EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 731:

  During a penetration test, the tester conducts an ACK scan using NMAP against the external interface of the DMZ firewall. NMAP reports that port 80 is unfiltered. Based on this response, which type of packet inspection is the firewall conducting?

  A. Host
  B. Stateful
  C. Stateless
  D. Application
  C. Stateless

• Question 732:

  Which of the following is designed to indentify malicious attempts to penetrate systems?

  A. Proxy
  B. Router
  C. Firewall
  D. Intrusion Detection System
  D. Intrusion Detection System

• Question 733:

  Which of the following would be the best reason for sending a single SMTP message to an address that does not exist within the target company?

  A. To create a denial of service attack.
  B. To verify information about the mail administrator and his address.
  C. To gather information about internal hosts used in email treatment.
  D. To gather information about procedures that are in place to deal with such messages.
  C. To gather information about internal hosts used in email treatment.

• Question 734:

  A hacker searches in Google for filetype:pcf to find Cisco VPN config files. Those files may contain connectivity passwords that can be decoded with which of the following?

  A. Cupp
  B. Nessus
  C. Cain and Abel
  D. John The Ripper Pro
  C. Cain and Abel

• Question 735:

  What are two types of ICMP code used when using the ping command?

  A. It uses types 0 and 8.
  B. It uses types 13 and 14.
  C. It uses types 15 and 17.
  D. The ping command does not use ICMP but uses UDP.
  A. It uses types 0 and 8.

• Question 736:

  The intrusion detection system at a software development company suddenly generates multiple alerts regarding attacks against the company's external webserver, VPN concentrator, and DNS servers. What should the security team do to determine which alerts to check first?

  A. Investigate based on the maintenance schedule of the affected systems.
  B. Investigate based on the service level agreements of the systems.
  C. Investigate based on the potential effect of the incident.
  D. Investigate based on the order that the alerts arrived in.
  C. Investigate based on the potential effect of the incident.

• Question 737:

  A corporation hired an ethical hacker to test if it is possible to obtain users' login credentials using methods other than social engineering. Access to offices and to a network node is granted. Results from server scanning indicate all are adequately patched and physical access is denied, thus, administrators have access only through Remote Desktop.

  Which technique could be used to obtain login credentials?

  A. Capture every users' traffic with Ettercap.
  B. Capture LANMAN Hashes and crack them with LC6.
  C. Guess passwords using Medusa or Hydra against a network service.
  D. Capture administrators RDP traffic and decode it with Cain and Abel.
  D. Capture administrators RDP traffic and decode it with Cain and Abel.

• Question 738:

  Null sessions are un-authenticated connections (not using a username or password.) to an NT or 2000 system. Which TCP and UDP ports must you filter to check null sessions on your network?

  A. 137 and 139
  B. 137 and 443
  C. 139 and 443
  D. 139 and 445
  D. 139 and 445

• Question 739:

  This international organizationregulates billions of transactions daily and provides security guidelines to protect personally identifiable information (PII). These security controls provide a baseline and prevent low-level hackers sometimes known as script kiddies from causing a data breach.

  Which of the following organizations is being described?

  A. Payment Card Industry (PCI)
  B. International Security Industry Organization (ISIO)
  C. Institute of Electrical and Electronics Engineers (IEEE)
  D. Center for Disease Control (CDC)
  B. International Security Industry Organization (ISIO)

• Question 740:

  

  An attacker finds a web page for a target organization that supplies contact information for the company. Using available details to make the message seem authentic, the attacker drafts e-mail to an employee on the contact page that

  appears to come from an individual who might reasonably request confidential information, such as a network administrator.

  The email asks the employee to log into a bogus page that requests the employee's user name and password or click on a link that will download spyware or other malicious programming.

  Google's Gmail was hacked using this technique and attackers stole source code and sensitive data from Google servers. This is highly sophisticated attack using zero-day exploit vectors, social engineering and malware websites that

  focused on targeted individuals working for the company.

  What is this deadly attack called?

  A. Spear phishing attack
  B. Trojan server attack
  C. Javelin attack
  D. Social networking attack
  A. Spear phishing attack