EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 381:

  "Testing the network using the same methodologies and tools employed by attackers" Identify the correct terminology that defines the above statement.

  A. Vulnerability Scanning
  B. Penetration Testing
  C. Security Policy Implementation
  D. Designing Network Security
  B. Penetration Testing

• Question 382:

  Jason is the network administrator of Spears Technology. He has enabled SNORT IDS to detect attacks going through his network. He receives Snort SMS alerts on his iPhone whenever there is an attempted intrusion to his network. He receives the following SMS message during the weekend.

  

  An attacker Chew Siew sitting in Beijing, China had just launched a remote scan on Jason's network with the hping command. Which of the following hping2 command is responsible for the above snort alert?

  A. chenrocks:/home/siew # hping -S -R -P -A -F -U 192.168.2.56 -p 22 -c 5 -t 118
  B. chenrocks:/home/siew # hping -F -Q -J -A -C -W 192.168.2.56 -p 22 -c 5 -t 118
  C. chenrocks:/home/siew # hping -D -V -R -S -Z -Y 192.168.2.56 -p 22 -c 5 -t 118
  D. chenrocks:/home/siew # hping -G -T -H -S -L -W 192.168.2.56 -p 22 -c 5 -t 118
  A. chenrocks:/home/siew # hping -S -R -P -A -F -U 192.168.2.56 -p 22 -c 5 -t 118

• Question 383:

  Joel and her team have been going through tons of garbage, recycled paper, and other rubbish in order to find some information about the target they are attempting to penetrate. How would you call this type of activity?

  A. Dumpster Diving
  B. Scanning
  C. CI Gathering
  D. Garbage Scooping
  A. Dumpster Diving

• Question 384:

  Which of the following is an extremelycommon IDS evasion technique in the web world?

  A. post knocking
  B. subnetting
  C. unicode characters
  D. spyware
  C. unicode characters

• Question 385:

  Which of the following is a client-server tool utilized to evade firewall inspection?

  A. tcp-over-dns
  B. kismet
  C. nikto
  D. hping
  A. tcp-over-dns

• Question 386:

  _____________ is a type of symmetric-key encryption algorithm that transforms a fixed-length block of plaintext (unencrypted text) data into a block of ciphertext (encrypted text) data of the same length.

  A. Stream Cipher
  B. Block Cipher
  C. Bit Cipher
  D. Hash Cipher
  B. Block Cipher

• Question 387:

  Which system consists of a publicly available set of databases that contain domain name registration contact information?

  A. WHOIS
  B. IANA
  C. CAPTCHA
  D. IETF
  A. WHOIS

• Question 388:

  Fred is the network administrator for his company. Fred is testing an internal switch. From an external IP address, Fred wants to try and trick this switch into thinking it already has established a session with his computer. How can Fred accomplish this?

  A. Fred can accomplish this by sending an IP packet with the RST/SIN bit and the source address of his computer.
  B. He can send an IP packet with the SYN bit and the source address of his computer.
  C. Fred can send an IP packet with the ACK bit set to zero and the source address of the switch.
  D. Fred can send an IP packet to the switch with the ACK bit and the source address of his machine.
  D. Fred can send an IP packet to the switch with the ACK bit and the source address of his machine.

• Question 389:

  Which technical characteristic do Ethereal/Wireshark, TCPDump, and Snort have in common?

  A. They are written in Java.
  B. They send alerts to security monitors.
  C. They use the same packet analysis engine.
  D. They use the same packet capture utility.
  D. They use the same packet capture utility.

• Question 390:

  Buffer X in an Accounting application module for Brownies Inc. can contain 200 characters.

  The programmer makes an assumption that 200 characters are more than enough.

  Because there were no proper boundary checks being conducted, Bob decided to insert 400 characters into the 200-character buffer. (Overflows the buffer).

  Below is the code snippet:

  

  How can you protect/fix the problem of your application as shown above?

  A. Because the counter starts with 0,we would stop when the counter is less than 200
  B. Because the counter starts with 0,we would stop when the counter is more than 200
  C. Add a separate statement to signify that if we have written less than 200 characters to the buffer,the stack should stop because it cannot hold any more data
  D. Add a separate statement to signify that if we have written 200 characters to the buffer,the stack should stop because it cannot hold any more data
  A. Because the counter starts with 0,we would stop when the counter is less than 200
  D. Add a separate statement to signify that if we have written 200 characters to the buffer,the stack should stop because it cannot hold any more data