EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 511:

  A company is using Windows Server 2003 for its Active Directory (AD). What is the most efficient way to crack the passwords for the AD users?

  A. Perform a dictionary attack.
  B. Perform a brute force attack.
  C. Perform an attack with a rainbow table.
  D. Perform a hybrid attack.
  C. Perform an attack with a rainbow table.

• Question 512:

  Michael is a junior security analyst working for the National Security Agency (NSA) working primarily on breaking terrorist encrypted messages. The NSA has a number of methods they use to decipher encrypted messages including Government Access to Keys (GAK) and inside informants. The NSA holds secret backdoor keys to many of the encryption algorithms used on the Internet. The problem for the NSA, and Michael, is that terrorist organizations are starting to use custom-built algorithms or obscure algorithms purchased from corrupt governments. For this reason, Michael and other security analysts like him have been forced to find different methods of deciphering terrorist messages. One method that Michael thought of using was to hide malicious code inside seemingly harmless programs. Michael first monitors sites and bulletin boards used by known terrorists, and then he is able to glean email addresses to some of these suspected terrorists. Michael then inserts a stealth keylogger into a mapping program file readme.txt and then sends that as an attachment to the terrorist. This keylogger takes screenshots every 2 minutes and also logs all keyboard activity into a hidden file on the terrorist's computer. Then, the keylogger emails those files to Michael twice a day with a built in SMTP server. What technique has Michael used to disguise this keylogging software?

  A. Steganography
  B. Wrapping
  C. ADS
  D. Hidden Channels
  C. ADS

• Question 513:

  A security consultant is trying to bid on a large contract that involves penetration testing and reporting. The company accepting bids wants proof of work so the consultant prints out several audits that have been performed. Which of the following is likely to occur as a result?

  A. The consultant will ask for money on the bid because of great work.
  B. The consultant may expose vulnerabilities of other companies.
  C. The company accepting bids will want the same type of format of testing.
  D. The company accepting bids will hire the consultant because of the great work performed.
  B. The consultant may expose vulnerabilities of other companies.

• Question 514:

  You ping a target IP to check if the host is up. You do not get a response. You suspect ICMP is blocked at the firewall. Next you use hping2 tool to ping the target host and you get a response. Why does the host respond to hping2 and not ping packet?

  

  A. Ping packets cannot bypass firewalls
  B. You must use ping 10.2.3.4 switch
  C. Hping2 uses stealth TCP packets to connect
  D. Hping2 uses TCP instead of ICMP by default
  D. Hping2 uses TCP instead of ICMP by default