EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 571:

  Bill is attempting a series of SQL queries in order to map out the tables within the database that he is trying to exploit. Choose the attack type from the choices given below.

  A. Database Fingerprinting
  B. Database Enumeration
  C. SQL Fingerprinting
  D. SQL Enumeration
  A. Database Fingerprinting

• Question 572:

  How can a rootkit bypass Windows 7 operating system's kernel mode, code signing policy?

  A. Defeating the scanner from detecting any code change at the kernel
  B. Replacing patch system calls with its own version that hides the rootkit (attacker's) actions
  C. Performing common services for the application process and replacing real applications with fake ones
  D. Attaching itself to the master boot record in a hard drive and changing the machine's boot sequence/options
  D. Attaching itself to the master boot record in a hard drive and changing the machine's boot sequence/options

• Question 573:

  You wish to determine the operating system and type of web server being used. At the same time you wish to arouse no suspicion within the target organization. While some of the methods listed below work, which holds the least risk of detection?

  A. Make some phone calls and attempt to retrieve the information using social engineering.
  B. Use nmap in paranoid mode and scan the web server.
  C. Telnet to the web server and issue commands to illicit a response.
  D. Use the netcraft web site look for the target organization's web site.
  D. Use the netcraft web site look for the target organization's web site.

• Question 574:

  Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)?

  A. CSIRT provides an incident response service to enable a reliable and trusted single point of contact for reporting computer security incidents worldwide.
  B. CSIRT provides a computer security surveillance service to supply a government with important intelligence information on individuals travelling abroad.
  C. CSIRT provides a penetration testing service to support exception reporting on incidents worldwide by individuals and multi-national corporations.
  D. CSIRT provides a vulnerability assessment service to assist law enforcement agencies with profiling an individual's property or company's asset.
  A. CSIRT provides an incident response service to enable a reliable and trusted single point of contact for reporting computer security incidents worldwide.

• Question 575:

  While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an attack or other wrong doing. However, you are concerned about affecting the normal functionality of the email server. From the following options choose how best you can achieve this objective?

  A. Block port 25 at the firewall.
  B. Shut off the SMTP service on the server.
  C. Force all connections to use a username and password.
  D. Switch from Windows Exchange to UNIX Sendmail.
  E. None of the above.
  E. None of the above.

• Question 576:

  What would best be defined as a security test on services against a known vulnerability database using an automated tool?

  A. A penetration test
  B. A privacy review
  C. A server audit
  D. A vulnerability assessment
  D. A vulnerability assessment

• Question 577:

  What is the broadcast address for the subnet 190.86.168.0/22?

  A. 190.86.168.255
  B. 190.86.255.255
  C. 190.86.171.255
  D. 190.86.169.255
  C. 190.86.171.255

• Question 578:

  802.11b is considered a ____________ protocol.

  A. Connectionless
  B. Secure
  C. Unsecure
  D. Token ring based
  E. Unreliable
  C. Unsecure

• Question 579:

  Melissa is a virus that attacks Microsoft Windows platforms. To which category does this virus belong?

  A. Polymorphic
  B. Boot Sector infector
  C. System
  D. Macro
  D. Macro

• Question 580:

  You want to capture Facebook website traffic in Wireshark.

  What display filter should you use that shows all TCP packets that contain the word 'facebook'?

  A. display==facebook
  B. traffic.content==facebook
  C. tcp contains facebook
  D. list.display.facebook
  C. tcp contains facebook