that reports and analyzes them. It also provides devices, which would otherwise be unable to communicate a means to notify administrators of problems or performance.

  

  What default port Syslog daemon listens on?

  A. 242

  B. 312

  C. 416

  D. 514

  Correct Answer: D

• Question 476:

  Google uses a unique cookie for each browser used by an individual user on a computer. This cookie contains information that allows Google to identify records about that user on its database. This cookie is submitted every time a user launches a Google search, visits a site using AdSense etc. The information stored in Google's database, identified by the cookie, includes How would you prevent Google from storing your search keywords?

  A. Block Google Cookie by applying Privacy and Security settings in your web browser

  B. Disable the Google cookie using Google Advanced Search settings on Google Search page

  C. Do not use Google but use another search engine Bing which will not collect and store your search keywords

  D. Use MAC OS X instead of Windows 7. Mac OS has higher level of privacy controls by default.

  Correct Answer: A

• Question 477:

  Peter extracts the SID list from Windows 2008 Server machine using the hacking tool "SIDExtracter". Here is the output of the SIDs:

  

  From the above list identify the user account with System Administrator privileges?

  A. John

  B. Rebecca

  C. Sheela

  D. Shawn

  E. Somia

  F. Chang

  G. Micah

  Correct Answer: F

• Question 478:

  What is the problem with this ASP script (login.asp)?

  

  A. The ASP script is vulnerable to Cross Site Scripting attack

  B. The ASP script is vulnerable to Session Splice attack

  C. The ASP script is vulnerable to XSS attack

  D. The ASP script is vulnerable to SQL Injection attack

  Correct Answer: D

• Question 479:

  Jayden is a network administrator for her company. Jayden wants to prevent MAC spoofing on all the Cisco switches in the network. How can she accomplish this?

  A. Jayden can use the commanD. ip binding set.

  B. Jayden can use the commanD. no ip spoofing.

  C. She should use the commanD. no dhcp spoofing.

  D. She can use the commanD. ip dhcp snooping binding.

  Correct Answer: D

• Question 480:

  In TCP communications there are 8 flags; FIN, SYN, RST, PSH, ACK, URG, ECE, CWR. These flags have decimal numbers assigned to them:

  FIN = 1 SYN = 2 RST = 4 PSH = 8 ACK = 16 URG = 32 ECE = 64 CWR = 128

  Jason is the security administrator of ASPEN Communications. He analyzes some traffic using Wireshark and has enabled the following filters.

  

  What is Jason trying to accomplish here?

  A. SYN, FIN, URG and PSH

  B. SYN, SYN/ACK, ACK

  C. RST, PSH/URG, FIN

  D. ACK, ACK, SYN, URG

  Correct Answer: B