EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 591:

  Annie has just succeeded in stealing a secure cookie via a XSS attack. She is able to replay the cookie even while the session is invalid on the server. Why do you think this is possible?

  A. It works because encryption is performed at the application layer (single encryption key)
  B. The scenario is invalid as a secure cookie cannot be replayed
  C. It works because encryption is performed at the network layer (layer 1 encryption)
  D. Any cookie can be replayed irrespective of the session status
  A. It works because encryption is performed at the application layer (single encryption key)

• Question 592:

  Which of the following lists are valid data-gathering activities associated with a risk assessment?

  A. Threat identification,vulnerability identification,control analysis
  B. Threat identification,response identification,mitigation identification
  C. Attack profile,defense profile,loss profile
  D. System profile,vulnerability identification,security determination
  A. Threat identification,vulnerability identification,control analysis

• Question 593:

  A new wireless client is configured to join a 802.11 network. Thisclient uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client.

  What is a possible source of this problem?

  A. The client cannot see the SSID of the wireless network
  B. The wireless client is not configured to use DHCP
  C. The WAP does not recognize the client's MAC address
  D. Client isconfigured for the wrong channel
  C. The WAP does not recognize the client's MAC address

• Question 594:

  A client has approached you with a penetration test requirements. They are concerned with the possibility of external threat, and have invested considerable resources in protecting their Internet exposure. However, their main concern is the possibility of an employee elevating his/her privileges and gaining access to information outside of their respective department.

  What kind of penetration test would you recommend that would best address the client's concern?

  A. A Black Box test
  B. A Black Hat test
  C. A Grey Box test
  D. A Grey Hat test
  E. A White Box test
  F. A White Hat test
  C. A Grey Box test

• Question 595:

  Look at the following SQL query.

  SELECT * FROM product WHERE PCategory='computers' or 1=1--'

  What will it return? Select the best answer.

  A. All computers and all 1's
  B. All computers
  C. All computers and everything else
  D. Everything except computers
  C. All computers and everything else

• Question 596:

  Erik notices a big increase in UDP packets sent to port 1026 and 1027 occasionally. He enters the following at the command prompt.

  $ nc -l -p 1026 -u -v

  In response, he sees the following message.

  cell(?(c)????STOPALERT77STOP! WINDOWS REQUIRES IMMEDIATE ATTENTION.

  Windows has found 47 Critical Errors.

  To fix the errors please do the following:

  1.

  Download Registry Repair from: www.reg-patch.com

  2.

  Install Registry Repair

  3.

  Run Registry Repair

  4.

  Reboot your computer

  FAILURE TO ACT NOW MAY LEAD TO DATA LOSS AND CORRUPTION! What would you infer from this alert?

  A. The machine is redirecting traffic to www.reg-patch.com using adware
  B. It is a genuine fault of windows registry and the registry needs to be backed up
  C. An attacker has compromised the machine and backdoored ports 1026 and 1027
  D. It is a messenger spam. Windows creates a listener on one of the low dynamic ports from 1026 to 1029 and the message usually promotes malware disguised as legitimate utilities
  D. It is a messenger spam. Windows creates a listener on one of the low dynamic ports from 1026 to 1029 and the message usually promotes malware disguised as legitimate utilities

• Question 597:

  Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?

  A. To determine who is the holder of the root account
  B. To perform a DoS
  C. To create needless SPAM
  D. To illicit a response back that will reveal information about email servers and how they treat undeliverable mail
  E. To test for virus protection
  D. To illicit a response back that will reveal information about email servers and how they treat undeliverable mail

• Question 598:

  A very useful resource for passively gathering information about a target company is:

  A. Host scanning
  B. Whois search
  C. Traceroute
  D. Ping sweep
  B. Whois search

• Question 599:

  Which definition below best describes a covert channel?

  A. A server program using a port that is not well known
  B. Making use of a protocol in a way it was not intended to be used
  C. It is the multiplexing taking place on a communication link
  D. It is one of the weak channels used by WEP that makes it insecure
  B. Making use of a protocol in a way it was not intended to be used

• Question 600:

  Which method of password cracking takes the most time and effect?

  A. Rainbow Tables
  B. Shoulder surfing
  C. Bruce force
  D. Directory attack
  C. Bruce force