EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 111:

  A security policy will be more accepted by employees if it is consistent and has the support of

  A. coworkers.
  B. executive management.
  C. the security officer.
  D. a supervisor.
  B. executive management.

• Question 112:

  Which of the following statements would NOT be a proper definition for a Trojan Horse?

  A. An authorized program that has been designed to capture keyboard keystroke while the user is unaware of such activity being performed
  B. An unauthorized program contained within a legitimate program. This unauthorized program performs functions unknown (and probably unwanted) by the user
  C. A legitimate program that has been altered by the placement of unauthorized code within it; this code performs functions unknown (and probably unwanted) by the user
  D. Any program that appears to perform a desirable and necessary function but that (because of unauthorized code within it that is unknown to the user) performs functions unknown (and definitely unwanted) by the user
  A. An authorized program that has been designed to capture keyboard keystroke while the user is unaware of such activity being performed

• Question 113:

  > NMAP –sn 192.168.11.200-215

  The NMAP command above performs which of the following?

  A. A ping scan
  B. A trace sweep
  C. An operating system detect
  D. A port scan
  A. A ping scan

• Question 114:

  This attack uses social engineering techniques to trick users into accessing a fake Web site and divulging personal information. Attackers send a legitimate- looking e-mail asking users to update their information on the company's Web site, but the URLs in the e-mail actually point to a false Web site.

  A. Wiresharp attack
  B. Switch and bait attack
  C. Phishing attack
  D. Man-in-the-Middle attack
  C. Phishing attack

• Question 115:

  To what does "message repudiation" refer to what concept in the realm of email security?

  A. Message repudiation means a user can validate which mail server or servers a message was passed through.
  B. Message repudiation means a user can claim damages for a mail message that damaged their reputation.
  C. Message repudiation means a recipient can be sure that a message was sent from a particular person.
  D. Message repudiation means a recipient can be sure that a message was sent from a certain host.
  E. Message repudiation means a sender can claim they did not actually send a particular message.
  E. Message repudiation means a sender can claim they did not actually send a particular message.

• Question 116:

  Which tool is used to automate SQL injections and exploit a database by forcing a given web application to connect to another database controlled by a hacker?

  A. DataThief
  B. NetCat
  C. Cain and Abel
  D. SQLInjector
  D. SQLInjector

• Question 117:

  If an attacker's computer sends an IPID of 31400 to a zombie (Idle Scanning) computer on an open port, what will be the response?

  A. 31400
  B. 31402
  C. The zombie will not send a response
  D. 31401
  B. 31402

• Question 118:

  You have initiated an active operating system fingerprinting attempt with nmap against a target system: What operating system is the target host running based on the open ports shown above?

  

  A. Windows XP
  B. Windows 98 SE
  C. Windows NT4 Server
  D. Windows 2000 Server
  D. Windows 2000 Server

• Question 119:

  File extensions provide information regarding the underlying server technology. Attackers can use this information to search vulnerabilities and launch attacks. How would you disable file extensions in Apache servers?

  A. Use disable-eXchange
  B. Use mod_negotiation
  C. Use Stop_Files
  D. Use Lib_exchanges
  B. Use mod_negotiation

• Question 120:

  The purpose of a ____________ is to deny network access to local area networks and other information assets by unauthorized wireless devices.

  A. Wireless Access Point
  B. Wireless Analyzer
  C. Wireless Access Control list
  D. Wireless Intrusion Prevention System
  D. Wireless Intrusion Prevention System