EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 291:

  Which of the following wireless technologies can be detected by NetStumbler? (Select all that apply)

  A. 802.11b
  B. 802.11e
  C. 802.11a
  D. 802.11g
  E. 802.11
  A. 802.11b
  C. 802.11a
  D. 802.11g

• Question 292:

  Which of the following is true of the wireless Service Set ID (SSID)? (Select all that apply.)

  A. Identifies the wireless network
  B. Acts as a password for network access
  C. Should be left at the factory default setting
  D. Not broadcasting the SSID defeats NetStumbler and other wireless discovery tools
  A. Identifies the wireless network
  B. Acts as a password for network access

• Question 293:

  You may be able to identify the IP addresses and machine names for the firewall, and the names of internal mail servers by:

  A. Sending a mail message to a valid address on the target network,and examining the header information generated by the IMAP servers
  B. Examining the SMTP header information generated by using the -mx command parameter of DIG
  C. Examining the SMTP header information generated in response to an e-mail message sent to an invalid address
  D. Sending a mail message to an invalid address on the target network,and examining the header information generated by the POP servers
  C. Examining the SMTP header information generated in response to an e-mail message sent to an invalid address

• Question 294:

  You have just received an assignment for an assessment at a company site. Company's management is concerned about external threat and wants to take appropriate steps to insure security is in place. Anyway the management is also worried about possible threats coming from inside the site, specifically from employees belonging to different Departments.

  What kind of assessment will you be performing ?

  A. Black box testing
  B. Black hat testing
  C. Gray box testing
  D. Gray hat testing
  E. White box testing
  F. White hat testing
  C. Gray box testing

• Question 295:

  After gaining access to the password hashes used to protect access to a web based application, knowledge of which cryptographic algorithms would be useful to gain access to the application?

  A. SHA1
  B. Diffie-Helman
  C. RSA
  D. AES
  A. SHA1

• Question 296:

  E-mail tracking is a method to monitor and spy the delivered e-mails to the intended recipient.

  

  Select a feature, which you will NOT be able to accomplish with this probe?

  A. When the e-mail was received and read
  B. Send destructive e-mails
  C. GPS location and map of the recipient
  D. Time spent on reading the e-mails
  E. Whether or not the recipient visited any links sent to them
  F. Track PDF and other types of attachments
  G. Set messages to expire after specified time
  H. Remote control the User's E-mail client application and hijack the traffic
  H. Remote control the User's E-mail client application and hijack the traffic

• Question 297:

  On a default installation of Microsoft IIS web server, under which privilege does the web server software execute?

  A. Everyone
  B. Guest
  C. System
  D. Administrator
  C. System

• Question 298:

  A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS? Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65

  Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE

  21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/tcp open netbios-ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:89

  A. The host is likely a Windows machine.
  B. The host is likely a Linux machine.
  C. The host is likely a router.
  D. The host is likely a printer.
  D. The host is likely a printer.

• Question 299:

  As a Certified Ethical hacker, you were contracted by aprivate firm to conduct an external security assessment through penetration testing.

  What document describes the specified of the testing, the associated violations, and essentially protects both the organization's interest and your li abilities as a tester?

  A. Term of Engagement
  B. Non-Disclosure Agreement
  C. Project Scope
  D. Service Level Agreement
  B. Non-Disclosure Agreement

• Question 300:

  What does ICMP (type 11, code 0) denote?

  A. Source Quench
  B. Destination Unreachable
  C. Time Exceeded
  D. Unknown Type
  C. Time Exceeded