EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 461:

  Which of the following techniques does a vulnerability scanner use in order to detect a vulnerability on a target service?

  A. Port scanning
  B. Banner grabbing
  C. Injecting arbitrary data
  D. Analyzing service response
  D. Analyzing service response

• Question 462:

  Which of the following is not a Bluetooth attack?

  A. Bluejacking
  B. Bluedriving
  C. Bluesnarfing
  D. Bluesmaking
  B. Bluedriving

• Question 463:

  Which of the following are well know password-cracking programs?(Choose all that apply.)

  A. L0phtcrack
  B. NetCat
  C. Jack the Ripper
  D. Netbus
  E. John the Ripper
  A. L0phtcrack
  E. John the Ripper

• Question 464:

  Sniffing is considered an active attack.

  A. True
  B. False
  B. False

• Question 465:

  While testing web applications, you attempt to insert the following test script into the search area on the company's web site:

  Later, when you press the search button, a pop up box appears on your screen with the text "Testing Testing Testing".

  What vulnerability is detected in the web application here?

  A. Cross Site Scripting
  B. Password attacks
  C. A Buffer Overflow
  D. A hybrid attack
  A. Cross Site Scripting

• Question 466:

  Lee is using Wireshark to log traffic on his network. He notices a number of packets being directed to an internal IP from an outside IP where the packets are ICMP and their size is around 65, 536 bytes. What is Lee seeing here?

  A. Lee is seeing activity indicative of a Smurf attack.
  B. Most likely,the ICMP packets are being sent in this manner to attempt IP spoofing.
  C. Lee is seeing a Ping of death attack.
  D. This is not unusual traffic,ICMP packets can be of any size.
  C. Lee is seeing a Ping of death attack.

• Question 467:

  The network administrator at Spears Technology, Inc has configured the default gateway Cisco router's access-list as below:

  You are hired to conduct security testing on their network. You successfully brute-force the SNMP community string using a SNMP crack tool. The access-list configured at the router

  prevents you from establishing a successful connection.

  You want to retrieve the Cisco configuration from the router. How would you proceed?

  A. Use the Cisco's TFTP default password to connect and download the configuration file
  B. Run a network sniffer and capture the returned traffic with the configuration file from the router
  C. Run Generic Routing Encapsulation (GRE) tunneling protocol from your computer to the router masking your IP address
  D. Send a customized SNMP set request with a spoofed source IP address in the range - 192.168.1.0
  B. Run a network sniffer and capture the returned traffic with the configuration file from the router
  D. Send a customized SNMP set request with a spoofed source IP address in the range - 192.168.1.0

• Question 468:

  What is the proper response for a X-MAS scan if the port is closed?

  A. SYN
  B. ACK
  C. FIN
  D. PSH
  E. RST
  F. No response
  E. RST

• Question 469:

  There is some dispute between two network administrators at your company. Your boss asks you to come and meet with the administrators to set the record straight. Which of these are true about PKI and encryption? Select the best answers.

  A. PKI provides data with encryption,compression,and restorability.
  B. Public-key encryption was invented in 1976 by Whitfield Diffie and Martin Hellman.
  C. When it comes to eCommerce,as long as you have authenticity,and authenticity,you do not need encryption.
  D. RSA is a type of encryption.
  B. Public-key encryption was invented in 1976 by Whitfield Diffie and Martin Hellman.
  D. RSA is a type of encryption.

• Question 470:

  Bill has successfully executed a buffer overflow against a Windows IIS web server. He has been able to spawn an interactive shell and plans to deface the main web page. He first attempts to use the "echo" command to simply overwrite index.html and remains unsuccessful. He then attempts to delete the page and achieves no progress. Finally, he tries to overwrite it with another page in which also he remains unsuccessful.

  What is the probable cause of Bill's problem?

  A. You cannot use a buffer overflow to deface a web page
  B. There is a problem with the shell and he needs to run the attack again
  C. The HTML file has permissions of read only
  D. The system is a honeypot
  C. The HTML file has permissions of read only