EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 321:

  Bubba has just accessed he preferred ecommerce web site and has spotted an item that he would like to buy. Bubba considers the price a bit too steep. He looks at the source code of the webpage and decides to save the page locally, so that he can modify the page variables. In the context of web application security, what do you think Bubba has changes?

  A. A hidden form field value.
  B. A hidden price value.
  C. An integer variable.
  D. A page cannot be changed locally,as it is served by a web server.
  A. A hidden form field value.

• Question 322:

  A digital signature is simply a message that is encrypted with the public key instead of the private key.

  A. true
  B. false
  B. false

• Question 323:

  Your boss Tess King is attempting to modify the parameters of a Web-based application in order to alter the SQL statements that are parsed to retrieve data from the database. What would you call such an attack?

  A. SQL Input attack
  B. SQL Piggybacking attack
  C. SQL Select attack
  D. SQL Injection attack
  D. SQL Injection attack

• Question 324:

  What makes web application vulnerabilities so aggravating? (Choose two)

  A. They can be launched through an authorized port.
  B. A firewall will not stop them.
  C. They exist only on the Linux platform.
  D. They are detectable by most leading antivirus software.
  A. They can be launched through an authorized port.
  B. A firewall will not stop them.

• Question 325:

  env x= `(){ :;};echo exploit ` bash -c `cat/etc/passwd

  What is the Shellshock bash vulnerability attempting to do on an vulnerable Linux host?

  A. Add new user to the passwd file
  B. Display passwd contents to prompt
  C. Change all password in passwd
  D. Remove the passwd file.
  B. Display passwd contents to prompt

• Question 326:

  You are gathering competitive intelligence on an organization. You notice that they have jobs listed on a few Internet job-hunting sites. There are two jobs for network and system administrators. How can this help you in foot printing the organization?

  A. To learn about the IP range used by the target network
  B. To identify the number of employees working for the company
  C. To test the limits of the corporate security policy enforced in the company
  D. To learn about the operating systems,services and applications used on the network
  D. To learn about the operating systems,services and applications used on the network

• Question 327:

  A person approaches a network administrator and wants advice on how to send encrypted email from home. The end user does not want to have to pay for any license fees or manage server services. Which of the following is the most secure encryption protocol that the network administrator should recommend?

  A. IP Security (IPSEC)
  B. Multipurpose Internet Mail Extensions (MIME)
  C. Pretty Good Privacy (PGP)
  D. Hyper Text Transfer Protocol with Secure Socket Layer (HTTPS)
  C. Pretty Good Privacy (PGP)

• Question 328:

  You have successfully compromised a machine on the network and found a server that is alive on the same network. You tried to ping but you didn't get any response back. What is happening?

  A. TCP/IP doesn't support ICMP.
  B. ICMP could be disabled on the target server.
  C. The ARP is disabled on the target server.
  D. You need to run the ping command with root privileges.
  A. TCP/IP doesn't support ICMP.

• Question 329:

  Which of the following is a low-tech way of gaining unauthorized access to systems?

  A. Sniffing
  B. Social engineering
  C. Scanning D. Eavesdropping
  B. Social engineering

• Question 330:

  Assuring two systems that are using IPSec to protect traffic over the internet, what type of general attack could compromise the data?

  A. Spoof Attack
  B. Smurf Attack
  C. Man inthe Middle Attack
  D. Trojan Horse Attack
  E. Back Orifice Attack
  D. Trojan Horse Attack
  E. Back Orifice Attack