EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 171:

  What port scanning method involves sending spoofed packets to a target system and then looking for adjustments to the IPID on a zombie system?

  A. Blind Port Scanning
  B. Idle Scanning
  C. Bounce Scanning
  D. Stealth Scanning
  E. UDP Scanning
  B. Idle Scanning

• Question 172:

  Joseph has just been hired on to a contractor company of the Department of Defense as their Senior Security Analyst. Joseph has been instructed on the company's strict security policies that have been implemented, and the policies that have yet to be put in place. Per the Department of Defense, all DoD users and the users of their contractors must use two-factor authentication to access their networks. Joseph has been delegated the task of researching and implementing the best two-factor authentication method for his company.

  Joseph's supervisor has told him that they would like to use some type of hardware device in tandem with a security or identifying pin number. Joseph's company has already researched using smart cards and all the resources needed to implement them, but found the smart cards to not be cost effective.

  What type of device should Joseph use for two-factor authentication?

  A. Biometric device
  B. OTP
  C. Proximity cards
  D. Security token
  D. Security token

• Question 173:

  What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

  A. Blue Book
  B. ISO 26029
  C. Common Criteria
  D. The Wassenaar Agreement
  C. Common Criteria

• Question 174:

  During a blackbox pen test you attempt to pass IRC traffic over post 80/TCP from a compromised web enabled host. The traffic gets blocked; however outbound HTTP traffic is unimpeded. What type of firewall is inspecting outbound traffic?

  A. Circuit
  B. Packet Filtering
  C. Application
  D. Stateful
  C. Application

• Question 175:

  Ivan is auditing a corporate website. Using Winhex, he alters a cookie as shown below.

  Before Alteration: Cookie: lang=en-us; ADMIN=no; y=1 ; time=10:30GMT ;

  After Alteration: Cookie: lang=en-us; ADMIN=yes; y=1 ; time=12:30GMT ;

  What attack is being depicted here?

  A. Cookie Stealing
  B. Session Hijacking
  C. Cross Site Scripting
  D. Parameter Manipulation
  D. Parameter Manipulation

• Question 176:

  What does FIN in TCP flag define?

  A. Used to abort a TCP connection abruptly
  B. Used to close a TCP connection
  C. Used to acknowledge receipt of a previous packet or transmission
  D. Used to indicate the beginning of a TCP connection
  B. Used to close a TCP connection

• Question 177:

  John is the network administrator of XSECURITY systems. His network was recently compromised. He analyzes the log files to investigate the attack. Take a look at the following Linux log file snippet. The hacker compromised and "owned" a Linux machine.

  What is the hacker trying to accomplish here?

  

  A. The hacker is attempting to compromise more machines on the network
  B. The hacker is planting a rootkit
  C. The hacker is running a buffer overflow exploit to lock down the system
  D. The hacker is trying to cover his tracks
  D. The hacker is trying to cover his tracks

• Question 178:

  Which of the following is a symmetric cryptographic standard?

  A. DSA
  B. PKI
  C. RSA
  D. 3DES
  D. 3DES

• Question 179:

  The following is a sample of output from a penetration tester's machine targeting a machine with the IP address of 192.168.1.106:

  

  What is most likely taking place?

  A. Ping sweep of the 192.168.1.106 network
  B. Remote service brute force attempt
  C. Port scan of 192.168.1.106
  D. Denial of service attack on 192.168.1.106
  B. Remote service brute force attempt

• Question 180:

  What hacking attack is challenge/response authentication used to prevent?

  A. Replay attacks
  B. Scanning attacks
  C. Session hijacking attacks
  D. Password cracking attacks
  A. Replay attacks