EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 391:

  Which of the following is a hashing algorithm?

  A. MD5
  B. PGP
  C. DES
  D. ROT13
  A. MD5

• Question 392:

  The phase will increase the odds of success in later phases of the penetration test. It is also the very first step in Information Gathering, and it will tell you what the"landscape" looks like. What is the most important phase of ethical hacking in which you need to spend a considerable amount of time?

  A. Network Mapping
  B. Gaining access
  C. Footprinting
  D. Escalating privileges
  C. Footprinting

• Question 393:

  Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two.

  What would you call this attack?

  A. Interceptor
  B. Man-in-the-middle
  C. ARP Proxy
  D. Poisoning Attack
  B. Man-in-the-middle

• Question 394:

  How would you describe an attack where an attacker attempts to deliver the payload over multiple packets over long periods of time with the purpose of defeating simple pattern matching in IDS systems without session reconstruction? A characteristic of this attack would be a continuous stream of small packets.

  A. Session Hijacking
  B. Session Stealing
  C. Session Splicing
  D. Session Fragmentation
  C. Session Splicing

• Question 395:

  You work as a Security Analyst for a retail organization. In securing the company's network, you set up a firewall and an IDS. However, hackers are able to attack the network. After investigating, you discover that your IDS is not configured properly and therefore is unable to trigger alarms when needed. What type of alert is the IDS giving?

  A. False Negative
  B. True Negative
  C. True Positive
  D. False Positive
  A. False Negative

• Question 396:

  What is Hunt used for?

  A. Hunt is used to footprint networks
  B. Hunt is used to sniff traffic
  C. Hunt is used to hack web servers
  D. Hunt is used to intercept traffic i.e. man-in-the-middle traffic
  E. Hunt is used for password cracking
  D. Hunt is used to intercept traffic i.e. man-in-the-middle traffic

• Question 397:

  An ethical hacker for a large security research firm performs penetration tests, vulnerability tests, and risk assessments. A friend recently started a company and asks the hacker to perform a penetration test and vulnerability assessment of the new company as a favor.

  What should the hacker's next step be before starting work on this job?

  A. Start by foot printing the network and mapping out a plan of attack.
  B. Ask the employer for authorization to perform the work outside the company.
  C. Begin the reconnaissance phase with passive information gathering and then move into active information gathering.
  D. Use social engineering techniques on the friend's employees to help identify areas that may be susceptible to attack.
  B. Ask the employer for authorization to perform the work outside the company.

• Question 398:

  You want to perform advanced SQL Injection attack against a vulnerable website. You are unable to perform command shell hacks on this server. What must be enabled in SQL Server to launch these attacks?

  A. System services
  B. EXEC master access
  C. xp_cmdshell
  D. RDC
  C. xp_cmdshell

• Question 399:

  One of the ways to map a targeted network for live hosts is by sending an ICMP ECHO request to the broadcast or the network address. The request would be broadcasted to all hosts on the targeted network. The live hosts will send an ICMP ECHO Reply to the attacker's source IP address.

  You send a ping request to the broadcast address 192.168.5.255.

  

  There are 40 computers up and running on the target network. Only 13 hosts send a reply while others do not. Why?

  A. Windows machines will not generate an answer (ICMP ECHO Reply) to an ICMP ECHO request aimed at the broadcast address or at the network address.
  B. Linux machines will not generate an answer (ICMP ECHO Reply) to an ICMP ECHO request aimed at the broadcast address or at the network address.
  C. You should send a ping request with this command ping ? 192.168.5.0-255
  D. You cannot ping a broadcast address. The above scenario is wrong.
  A. Windows machines will not generate an answer (ICMP ECHO Reply) to an ICMP ECHO request aimed at the broadcast address or at the network address.

• Question 400:

  What are the limitations of Vulnerability scanners? (Select 2 answers)

  A. There are often better at detecting well-known vulnerabilities than more esoteric ones
  B. The scanning speed of their scanners are extremely high
  C. It is impossible for any,one scanning product to incorporate all known vulnerabilities in a timely manner
  D. The more vulnerabilities detected,the more tests required
  E. They are highly expensive and require per host scan license
  A. There are often better at detecting well-known vulnerabilities than more esoteric ones
  C. It is impossible for any,one scanning product to incorporate all known vulnerabilities in a timely manner