EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 121:

  Which of the statements concerning proxy firewalls is correct?

  A. Proxy firewalls increase the speed and functionality of a network.
  B. Firewall proxy servers decentralize all activity for an application.
  C. Proxy firewalls block network packets from passing to and from a protected network.
  D. Computers establish a connection with a proxy firewall which initiates a new network connection for the client.
  D. Computers establish a connection with a proxy firewall which initiates a new network connection for the client.

• Question 122:

  Windump is the windows port of the famous TCPDump packet sniffer available on a variety of platforms. In order to use this tool on the Windows platform you must install a packet capture library.

  What is the name of this library?

  A. NTPCAP B. LibPCAP
  C. WinPCAP
  D. PCAP
  C. WinPCAP

• Question 123:

  An attacker has been successfully modifying the purchase price of items purchased on the company's web site. The security administrators verify the web server and Oracle database have not been compromised directly. They have also verified the Intrusion Detection System (IDS) logs and found no attacks that could have caused this.

  What is the mostly likely way the attacker has been able to modify the purchase price?

  A. By using SQL injection
  B. By changing hidden form values
  C. By using cross site scripting
  D. By utilizing a buffer overflow attack
  B. By changing hidden form values

• Question 124:

  Which of the following tools can be used to perform a zone transfer?

  A. NSLookup
  B. Finger
  C. Dig
  D. Sam Spade
  E. Host
  F. Netcat
  G. Neotrace
  A. NSLookup
  C. Dig
  D. Sam Spade
  E. Host

• Question 125:

  ARP poisoning is achieved in _____ steps

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 126:

  Which of the following type of scanning utilizes automated process of proactively identifying vulnerabilities of the computing systems present on a network?

  A. Port Scanning
  B. Single Scanning
  C. External Scanning
  D. Vulnerability Scanning
  D. Vulnerability Scanning

• Question 127:

  Google uses a unique cookie for each browser used by an individual user on a computer.

  This cookie contains information that allows Google to identify records about that user on its database. This cookie is submitted every time a user launches a Google search, visits a site using AdSense etc. The information stored in Google's

  database, identified by the cookie, includes.

  How would you prevent Google from storing your search keywords?

  A. Block Google Cookie by applying Privacy and Security settings in your web browser
  B. Disable the Google cookie using Google Advanced Search settings on Google Search page
  C. Do not use Google but use another search engine Bing which will not collect and store your search keywords
  D. Use MAC OS X instead of Windows 7. Mac OS has higher level of privacy controls by default.
  A. Block Google Cookie by applying Privacy and Security settings in your web browser

• Question 128:

  You are tasked to perform a penetration test. While you are performinginformation gathering, you find ab employee list in Google. You find receptionist's email, and you send her an email changing the source email to her boss's email ( boss@company ). In this email, you ask for a pdf with information. She reads your email and sends back a pdf with links. You exchange the pdf links with your malicious links (these links contain malware) and send back the modified pdf, saying that the links don't work. She reads your email, opens the links, and her machine gets infected.

  What testing method did you use?

  A. Piggybacking
  B. Tailgating
  C. Evesdropping
  D. Social engineering
  D. Social engineering

• Question 129:

  How does a denial-of-service attack work?

  A. A hacker prevents a legitimate user (or group of users) from accessing a service
  B. A hacker uses every character,word,or letter he or she can think of to defeat authentication
  C. A hacker tries to decipher a password by using a system,which subsequently crashes the network
  D. A hacker attempts to imitate a legitimate user by confusing a computer or even another person
  A. A hacker prevents a legitimate user (or group of users) from accessing a service

• Question 130:

  A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

  A. Reject all invalid email received via SMTP.
  B. Allow full DNS zone transfers.
  C. Remove A records for internal hosts.
  D. Enable null session pipes.
  C. Remove A records for internal hosts.