EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 451:

  Blane is a network security analyst for his company. From an outside IP, Blane performs an XMAS scan using Nmap. Almost every port scanned does not illicit a response. What can he infer from this kind of response?

  A. These ports are open because they do not illicit a response.
  B. He can tell that these ports are in stealth mode.
  C. If a port does not respond to an XMAS scan using NMAP,that port is closed.
  D. The scan was not performed correctly using NMAP since all ports,no matter what their state,will illicit some sort of response from an XMAS scan.
  A. These ports are open because they do not illicit a response.

• Question 452:

  It is a short-range wireless communication technology intended to replace the cables connecting portables of fixed deviceswhile maintaining high levels of security. It allows mobile phones, computers and other devices to connect and communicate using a short- range wireless connection.

  Which of the following terms best matches the definition?

  A. Bluetooth
  B. Radio-Frequency Identification
  C. WLAN
  D. InfraRed
  A. Bluetooth

• Question 453:

  A penetration tester was hired to perform a penetration test for a bank. The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news articles online about the bank, watching what times the bank employees come into work and leave from work, searching the bank's job postings (paying special attention to IT related jobs), and visiting the local dumpster for the bank's corporate office.

  What phase of the penetration test is the tester currently in?

  A. Information reporting
  B. Vulnerability assessment
  C. Active information gathering
  D. Passive information gathering
  D. Passive information gathering

• Question 454:

  To see how some of the hosts on your network react, Winston sends out SYN packets to an IP range. A number of IPs respond with a SYN/ACK response. Before the connection is established he sends RST packets to those hosts to stop the session. Winston has done this to see how his intrusion detection system will log the traffic.

  What type of scan is Winston attempting here?

  A. Winston is attempting to find live hosts on your company's network by using an XMAS scan.
  B. He is utilizing a SYN scan to find live hosts that are listening on your network.
  C. This type of scan he is using is called a NULL scan.
  D. He is using a half-open scan to find live hosts on your network.
  D. He is using a half-open scan to find live hosts on your network.

• Question 455:

  How do you defend against ARP Spoofing? Select three.

  A. Use ARPWALL system and block ARP spoofing attacks
  B. Tune IDS Sensors to look for large amount of ARP traffic on local subnets
  C. Use private VLANS
  D. Place static ARP entries on servers,workstation and routers
  A. Use ARPWALL system and block ARP spoofing attacks
  C. Use private VLANS
  D. Place static ARP entries on servers,workstation and routers

• Question 456:

  Jason works in the sales and marketing department for a very large advertising agency located in Atlanta. Jason is working on a very important marketing campaign for his company's largest client. Before the project could be completed and implemented, a competing advertising company comes out with the exact same marketing materials and advertising, thus rendering all the work done for Jason's client unusable. Jason is questioned about this and says he has no idea how all

  the material ended up in the hands of a competitor.

  Without any proof, Jason's company cannot do anything except move on. After working on another high profile client for about a month, all the marketing and sales material again ends up in the hands of another competitor and is released to the public before Jason's company can finish the project. Once again, Jason says that he had nothing to do with it and does not know how this could have happened. Jason is given leave with pay until they can figure out what is going on.

  Jason's supervisor decides to go through his email and finds a number of emails that were sent to the competitors that ended up with the marketing material. The only items in the emails were attached jpg files, but nothing else. Jason's supervisor opens the picture files, but cannot find anything out of the ordinary with them.

  What technique has Jason most likely used?

  A. Stealth Rootkit Technique
  B. ADS Streams Technique
  C. Snow Hiding Technique
  D. Image Steganography Technique
  D. Image Steganography Technique

• Question 457:

  This method is used to determine the Operating system and version running on a remote target system. What is it called?

  A. Service Degradation
  B. OS Fingerprinting
  C. Manual Target System
  D. Identification Scanning
  B. OS Fingerprinting

• Question 458:

  What is the disadvantage of an automated vulnerability assessment tool?

  A. Ineffective
  B. Slow
  C. Prone to false positives
  D. Prone to false negatives
  E. Noisy
  E. Noisy

• Question 459:

  Which mode of IPSec should you use to assure security and confidentiality of data within the same LAN?

  A. ESP confidential
  B. AH Tunnel mode
  C. ESP transport mode
  D. AH permiscuous
  C. ESP transport mode

• Question 460:

  Bob is going to perform an active session hijack against Brownies Inc. He has found a target that allows session oriented connections (Telnet) and performs the sequence prediction on the target operating system. He manages to find an active session due to the high level of traffic on the network.

  What is Bob supposed to do next?

  A. Take over the session
  B. Reverse sequence prediction
  C. Guess the sequence numbers
  D. Take one of the parties offline
  C. Guess the sequence numbers