EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 101:

  A security engineer is attempting to map a company's internal network. The engineer enters in the following NMAP commanD.

  NMAP –n –sS –P0 –p 80 ***.***.**.**

  What type of scan is this?

  A. Quick scan
  B. Intense scan
  C. Stealth scan
  D. Comprehensive scan
  C. Stealth scan

• Question 102:

  If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack is possible?

  A. Birthday
  B. Brute force
  C. Man-in-the-middle
  D. Smurf
  B. Brute force

• Question 103:

  Why would an ethical hacker use the technique of firewalking?

  A. It is a technique used to discover wireless network on foot.
  B. It is a technique used to map routers on a network link.
  C. It is a technique used to discover the nature of rules configured on a gateway.
  D. It is a technique used to discover interfaces in promiscuous mode.
  C. It is a technique used to discover the nature of rules configured on a gateway.

• Question 104:

  You want to carry out session hijacking on a remote server. The server and the client are communicating via TCP after a successful TCP three way handshake. The server has just received packet #120 from the client. The client has a receive window of 200 and the server has a receive window of 250.

  Within what range of sequence numbers should a packet, sent by the client fall in order to be accepted by the server?

  A. 200-250
  B. 121-371
  C. 120-321
  D. 121-231
  E. 120-370
  B. 121-371

• Question 105:

  The chance of a hard drive failure is once every three years. The cost to buy a new hard drive is $300. It will require 10 hours to restore the OS and software to the new hard disk. It will require a further 4 hours to restore the database from the

  last backup to the new hard disk. The recovery person earns $10/hour.

  Calculate theSLE, ARO, and ALE. Assume the EF = 1 (100%).

  What is the closest approximate cost of this replacement and recovery operation per year?

  A. $100
  B. $146
  C. 440
  D. 1320
  B. $146

• Question 106:

  What is the name of the software tool used to crack a single account on Netware Servers using a dictionary attack?

  A. NPWCrack
  B. NWPCrack
  C. NovCrack
  D. CrackNov
  E. GetCrack
  B. NWPCrack

• Question 107:

  Which of the following buffer overflow exploits are related to Microsoft IIS web server? (Choose three)

  A. Internet Printing Protocol (IPP) buffer overflow
  B. Code Red Worm
  C. Indexing services ISAPI extension buffer overflow
  D. NeXT buffer overflow
  A. Internet Printing Protocol (IPP) buffer overflow
  B. Code Red Worm
  C. Indexing services ISAPI extension buffer overflow

• Question 108:

  Jason's Web server was attacked by a trojan virus. He runs protocol analyzer and notices that the trojan communicates to a remote server on the Internet. Shown below is the standard "hexdump" representation of the network packet, before being decoded. Jason wants to identify the trojan by looking at the destination port number and mapping to a trojan-port number database on the Internet.

  Identify the remote server's port number by decoding the packet?

  A. Port 1890 (Net-Devil Trojan)
  B. Port 1786 (Net-Devil Trojan)
  C. Port 1909 (Net-Devil Trojan)
  D. Port 6667 (Net-Devil Trojan)
  D. Port 6667 (Net-Devil Trojan)

• Question 109:

  Diffie-Hellman (DH) groups determine the strength of the key used in the key exchange process. Which of the following is the correct bit size of the Diffie-Hellman (DH) group 5?

  A. 768 bit key
  B. 1025 bit key
  C. 1536 bit key
  D. 2048 bit key
  C. 1536 bit key

• Question 110:

  Your company has blocked all the ports via external firewall and only allows port 80/443 to connect to the Internet. You want to use FTP to connect to some remote server on the Internet. How would you accomplish this?

  A. Use HTTP Tunneling
  B. Use Proxy Chaining
  C. Use TOR Network
  D. Use Reverse Chaining
  A. Use HTTP Tunneling