EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 701:

  Which type of security document is written with specific step-by-step details?

  A. Process
  B. Procedure
  C. Policy
  D. Paradigm
  B. Procedure

• Question 702:

  Which of the following systems would not respond correctly to an nmap XMAS scan?

  A. Windows 2000 Server running IIS 5
  B. Any Solaris version running SAMBA Server
  C. Any version of IRIX
  D. RedHat Linux 8.0 running Apache Web Server
  A. Windows 2000 Server running IIS 5

• Question 703:

  An Nmap scan shows the following open ports, and nmap also reports that the OS guessing results to match too many signatures hence it cannot reliably be identified: 21 ftp 23 telnet 80 http 443 https What does this suggest?

  A. This is a Windows Domain Controller
  B. The host is not firewalled
  C. The host is not a Linux or Solaris system
  D. The host is not properly patched
  D. The host is not properly patched

• Question 704:

  This packet was taken from a packet sniffer that monitors a Web server.

  

  This packet was originally 1514 bytes long, but only the first 512 bytes are shown here.

  This is the standard hexdump representation of a network packet, before being decoded. A hexdump has three columns: the offset of each line, the hexadecimal data, and the ASCII equivalent. This packet contains a 14-byte Ethernet header,

  a 20-byte IP header, a 20-byte TCP header, an HTTP header ending in two line- feeds (0D 0A 0D 0A) and then the data.

  By examining the packet identify the name and version of the Web server?

  A. Apache 1.2
  B. IIS 4.0
  C. IIS 5.0
  D. Linux WServer 2.3
  B. IIS 4.0

• Question 705:

  Jane has just accessed her preferred e-commerce web site and she has seen an item she would like to buy. Jane considers the price a bit too steep; she looks at the page source code and decides to save the page locally to modify some of the page variables.

  In the context of web application security, what do you think Jane has changed?

  A. An integer variable
  B. A 'hidden' price value
  C. A 'hidden' form field value
  D. A page cannot be changed locally; it can only be served by a web server
  C. A 'hidden' form field value

• Question 706:

  An attacker gains access to a Web server's database and display the contents of the table that holds all of the names, passwords, and other user information. The attacker did this by entering information into the Web site's user login page that the software's designers did not expect to be entered. This is an example of what kind of software design problem?

  A. Insufficient security management
  B. Insufficient database hardening
  C. Insufficient exception handling
  D. Insufficient input validation
  D. Insufficient input validation

• Question 707:

  Switches maintain a CAM Table that maps individual MAC addresses on the network to physical ports on the switch.

  

  In MAC flooding attack, a switch is fed with many Ethernet frames, each containing different source MAC addresses, by the attacker. Switches have a limited memory for mapping various MAC addresses to physical ports. What happens when the CAM table becomes full?

  A. Switch then acts as hub by broadcasting packets to all machines on the network
  B. The CAM overflow table will cause the switch to crash causing Denial of Service
  C. The switch replaces outgoing frame switch factory default MAC address of FF:FF:FF:FF:FF:FF
  D. Every packet is dropped and the switch sends out SNMP alerts to the IDS port
  A. Switch then acts as hub by broadcasting packets to all machines on the network

• Question 708:

  What does the term "Ethical Hacking" mean?

  A. Someone who is hacking for ethical reasons.
  B. Someone who is using his/her skills for ethical reasons.
  C. Someone who is using his/her skills for defensive purposes.
  D. Someone who is using his/her skills for offensive purposes.
  C. Someone who is using his/her skills for defensive purposes.

• Question 709:

  Your computer is infected by E-mail tracking and spying Trojan. This Trojan infects the computer with a single file - emos.sys

  Which step would you perform to detect this type of Trojan?

  

  A. Scan for suspicious startup programs using msconfig
  B. Scan for suspicious network activities using Wireshark
  C. Scan for suspicious device drivers in c:\windows\system32\drivers
  D. Scan for suspicious open ports using netstat
  C. Scan for suspicious device drivers in c:\windows\system32\drivers

• Question 710:

  What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

  A. The request to the web server is not visible to the administrator of the vulnerable application.
  B. The attack is called "Blind" because,although the application properly filters user input,it is still vulnerable to code injection.
  C. The successful attack does not show an error message to the administrator of the affected application.
  D. The vulnerable application does not display errors with information about the injection results to the attacker.
  D. The vulnerable application does not display errors with information about the injection results to the attacker.