EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 421:

  Trojan horse attacks pose one of the most serious threats to computer security. The image below shows different ways a Trojan can get into a system. Which are the easiest and most convincing ways to infect a computer?

  

  A. IRC (Internet Relay Chat)
  B. Legitimate "shrink-wrapped" software packaged by a disgruntled employee
  C. NetBIOS (File Sharing)
  D. Downloading files,games and screensavers from Internet sites
  B. Legitimate "shrink-wrapped" software packaged by a disgruntled employee

• Question 422:

  Which type of scan does NOT open a full TCP connection?

  A. Stealth Scan
  B. XMAS Scan
  C. Null Scan
  D. FIN Scan
  A. Stealth Scan

• Question 423:

  After a client sends a connection request (SYN) packet to the server, the server will respond (SYN-ACK) with a sequence number of its choosing, which then must be acknowledged (ACK) by the client. This sequence number is predictable; the attack connects to a service first with its own IP address, records the sequence number chosen, and then opens a second connection from a forged IP address. The attack doesn't see the SYN-ACK (or any other packet) from the server, but can guess the correct responses. If the source IP address is used for authentication, then the attacker can use the one-sided communication to break into the server.

  What attacks can you successfully launch against a server using the above technique?

  A. Denial of Service attacks
  B. Session Hijacking attacks
  C. Web page defacement attacks
  D. IP spoofing attacks
  B. Session Hijacking attacks

• Question 424:

  A Certificate Authority (CA) generates a key pair that will be used for encryption and decryption of email. The integrity of the encrypted email is dependent on the security of which of the following?

  A. Public key
  B. Private key
  C. Modulus length
  D. Email server certificate
  B. Private key

• Question 425:

  In Linux, the three most common commands that hackers usually attempt to Trojan are:

  A. car,xterm,grep
  B. netstat,ps,top
  C. vmware,sed,less
  D. xterm,ps,nc
  B. netstat,ps,top

• Question 426:

  Which type of Nmap scan is the most reliable, but also the most visible, and likely to be picked up by and IDS?

  A. SYN scan
  B. ACK scan
  C. RST scan
  D. Connect scan
  E. FIN scan
  D. Connect scan

• Question 427:

  Which element of Public Key Infrastructure (PKI) verifies the applicant?

  A. Certificate authority
  B. Validation authority
  C. Registration authority
  D. Verification authority
  C. Registration authority

• Question 428:

  Which one of the following attacks will pass through a network layer intrusion detection system undetected?

  A. A teardrop attack
  B. A SYN flood attack
  C. A DNS spoofing attack
  D. A test.cgi attack
  D. A test.cgi attack

• Question 429:

  What does FIN in TCP flag define?

  A. Used to abort a TCP connection abruptly
  B. Used to close a TCP connection
  C. Used to acknowledge receipt of a previous packet or transmission
  D. Used to indicate the beginning of a TCP connection
  B. Used to close a TCP connection

• Question 430:

  Stephanie works as senior security analyst for a manufacturing company in Detroit.

  Stephanie manages network security throughout the organization. Her colleague Jason told her in confidence that he was able to see confidential corporate information posted on the external website http://www.jeansclothesman.com. He tries random URLs on the company's website and finds confidential information leaked over the web. Jason says this happened about a month ago. Stephanie visits the said URLs, but she finds nothing. She is very concerned about this, since someone should be held accountable if there was sensitive information posted on the website.

  Where can Stephanie go to see past versions and pages of a website?

  A. She should go to the web page Samspade.org to see web pages that might no longer be on the website
  B. If Stephanie navigates to Search.com; she will see old versions of the company website
  C. Stephanie can go to Archive.org to see past versions of the company website
  D. AddressPast.com would have any web pages that are no longer hosted on the company's website
  C. Stephanie can go to Archive.org to see past versions of the company website