EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 151:

  Low humidity in a data center can cause which of the following problems?

  A. Heat
  B. Corrosion
  C. Static electricity
  D. Airborne contamination
  C. Static electricity

• Question 152:

  Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal?

  A. har.txt
  B. SAM file
  C. wwwroot
  D. Repair file
  B. SAM file

• Question 153:

  Which of the following tools can be used for passiveOS fingerprinting?

  A. tcpdump
  B. ping
  C. nmap
  D. Tracert
  C. nmap

• Question 154:

  Doug is conducting a port scan of a target network. He knows that his client target network has a web server and that there is a mail server also which is up and running. Doug has been sweeping the network but has not been able to elicit any response from the remote target.

  Which of the following could be the most likely cause behind this lack of response? Select 4.

  A. UDP is filtered by a gateway
  B. The packet TTL value is too low and cannot reach the target
  C. The host might be down
  D. The destination network might be down
  E. The TCP windows size does not match
  F. ICMP is filtered by a gateway
  A. UDP is filtered by a gateway
  B. The packet TTL value is too low and cannot reach the target
  C. The host might be down
  F. ICMP is filtered by a gateway

• Question 155:

  The following script shows a simple SQL injection. The script builds an SQL query by concatenating hard-coded strings together with a string entered by the user:

  

  The user is prompted to enter the name of a city on a Web form. If she enters Chicago, the query assembled by the script looks similar to the following:

  SELECT * FROM OrdersTable WHERE ShipCity = 'Chicago'

  How will you delete the OrdersTable from the database using SQL Injection?

  A. Chicago'; drop table OrdersTable -
  B. Delete table'blah'; OrdersTable -
  C. EXEC; SELECT * OrdersTable > DROP -
  D. cmdshell'; 'del c:\sql\mydb\OrdersTable' //
  A. Chicago'; drop table OrdersTable -

• Question 156:

  You are a Network Security Officer. You have two machines. The first machine (192.168.0.99) has snort installed, and the second machine (192.168.0.150) has kiwi syslog installed. You perform a syn scan in your network, and you notice that kiwi syslog is not receiving the alert message from snort. You decide to run wireshark in the snort machine to check if the messages are going to the kiwi syslog machine.

  What wireshark filter will show the connections from the snort machineto kiwi syslog machine?

  A. tcp.dstport==514 andand ip.dst==192.168.0.150
  B. tcp.dstport==514 andandip.dst==192.168.0.99
  C. tcp.srcport==514 andand ip.src==192.168.0.99
  D. tcp.srcport==514 andand ip.src==192.168.150
  A. tcp.dstport==514 andand ip.dst==192.168.0.150

• Question 157:

  What happens during a SYN flood attack?

  A. TCP connection requests floods a target machine is flooded with randomized source address and ports for the TCP ports.
  B. A TCP SYN packet,which is a connection initiation,is sent to a target machine,giving the target host's address as both source and destination,and is using the same port on the target host as both source and destination.
  C. A TCP packet is received with the FIN bit set but with no ACK bit set in the flags field.
  D. A TCP packet is received with both the SYN and the FIN bits set in the flags field.
  A. TCP connection requests floods a target machine is flooded with randomized source address and ports for the TCP ports.

• Question 158:

  What is the main advantage that a network-based IDS/IPS system has over a host-based solution?

  A. They do not use host system resources.
  B. They are placed at the boundary,allowing them to inspect all traffic.
  C. They are easier to install and configure.
  D. They will not interfere with user interfaces.
  A. They do not use host system resources.

• Question 159:

  If an attacker's computer sends an IPID of 24333 to a zombie (Idle Scanning) computer on a closed port, what will be the response?

  A. The zombie computer will respond with an IPID of 24334.
  B. The zombie computer will respond with an IPID of 24333.
  C. The zombie computer will not send a response.
  D. The zombie computer will respond with an IPID of 24335.
  A. The zombie computer will respond with an IPID of 24334.

• Question 160:

  Tess King is using the nslookup command to craft queries to list all DNS information (such as Name Servers, host names, MX records, CNAME records, glue records (delegation for child Domains), zone serial number, TimeToLive (TTL) records, etc) for a Domain.

  What do you think Tess King is trying to accomplish? Select the best answer.

  A. A zone harvesting
  B. A zone transfer
  C. A zone update
  D. A zone estimate
  B. A zone transfer