EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 681:

  Which of the following is considered an acceptable option when managing a risk?

  A. Reject the risk.

  B. Deny the risk.

  C. Mitigate the risk.

  D. Initiate the risk.

  Correct Answer: C

• Question 682:

  The use of alert thresholding in an IDS can reduce the volume of repeated alerts, but introduces which of the following vulnerabilities?

  A. An attacker,working slowly enough,can evade detection by the IDS.

  B. Network packets are dropped if the volume exceeds the threshold.

  C. Thresholding interferes with the IDS' ability to reassemble fragmented packets.

  D. The IDS will not distinguish among packets originating from different sources.

  Correct Answer: A

• Question 683:

  Which of the following is optimized for confidential communications, such as bidirectional voice and video?

  A. RC4

  B. RC5

  C. MD4

  D. MD5

  Correct Answer: A

• Question 684:

  What is the goal of a Denial of Service Attack?

  A. Capture files from a remote computer.

  B. Render a network or computer incapable of providing normal service.

  C. Exploit a weakness in the TCP stack.

  D. Execute service at PS 1009.

  Correct Answer: B

• Question 685:

  What do you call a system where users need to remember only one username and password, and be authenticated for multiple services?

  A. Simple Sign-on

  B. Unique Sign-on

  C. Single Sign-on

  D. Digital Certificate

  Correct Answer: C

• Question 686:

  What is the term 8 to describe an attack that falsifies a broadcast ICMP echo request and includes a primary and secondary victim?

  A. Fraggle Attack

  B. Man in the Middle Attack

  C. Trojan Horse Attack

  D. Smurf Attack

  E. Back Orifice Attack

  Correct Answer: D

• Question 687:

  What happens during a SYN flood attack?

  A. TCP connection requests floods a target machine is flooded with randomized source address and ports for the TCP ports.

  B. A TCP SYN packet,which is a connection initiation,is sent to a target machine,giving the target host's address as both source and destination,and is using the same port on the target host as both source and destination.

  C. A TCP packet is received with the FIN bit set but with no ACK bit set in the flags field.

  D. A TCP packet is received with both the SYN and the FIN bits set in the flags field.

  Correct Answer: A

• Question 688:

  A denial of Service (DoS) attack works on the following principle:

  A. MS-DOS and PC-DOS operating system utilize a weaknesses that can be compromised and permit them to launch an attack easily.

  B. All CLIENT systems have TCP/IP stack implementation weakness that can be compromised and permit them to lunch an attack easily.

  C. Overloaded buffer systems can easily address error conditions and respond appropriately.

  D. Host systems cannot respond to real traffic,if they have an overwhelming number of incomplete connections (SYN/RCVD State).

  E. A server stops accepting connections from certain networks one those network become flooded.

  Correct Answer: D

• Question 689:

  Which one of the following network attacks takes advantages of weaknesses in the fragment reassembly functionality of the TCP/IP protocol stack?

  A. Teardrop

  B. Smurf

  C. Ping of Death

  D. SYN flood

  E. SNMP Attack

  Correct Answer: A

• Question 690:

  What happens when one experiences a ping of death?

  A. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP) and the "type" field in the ICMP header is set to 18 (Address Mask Reply).

  B. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP),the Last Fragment bit is set,and (IP offset ` 8) + (IP data length) >65535. In other words,the IP offset (which represents the starting position of this fragment in the original packet,and which is in 8-byte units) plus the rest of the packet is greater than the maximum size for an IP packet.

  C. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP) and the source equal to destination address.

  D. This is when an the IP header is set to 1 (ICMP) and the "type" field in the ICMP header is set to 5 (Redirect).

  Correct Answer: B