EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 521:

  What is the advantage in encrypting the communication between the agent and the monitor in an Intrusion Detection System?

  A. Encryption of agent communications will conceal the presence of the agents
  B. The monitor will know if counterfeit messages are being generated because they will not be encrypted
  C. Alerts are sent to the monitor when a potential intrusion is detected
  D. An intruder could intercept and delete data or alerts and the intrusion can go undetected
  B. The monitor will know if counterfeit messages are being generated because they will not be encrypted

• Question 522:

  Which of the following is NOT true of cryptography?

  A. Science of protecting information by encoding it into an unreadable format
  B. Method of storing and transmitting data in a form that only those it is intended for can read and process
  C. Most (if not all) algorithms can be broken by both technical and non-technical means
  D. An effective way of protecting sensitive information in storage but not in transit
  D. An effective way of protecting sensitive information in storage but not in transit

• Question 523:

  Harold just got home from working at Henderson LLC where he works as an IT technician.

  He was able to get off early because they were not too busy. When he walks into his home office, he notices his teenage daughter on the computer, apparently chatting with someone online. As soon as she hears Harold enter the room, she closes all her windows and tries to act like she was playing a game. When Harold asks her what she was doing, she acts very nervous and does not give him a straight answer. Harold is very concerned because he does not want his daughter to fall victim to online predators and the sort. Harold doesn't necessarily want to install any programs that will restrict the sites his daughter goes to, because he doesn't want to alert her to his trying to figure out what she is doing. Harold wants to use some kind of program that will track her activities online, and send Harold an email of her activity once a day so he can see what she has been up to.

  What kind of software could Harold use to accomplish this?

  A. Install hardware Keylogger on her computer
  B. Install screen capturing Spyware on her computer
  C. Enable Remote Desktop on her computer
  D. Install VNC on her computer
  B. Install screen capturing Spyware on her computer

• Question 524:

  Jacob would like your advice on using a wireless hacking tool that can save him time and get him better results with lesser packets. You would like to recommend a tool that uses KoreK's implementation. Which tool would you recommend from the list below?

  A. Kismet
  B. Shmoo
  C. Aircrack
  D. John the Ripper
  C. Aircrack

• Question 525:

  In which of the following should be performed first in any penetration test?

  A. System identification
  B. Intrusion Detection System testing
  C. Passive information gathering
  D. Firewall testing
  C. Passive information gathering

• Question 526:

  Scanning for services is an easy job for Bob as there are so many tools available from the Internet. In order for him to check the vulnerability of XYZ, he went through a few scanners that are currently available. Here are the scanners that he uses:

  1.

  Axent's NetRecon (http://www.axent.com)

  2.

  SARA, by Advanced Research Organization (http://www-arc.com/sara)

  3.

  VLAD the Scanner, by Razor (http://razor.bindview.com/tools/)

  However, there are many other alternative ways to make sure that the services that have been scanned will be more accurate and detailed for Bob.

  What would be the best method to accurately identify the services running on a victim host?

  A. Using Cheops-ng to identify the devices ofXYZ.
  B. Using the manual method of telnet to each of the open ports ofXYZ.
  C. Using a vulnerability scanner to try to probe each port to verify or figure out which service is running forXYZ.
  D. Using the default port and OS to make a best guess of what services are running on each port forXYZ.
  B. Using the manual method of telnet to each of the open ports ofXYZ.

• Question 527:

  Fake Anti-Virus, is one of the most frequently encountered and persistent threats on the web. This malware uses social engineering to lure users into infected websites with a technique called Search Engine Optimization.

  Once the Fake AV is downloaded into the user's computer, the software will scare them into believing their system is infected with threats that do not really exist, and then push users to purchase services to clean up the non-existent threats.

  The Fake AntiVirus will continue to send these annoying and intrusive alerts until a payment is made.

  

  What is the risk of installing Fake AntiVirus?

  A. Victim's Operating System versions,services running and applications installed will be published on Blogs and Forums
  B. Victim's personally identifiable information such as billing address and credit card details,may be extracted and exploited by the attacker
  C. Once infected,the computer will be unable to boot and the Trojan will attempt to format the hard disk
  D. Denial of Service attack will be launched against the infected computer crashing other machines on the connected network
  B. Victim's personally identifiable information such as billing address and credit card details,may be extracted and exploited by the attacker

• Question 528:

  Which of the following resources does NMAP need to be used as a basic vulnerability scanner covering several vectors like SMB, HTTP and FTP?

  A. Metasploit scripting engine
  B. Nessus scripting engine
  C. NMAP scripting engine
  D. SAINT scripting engine
  C. NMAP scripting engine

• Question 529:

  You are usingNMAP to resolve domain names into IP addresses for a ping sweep later. Which of the following commands looks for IP addresses?

  A. >host -t ns hackeddomain.com
  B. >host -t AXFR hackeddomain.com
  C. >host -t soa hackeddomain.com
  D. >host -t a hackeddomain.com
  D. >host -t a hackeddomain.com

• Question 530:

  How do you defend against DHCP Starvation attack?

  

  A. Enable ARP-Block on the switch
  B. Enable DHCP snooping on the switch
  C. Configure DHCP-BLOCK to 1 on the switch
  D. Install DHCP filters on the switch to block this attack
  B. Enable DHCP snooping on the switch