EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 541:

  Most NIDS systems operate in layer 2 of the OSI model. These systems feed raw traffic into a detection engine and rely on the pattern matching and/or statistical analysis to determine what is malicious. Packets are not processed by the host's TCP/IP stack allowing the NIDS to analyze traffic the host would otherwise discard.

  Which of the following tools allows an attacker to intentionally craft packets to confuse pattern-matching NIDS systems, while still being correctly assembled by the host TCP/IP stack to render the attack payload?

  A. Defrag
  B. Tcpfrag
  C. Tcpdump
  D. Fragroute
  D. Fragroute

• Question 542:

  When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?

  A. A bottom-up approach
  B. A top-down approach
  C. A senior creation approach
  D. An IT assurance approach
  B. A top-down approach

• Question 543:

  What is a sheepdip?

  A. It is another name for Honeynet
  B. It is a machine used to coordinate honeynets
  C. It is the process of checking physical media for virus before they are used in a computer
  D. None of the above
  C. It is the process of checking physical media for virus before they are used in a computer

• Question 544:

  A company has made the decision to host their own email and basic web services. The administrator needs to set up the external firewall to limit what protocols should be allowed to get to the public part of the company's network.

  Which ports should the administrator open? (Choose three.)

  A. Port 22
  B. Port 23
  C. Port 25
  D. Port 53
  E. Port 80
  F. Port 139
  G. Port 445
  C. Port 25
  D. Port 53
  E. Port 80

• Question 545:

  Ricardo wants to send secret messages to acompetitor company. To secure these messages, he uses a technique of hiding a secret message within an ordinary message, the technique provides 'security through obscurity'. What technique is Ricardo using?

  A. RSA algorithm
  B. Steganography
  C. Encryption
  D. Public-key cryptography
  B. Steganography

• Question 546:

  Which of the following identifies the three modes in which Snort can be configured to run?

  A. Sniffer,Packet Logger,and Network Intrusion Detection System
  B. Sniffer,Network Intrusion Detection System,and Host Intrusion Detection System
  C. Sniffer,Host Intrusion Prevention System,and Network Intrusion Prevention System
  D. Sniffer,Packet Logger,and Host Intrusion Prevention System
  A. Sniffer,Packet Logger,and Network Intrusion Detection System

• Question 547:

  A company is using Windows Server 2003 for its Active Directory (AD). What is the most efficient way to crack the passwords for the AD users?

  A. Perform a dictionary attack.
  B. Perform a brute force attack.
  C. Perform an attack with a rainbow table.
  D. Perform a hybrid attack.
  C. Perform an attack with a rainbow table.

• Question 548:

  Bob was frustrated with his competitor, Brownies Inc., and decided to launch an attack that would result in serious financial losses. He planned the attack carefully and carried out the attack at the appropriate moment.

  Meanwhile, Trent, an administrator at Brownies Inc., realized that their main financial transaction server had been attacked. As a result of the attack, the server crashed and Trent needed to reboot the system, as no one was able to access the resources of the company. This process involves human interaction to fix it.

  What kind of Denial of Service attack was best illustrated in the scenario above?

  A. Simple DDoS attack
  B. DoS attacks which involves flooding a network or system
  C. DoS attacks which involves crashing a network or system
  D. DoS attacks which is done accidentally or deliberately
  C. DoS attacks which involves crashing a network or system

• Question 549:

  Which of the following is a common Service Oriented Architecture (SOA) vulnerability?

  A. Cross-site scripting
  B. SQL injection
  C. VPath injection
  D. XML denial of service issues
  D. XML denial of service issues

• Question 550:

  Neil is closely monitoring his firewall rules and logs on a regular basis. Some of the users have complained to Neil that there are a few employees who are visiting offensive web site during work hours, without any consideration for others. Neil knows that he has an up-to-date content filtering system and such access should not be authorized.

  What type of technique might be used by these offenders to access the Internet without restriction?

  A. They are using UDP that is always authorized at the firewall
  B. They are using an older version of Internet Explorer that allow them to bypass the proxy server
  C. They have been able to compromise the firewall,modify the rules,and give themselves proper access
  D. They are using tunneling software that allows them to communicate with protocols in a way it was not intended
  D. They are using tunneling software that allows them to communicate with protocols in a way it was not intended