EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 681:

  What does the following command in netcat do? nc -l -u -p55555 < /etc/passwd

  A. logs the incoming connections to /etc/passwd file
  B. loads the /etc/passwd file to the UDP port 55555
  C. grabs the /etc/passwd file when connected to UDP port 55555
  D. deletes the /etc/passwd file when connected to the UDP port 55555
  C. grabs the /etc/passwd file when connected to UDP port 55555

• Question 682:

  Jess the hacker runs L0phtCrack's built-in sniffer utility that grabs SMB password hashes and stores them for offline cracking. Once cracked, these passwords can provide easy access to whatever network resources the user account has access to. But Jess is not picking up hashes from the network.

  Why?

  A. The network protocol is configured to use SMB Signing
  B. The physical network wire is on fibre optic cable
  C. The network protocol is configured to use IPSEC
  D. L0phtCrack SMB sniffing only works through Switches and not Hubs
  A. The network protocol is configured to use SMB Signing

• Question 683:

  On a backdoored Linux box there is a possibility that legitimate programs are modified or trojaned. How is it possible to list processes and uids associated with them in a more reliable manner?

  A. Use "Is"
  B. Use "lsof"
  C. Use "echo"
  D. Use "netstat"
  B. Use "lsof"

• Question 684:

  Which one of the following network attacks takes advantages of weaknesses in the fragment reassembly functionality of the TCP/IP protocol stack?

  A. Teardrop
  B. Smurf
  C. Ping of Death
  D. SYN flood
  E. SNMP Attack
  A. Teardrop

• Question 685:

  Which NMAP command combination would let a tester scan every TCP port from a class C network that is blocking ICMP with fingerprinting and service detection?

  A. NMAP -PN -A -O -sS 192.168.2.0/24
  B. NMAP -P0 -A -O -p1-65535 192.168.0/24
  C. NMAP -P0 -A -sT -p0-65535 192.168.0/16
  D. NMAP -PN -O -sS -p 1-1024 192.168.0/8
  B. NMAP -P0 -A -O -p1-65535 192.168.0/24

• Question 686:

  While performing online banking using a web browser, a user receives an email that contains alink to an interesting Web site. When the user clicks on the link, another web browser session starts and displays a video of cats playing a piano. The next business day, the user receives what looks like an email from his bank, indicating that his bank account has been accessed from a foreign country. The email asks the user to call his bank and verify the authorization of a funds transfer that took place.

  What web browser-based security vulnerability was exploited to compromise the user?

  A. Cross-Site Request Forgery
  B. Cross-Site Scripting
  C. Web form input validation
  D. Clickjacking
  A. Cross-Site Request Forgery

• Question 687:

  Sally is a network admin for a small company. She was asked to install wireless accesspoints in the building. In looking at the specifications for the access-points, she sees that all of them offer WEP. Which of these are true about WEP? Select the best answer.

  A. Stands for Wireless Encryption Protocol
  B. It makes a WLAN as secure as a LAN
  C. Stands for Wired Equivalent Privacy
  D. It offers end to end security
  C. Stands for Wired Equivalent Privacy

• Question 688:

  What is a successful method for protecting a router from potential smurf attacks?

  A. Placing the router in broadcast mode
  B. Enabling port forwarding on the router
  C. Installing the router outside of the network's firewall
  D. Disabling the router from accepting broadcast ping messages
  D. Disabling the router from accepting broadcast ping messages

• Question 689:

  Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI).

  What must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust one another and each private PKI can validate digital certificates from the other company?

  A. Poly key exchange
  B. Cross certification
  C. Poly key reference
  D. Cross-site exchange
  B. Cross certification

• Question 690:

  Michael is a junior security analyst working for the National Security Agency (NSA) working primarily on breaking terrorist encrypted messages. The NSA has a number of methods they use to decipher encrypted messages including Government Access to Keys (GAK) and inside informants. The NSA holds secret backdoor keys to many of the encryption algorithms used on the Internet. The problem for the NSA, and Michael, is that terrorist organizations are starting to use custom-built algorithms or obscure algorithms purchased from corrupt governments. For this reason, Michael and other security analysts like him have been forced to find different methods of deciphering terrorist messages. One method that Michael thought of using was to hide malicious code inside seemingly harmless programs. Michael first monitors sites and bulletin boards used by known terrorists, and then he is able to glean email addresses to some of these suspected terrorists. Michael then inserts a stealth keylogger into a mapping program file readme.txt and then sends that as an attachment to the terrorist. This keylogger takes screenshots every 2 minutes and also logs all keyboard activity into a hidden file on the terrorist's computer. Then, the keylogger emails those files to Michael twice a day with a built in SMTP server. What technique has Michael used to disguise this keylogging software?

  A. Steganography
  B. Wrapping
  C. ADS
  D. Hidden Channels
  C. ADS