EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 511:

  What port number is used by LDAP protocol?

  A. 110
  B. 389
  C. 464
  D. 445
  B. 389

• Question 512:

  Which of the following snort rules look for FTP root login attempts?

  A. alert tcp -> any port 21 (msg:"user root";)
  B. alert tcp -> any port 21 (message:"user root";)
  C. alert ftp -> ftp (content:"user password root";)
  D. alert tcp any any -> any any 21 (content:"user root";)
  D. alert tcp any any -> any any 21 (content:"user root";)

• Question 513:

  During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?

  A. Using the Metasploit psexec module setting the SA / Admin credential
  B. Invoking the stored procedure xp_shell to spawn a Windows command shell
  C. Invoking the stored procedure cmd_shell to spawn a Windows command shell
  D. Invoking the stored procedure xp_cmdshell to spawn a Windows command shell
  D. Invoking the stored procedure xp_cmdshell to spawn a Windows command shell

• Question 514:

  NSLookup is a good tool to use to gain additional information about a target network.

  What does the following command accomplish?

  nslookup

  > server

  > set type =any

  > ls -d

  A. Enables DNS spoofing
  B. Loads bogus entries into the DNS table
  C. Verifies zone security
  D. Performs a zone transfer
  E. Resets the DNS cache
  D. Performs a zone transfer

• Question 515:

  Which of the following ICMP message types are used for destinations unreachables?

  B. 3
  C. 11
  D. 13
  E. 17
  B. 3

• Question 516:

  This IDS defeating technique works by splitting a datagram (or packet) into multiple fragments and the IDS will not spot the true nature of the fully assembled datagram. The datagram is not reassembled until it reaches its final destination. It would be a processor-intensive task for IDS to reassemble all fragments itself, and on a busy system the packet will slip through the IDS onto the network.

  What is this technique called?

  A. IP Routing or Packet Dropping
  B. IDS Spoofing or Session Assembly
  C. IP Fragmentation or Session Splicing
  D. IP Splicing or Packet Reassembly
  C. IP Fragmentation or Session Splicing

• Question 517:

  A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.P.'s computer. What is the consultant's obligation to the financial organization?

  A. Say nothing and continue with the security testing.
  B. Stop work immediately and contact the authorities.
  C. Delete the pornography,say nothing,and continue security testing.
  D. Bring the discovery to the financial organization's human resource department.
  B. Stop work immediately and contact the authorities.

• Question 518:

  Statistics from cert.org and other leading security organizations has clearly showed a steady rise in the number of hacking incidents perpetrated against companies. What do you think is the main reason behind the significant increase in hacking attempts over the past years?

  A. It is getting more challenging and harder to hack for non technical people.
  B. There is a phenomenal increase in processing power.
  C. New TCP/IP stack features are constantly being added.
  D. The ease with which hacker tools are available on the Internet.
  D. The ease with which hacker tools are available on the Internet.

• Question 519:

  What are the default passwords used by SNMP? (Choose two.)

  A. Password
  B. SA
  C. Private
  D. Administrator
  E. Public
  F. Blank
  C. Private
  E. Public

• Question 520:

  Which of the following is not an effective countermeasure against replay attacks?

  A. Digital signatures
  B. Time Stamps
  C. System identification
  D. Sequence numbers
  C. System identification