EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 581:

  Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network. Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.

  A. SNMPUtil
  B. SNScan
  C. SNMPScan
  D. Solarwinds IP Network Browser
  E. NMap
  A. SNMPUtil
  B. SNScan
  D. Solarwinds IP Network Browser

• Question 582:

  During a penetration test, a tester finds that the web application being analyzed is vulnerable to Cross Site Scripting (XSS). Which of the following conditions must be met to exploit this vulnerability?

  A. The web application does not have the secure flag set.
  B. The session cookies do not have the HttpOnly flag set.
  C. The victim user should not have an endpoint security solution.
  D. The victim's browser must have ActiveX technology enabled.
  B. The session cookies do not have the HttpOnly flag set.

• Question 583:

  Your lab partner is trying to find out more information about a competitors web site. The site has a .com extension. She has decided to use some online whois tools and look in one of the regional Internet registrys. Which one would you suggest she looks in first?

  A. LACNIC
  B. ARIN
  C. APNIC
  D. RIPE
  E. AfriNIC
  B. ARIN

• Question 584:

  How do employers protect assets with security policies pertaining to employee surveillance activities?

  A. Employers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.
  B. Employers use informal verbal communication channels to explain employee monitoring activities to employees.
  C. Employers use network surveillance to monitor employee email traffic,network access,and to record employee keystrokes.
  D. Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.
  D. Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.

• Question 585:

  While performing a ping sweep of a local subnet you receive an ICMP reply of Code 3/Type 13 for all the pings you have sent out. What is the most likely cause of this?

  A. The firewall is dropping the packets
  B. An in-line IDS is dropping the packets
  C. A router is blocking ICMP
  D. The host does not respond to ICMP packets
  C. A router is blocking ICMP

• Question 586:

  Bill is a security analyst for his company. All the switches used in the company's office are Cisco switches. Bill wants to make sure all switches are safe from ARP poisoning. How can Bill accomplish this?

  A. Bill can use the command: ip dhcp snooping.
  B. Bill can use the command: no ip snoop.
  C. Bill could use the command: ip arp no flood.
  D. He could use the command: ip arp no snoop.
  A. Bill can use the command: ip dhcp snooping.

• Question 587:

  When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

  A. Vulnerability scanning
  B. Social engineering
  C. Application security testing
  D. Network sniffing
  B. Social engineering

• Question 588:

  More sophisticated IDSs look for common shellcode signatures. But even these systems can be bypassed, by using polymorphic shellcode. This is a technique common among virus writers, it basically hides the true nature of the shellcode in different disguises.

  How does a polymorphic shellcode work?

  A. They encrypt the shellcode by XORing values over the shellcode,using loader code to decrypt the shellcode,and then executing the decrypted shellcode
  B. They convert the shellcode into Unicode,using loader to convert back to machine code then executing them
  C. They reverse the working instructions into opposite order by masking the IDS signatures
  D. They compress shellcode into normal instructions,uncompress the shellcode using loader code and then executing the shellcode
  A. They encrypt the shellcode by XORing values over the shellcode,using loader code to decrypt the shellcode,and then executing the decrypted shellcode

• Question 589:

  Which of the following is the best way an attacker can passively learn about technologies used in an organization?

  A. By sending web bugs to key personnel
  B. By webcrawling the organization web site
  C. By searching regional newspapers and job databases for skill sets technology hires need to possess in the organization
  D. By performing a port scan on the organization's web site
  C. By searching regional newspapers and job databases for skill sets technology hires need to possess in the organization

• Question 590:

  An engineer is learning to write exploits in C++ and is using the exploit tool Backtrack. The engineer wants to compile the newest C++ exploit and name it calc.exe. Which command would the engineer use to accomplish this?

  A. g++ hackersExploit.cpp -o calc.exe
  B. g++ hackersExploit.py -o calc.exe
  C. g++ -i hackersExploit.pl -o calc.exe
  D. g++ --compile hackersExploit.cpp -o calc.exe
  A. g++ hackersExploit.cpp -o calc.exe