EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 631:

  WinDump is a popular sniffer which results from the porting to Windows of TcpDump for Linux. What library does it use?

  A. LibPcap
  B. WinPcap
  C. Wincap
  D. None of the above
  B. WinPcap

• Question 632:

  While footprinting a network, what port/service should you look for to attempt a zone transfer?

  A. 53 UDP
  B. 53 TCP
  C. 25 UDP
  D. 25 TCP
  E. 161 UDP
  F. 22 TCP
  G. 60 TCP
  B. 53 TCP

• Question 633:

  When you return to your desk after a lunch break, you notice a strange email in your inbox. The senders is someone you did business with recently but the subject line has strange characters in it. What should you do?

  A. Forward the message to your company's security response team and permanently delete the message from your computer.
  B. Delete the email and pretend nothing happened.
  C. Forward the message to your supervisor andask for her opinion on how to handle the situation.
  D. Reply to the sender and ask them for more information about the message contents.
  A. Forward the message to your company's security response team and permanently delete the message from your computer.

• Question 634:

  What is "Hacktivism"?

  A. Hacking for a cause
  B. Hacking ruthlessly
  C. An association which groups activists
  D. None of the above
  A. Hacking for a cause

• Question 635:

  BankerFox is a Trojan that is designed to steal users' banking data related to certain banking entities.

  When they access any website of the affected banks through the vulnerable Firefox 3.5 browser, the Trojan is activated and logs the information entered by the user. All the information entered in that website will be logged by the Trojan and

  transmitted to the attacker's machine using covert channel.

  BankerFox does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer.

  

  What is the most efficient way an attacker located in remote location to infect this banking Trojan on a victim's machine?

  A. Physical access - the attacker can simply copy a Trojan horse to a victim's hard disk infecting the machine via Firefox add-on extensions
  B. Custom packaging - the attacker can create a custom Trojan horse that mimics the appearance of a program that is unique to that particular computer
  C. Custom packaging - the attacker can create a custom Trojan horse that mimics the appearance of a program that is unique to that particular computer
  D. Custom packaging - the attacker can create a custom Trojan horse that mimics the appearance of a program that is unique to that particular computer
  E. Downloading software from a website? An attacker can offer free software,such as shareware programs and pirated mp3 files
  E. Downloading software from a website? An attacker can offer free software,such as shareware programs and pirated mp3 files

• Question 636:

  A program that defends against a port scanner will attempt to:

  A. Sends back bogus data to the port scanner
  B. Log a violation and recommend use of security-auditing tools
  C. Limit access by the scanning system to publicly available ports only
  D. Update a firewall rule in real time to prevent the port scan from being completed
  D. Update a firewall rule in real time to prevent the port scan from being completed

• Question 637:

  In the context of password security: a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive - though slow. Usually, it tries every possible letter and number combination in its automated exploration. If you would use both brute force and dictionary combined together to have variations of words, what would you call such an attack?

  A. Full Blown Attack
  B. Thorough Attack
  C. Hybrid Attack
  D. BruteDict Attack
  C. Hybrid Attack

• Question 638:

  A tester has been hired to do a web application security test. The tester notices that the site is dynamic and must make use of a back end database. In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to attempt breaking a valid SQL request?

  A. Semicolon
  B. Single quote
  C. Exclamation mark
  D. Double quote
  B. Single quote

• Question 639:

  In an attempt to secure his wireless network, Bob implements a VPN to cover the wireless communications. Immediately after the implementation, users begin complaining about how slow the wireless network is. After benchmarking the network's speed. Bob discovers that throughput has dropped by almost half even though the number of users has remained the same.

  Why does this happen in the VPN over wireless implementation?

  A. The stronger encryption used by the VPN slows down the network.
  B. Using a VPN with wireless doubles the overhead on an access point for all direct client to access point communications.
  C. VPNs use larger packets then wireless networks normally do.
  D. Using a VPN on wireless automatically enables WEP,which causes additional overhead.
  B. Using a VPN with wireless doubles the overhead on an access point for all direct client to access point communications.

• Question 640:

  Botnets are networks of compromised computers that are controlled remotely and surreptitiously by one or more cyber criminals. How do cyber criminals infect a victim's computer with bots? (Select 4 answers)

  A. Attackers physically visit every victim's computer to infect them with malicious software
  B. Home computers that have security vulnerabilities are prime targets for botnets
  C. Spammers scan the Internet looking for computers that are unprotected and use these "open-doors" to install malicious software
  D. Attackers use phishing or spam emails that contain links or attachments
  E. Attackers use websites to host the bots utilizing Web Browser vulnerabilities
  B. Home computers that have security vulnerabilities are prime targets for botnets
  C. Spammers scan the Internet looking for computers that are unprotected and use these "open-doors" to install malicious software
  D. Attackers use phishing or spam emails that contain links or attachments
  E. Attackers use websites to host the bots utilizing Web Browser vulnerabilities