EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 531:

  Global deployment of RFC 2827 would help mitigate what classification of attack?

  A. Sniffing attack
  B. Denial of service attack
  C. Spoofing attack
  D. Reconnaissance attack
  E. Prot Scan attack
  C. Spoofing attack

• Question 532:

  A common cryptographically tool is the use of XOR. XOR the following binary value: 10110001 00111010

  A. 10001011
  B. 10011101
  C. 11011000
  D. 10111100
  A. 10001011

• Question 533:

  Which of the following is an example of an asymmetric encryption implementation?

  A. SHA1
  B. PGP
  C. 3DES
  D. MD5
  B. PGP

• Question 534:

  What is the essential difference between an `Ethical Hacker' and a `Cracker'?

  A. The ethical hacker does not use the same techniques or skills as a cracker.
  B. The ethical hacker does it strictly for financial motives unlike a cracker.
  C. The ethical hacker has authorization from the owner of the target.
  D. The ethical hacker is just a cracker who is getting paid.
  C. The ethical hacker has authorization from the owner of the target.

• Question 535:

  Information gathered from social networking websites such as Facebook, Twitter and LinkedIn can be used to launch which of the following types of attacks? (Choose two.)

  A. Smurf attack
  B. Social engineering attack
  C. SQL injection attack
  D. Phishing attack
  E. Fraggle attack
  F. Distributed denial of service attack
  B. Social engineering attack
  D. Phishing attack

• Question 536:

  How do you defend against Privilege Escalation?

  A. Use encryption to protect sensitive data
  B. Restrict the interactive logon privileges
  C. Run services as unprivileged accounts
  D. Allow security settings of IE to zero or Low
  E. Run users and applications on the least privileges
  A. Use encryption to protect sensitive data
  B. Restrict the interactive logon privileges
  C. Run services as unprivileged accounts
  E. Run users and applications on the least privileges

• Question 537:

  You want to use netcat to generate huge amount of useless network data continuously for various performance testing between 2 hosts. Which of the following commands accomplish this?

  A. Machine A #yes AAAAAAAAAAAAAAAAAAAAAA | nc –v –v –l –p 2222 > /dev/null Machine B #yes BBBBBBBBBBBBBBBBBBBBBB | nc machinea 2222 > /dev/null
  B. Machine A cat somefile | nc –v –v –l –p 2222 Machine B cat somefile | nc othermachine 2222
  C. Machine A nc –l –p 1234 | uncompress –c | tar xvfp Machine B tar cfp - /some/dir | compress –c | nc –w 3 machinea 1234
  D. Machine A while true : do nc –v –l –s –p 6000 machineb 2 Machine B while true ; do nc –v –l –s –p 6000 machinea 2 done
  A. Machine A #yes AAAAAAAAAAAAAAAAAAAAAA | nc –v –v –l –p 2222 > /dev/null Machine B #yes BBBBBBBBBBBBBBBBBBBBBB | nc machinea 2222 > /dev/null

• Question 538:

  Joel and her team have been going through tons of garbage, recycled paper, and other rubbish in order to find some information about the target they are attempting to penetrate. How would you call this type of activity?

  A. Dumpster Diving
  B. Scanning
  C. CI Gathering
  D. Garbage Scooping
  A. Dumpster Diving

• Question 539:

  Gerald, the Systems Administrator for Hyped Enterprises, has just discovered that his network has been breached by an outside attacker. After performing routine maintenance on his servers, he discovers numerous remote tools were installed that no one claims to have knowledge of in his department. Gerald logs onto the management console for his IDS and discovers an unknown IP address that scanned his network constantly for a week and was able to access his network through a high-level port that was not closed. Gerald traces the IP address he found in the IDS log to a proxy server in Brazil. Gerald calls the company that owns the proxy server and after searching through their logs, they trace the source to another proxy server in Switzerland. Gerald calls the company in Switzerland that owns the proxy server and after scanning through the logs again, they trace the source back to a proxy server in China.

  What proxy tool has Gerald's attacker used to cover their tracks?

  A. ISA proxy
  B. IAS proxy
  C. TOR proxy
  D. Cheops proxy
  C. TOR proxy

• Question 540:

  One advantage of an application-level firewall is the ability to

  A. filter packets at the network level.
  B. filter specific commands,such as http:post.
  C. retain state information for each packet.
  D. monitor tcp handshaking.
  B. filter specific commands,such as http:post.