EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 221:

  Several of your co-workers are having a discussion over the etc/passwd file. They are at odds over what types of encryption are used to secure Linux passwords. (Choose all that apply.)

  A. Linux passwords can be encrypted with MD5
  B. Linux passwords can be encrypted with SHA
  C. Linux passwords can be encrypted with DES
  D. Linux passwords can be encrypted with Blowfish
  E. Linux passwords are encrypted with asymmetric algrothims
  A. Linux passwords can be encrypted with MD5
  C. Linux passwords can be encrypted with DES
  D. Linux passwords can be encrypted with Blowfish

• Question 222:

  Exhibit:

  

  You have captured some packets in Ethereal. You want to view only packets sent from 10.0.0.22. What filter will you apply?

  A. ip = 10.0.0.22
  B. ip.src == 10.0.0.22
  C. ip.equals 10.0.0.22
  D. ip.address = 10.0.0.22
  B. ip.src == 10.0.0.22

• Question 223:

  Rebecca has noted multiple entries in her logs about users attempting to connect on ports that are either not opened or ports that are not for public usage.

  How can she restrict this type of abuse by limiting access to only specific IP addresses that are trusted by using one of the built-in Linux Operating System tools?

  A. Ensure all files have at least a 755 or more restrictive permissions.
  B. Configure rules using ipchains.
  C. Configure and enable portsentry on his server.
  D. Install an intrusion detection system on her computer such as Snort.
  B. Configure rules using ipchains.

• Question 224:

  Which of the following examples best represents a logical or technical control?

  A. Security tokens
  B. Heating and air conditioning
  C. Smoke and fire alarms
  D. Corporate security policy
  A. Security tokens

• Question 225:

  Maintaining a secure Web server requires constant effort, resources, and vigilance from an organization. Securely administering a Web server on a daily basis is an essential aspect of Web server security. Maintaining the security of a Web server will usually involve the following steps:

  1.

  Configuring, protecting, and analyzing log files

  2.

  Backing up critical information frequently

  3.

  Maintaining a protected authoritative copy of the organization's Web content

  4.

  Establishing and following procedures for recovering from compromise

  5.

  Testing and applying patches in a timely manner

  6.

  Testing security periodically.

  In which step would you engage a forensic investigator?

  A. 1
  B. 2
  C. 3
  D. 4
  E. 5
  F. 6
  D. 4

• Question 226:

  After studying the following log entries, how many user IDs can you identify that the attacker has tampered with?

  1.

  mkdir -p /etc/X11/applnk/Internet/.etc

  2.

  mkdir -p /etc/X11/applnk/Internet/.etcpasswd

  3.

  touch -acmr /etc/passwd /etc/X11/applnk/Internet/.etcpasswd

  4.

  touch -acmr /etc /etc/X11/applnk/Internet/.etc

  5.

  passwd nobody -d

  6.

  /usr/sbin/adduser dns -d/bin -u 0 -g 0 -s/bin/bash

  7.

  passwd dns -d

  8.

  touch -acmr /etc/X11/applnk/Internet/.etcpasswd /etc/passwd

  9.

  touch -acmr /etc/X11/applnk/Internet/.etc /etc

  A. IUSR_
  B. acmr,dns
  C. nobody,dns
  D. nobody,IUSR_
  C. nobody,dns

• Question 227:

  A POP3 client contacts the POP3 server:

  A. To send mail
  B. To receive mail
  C. to send and receive mail
  D. to get the address to send mail to
  E. initiate a UDP SMTP connection to read mail
  B. To receive mail

• Question 228:

  The programmers on your team are analyzing the free, open source software being used to run FTP services on a server in your organization. They notice that there is excessive number of functions in the source code that might lead to buffer overflow. These C++ functions do not check bounds. Identify the line in the source code that might lead to buffer overflow?

  

  A. 9A.9
  B. 17B.17
  C. 20C.20
  D. 32D.32
  E. 35E.35
  B. 17B.17

• Question 229:

  Susan has attached to her company's network. She has managed to synchronize her boss's sessions with that of the file server. She then intercepted his traffic destined for the server, changed it the way she wanted to and then placed it on the server in his home directory.

  What kind of attack is Susan carrying on?

  A. A sniffing attack
  B. A spoofing attack
  C. A man in the middle attack
  D. A denial of service attack
  C. A man in the middle attack

• Question 230:

  What is the process of logging, recording, and resolving events that take place in an organization?

  A. Metrics
  B. Security Policy
  C. Internal Procedure
  D. Incident Management Process
  D. Incident Management Process