EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 301:

  What technique is used to perform a Connection Stream Parameter Pollution (CSPP) attack?

  A. Injecting parameters into a connection string using semicolons as a separator
  B. Inserting malicious Javascript code into input parameters
  C. Setting a user's session identifier (SID) to an explicit known value
  D. Adding multiple parameters with the same name in HTTP requests
  A. Injecting parameters into a connection string using semicolons as a separator

• Question 302:

  An attacker changes the profile information of a particular user on a target website (the victim). The attacker uses this string to update the victim's profile to a text file and then submit the data to the attacker's database.

  What is this type of attack (that can use either HTTP GET or HRRP POST) called?

  A. Cross-Site Request Forgery
  B. Cross-Site Scripting
  C. SQL Injection
  D. Browser Hacking
  A. Cross-Site Request Forgery

• Question 303:

  Clive has been monitoring his IDS and sees that there are a huge number of ICMP Echo Reply packets that are being received on the external gateway interface. Further inspection reveals that they are not responses from the internal hosts' requests but simply responses coming from the Internet.

  What could be the most likely cause?

  A. Someone has spoofed Clive's IP address while doing a smurf attack.
  B. Someone has spoofed Clive's IP address while doing a land attack.
  C. Someone has spoofed Clive's IP address while doing a fraggle attack.
  D. Someone has spoofed Clive's IP address while doing a DoS attack.
  A. Someone has spoofed Clive's IP address while doing a smurf attack.

• Question 304:

  The security concept of "separation of duties" is most similar to the operation ofwhich type of security device?

  A. Bastion host
  B. Honeypot
  C. Firewall
  D. Intrusion Detection System
  C. Firewall

• Question 305:

  Which of the following statements about a zone transfer correct?(Choose three.)

  A. A zone transfer is accomplished with the DNS
  B. A zone transfer is accomplished with the nslookup service
  C. A zone transfer passes all zone information that a DNS server maintains
  D. A zone transfer passes all zone information that a nslookup server maintains
  E. A zone transfer can be prevented by blocking all inbound TCP port 53 connections
  F. Zone transfers cannot occur on the Internet
  A. A zone transfer is accomplished with the DNS
  C. A zone transfer passes all zone information that a DNS server maintains
  E. A zone transfer can be prevented by blocking all inbound TCP port 53 connections

• Question 306:

  For messages sent through an insecure channel, a properly implemented digital signature gives the receiver reason to believe the message was sent by the claimed sender. While using a digital signature, the message digest is encrypted with which key?

  A. Sender's public key
  B. Receiver's private key
  C. Receiver's public key
  D. Sender's private key
  D. Sender's private key

• Question 307:

  A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.

  Which cryptography attack is the student attempting?

  A. Man-in-the-middle attack
  B. Brute-force attack
  C. Dictionary attack
  D. Session hijacking
  C. Dictionary attack

• Question 308:

  Session splicing is an IDS evasiontechnique in which an attacker delivers data in multiple, smallsized packets to the target computer, making it very difficult for an IDS to detect the attack signatures. Which tool can used to perform session splicing attacks?

  A. Hydra
  B. Burp
  C. Whisker
  D. Tcpsplice
  C. Whisker

• Question 309:

  In Buffer Overflow exploit, which of the following registers gets overwritten with return address of the exploit code?

  A. EEP
  B. ESP
  C. EAP
  D. EIP
  D. EIP

• Question 310:

  At a Windows Server command prompt, which command could be used to list the running services?

  A. Sc query type= running
  B. Sc query \\servername
  C. Sc query
  D. Sc config
  C. Sc query