EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 801:

  Which tool allows analysis and pen testers to examine links between data using graphs and link analysis?

  A. Metasploit
  B. Maltego
  C. Wireshark
  D. Cain andAbel
  B. Maltego

• Question 802:

  What command would you type to OS fingerprint a server using the command line?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 803:

  Which of the following algorithms provides better protection against brute force attacks by using a 160-bit message digest?

  A. MD5
  B. SHA-1
  C. RC4
  D. MD4
  B. SHA-1

• Question 804:

  Paul has just finished setting up his wireless network. He has enabled numerous security features such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless router. Paul notices that when he uses his wireless connection, the speed is sometimes 54 Mbps and sometimes it is only 24Mbps or less. Paul connects to his wireless router's management utility and notices that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the router's logs and notices that the unfamiliar machine has the same MAC address as his laptop.

  What is Paul seeing here?

  A. MAC spoofing
  B. Macof
  C. ARP spoofing
  D. DNS spoofing
  A. MAC spoofing

• Question 805:

  What is the purpose of conducting security assessments on network resources?

  A. Documentation
  B. Validation
  C. Implementation
  D. Management
  B. Validation

• Question 806:

  Henry is an attacker and wants to gain control of a system and use it to flood a target system with requests, so as to prevent legitimate users from gaining access. What type of attack is Henry using?

  A. Henry is executing commands or viewing data outside the intended target path
  B. Henry is using a denial of service attack which is a valid threat used by an attacker
  C. Henry is taking advantage of an incorrect configuration that leads to access with higher-than-expected privilege
  D. Henry uses poorly designed input validation routines to create or alter commands to gain access to unintended data or execute commands
  B. Henry is using a denial of service attack which is a valid threat used by an attacker

• Question 807:

  A security consultant is trying to bid on a large contract that involves penetration testing and reporting. The company accepting bids wants proof of work so the consultant prints out several audits that have been performed.

  Which of the following is likely to occur as a result?

  A. The consultant will ask for money on the bid because of great work.
  B. The consultant may expose vulnerabilities of other companies.
  C. The company accepting bids will want the same type of format of testing.
  D. The company accepting bids will hire the consultant because of the great work performed.
  B. The consultant may expose vulnerabilities of other companies.

• Question 808:

  Cyber Criminals have long employed the tactic of masking their true identity. In IP spoofing, an attacker gains unauthorized access to a computer or a network by making it appear that a malicious message has come from a trusted machine, by "spoofing" the IP address of that machine.

  How would you detect IP spoofing?

  A. Check the IPID of the spoofed packet and compare it with TLC checksum. If the numbers match then it is spoofed packet
  B. Probe a SYN Scan on the claimed host and look for a response SYN/FIN packet,if the connection completes then it is a spoofed packet
  C. Turn on 'Enable Spoofed IP Detection' in Wireshark,you will see a flag tick if the packet is spoofed
  D. Sending a packet to the claimed host will result in a reply. If the TTL in the reply is not the same as the packet being checked then it is a spoofed packet
  D. Sending a packet to the claimed host will result in a reply. If the TTL in the reply is not the same as the packet being checked then it is a spoofed packet

• Question 809:

  SNMP is a connectionless protocol that uses UDP instead of TCP packets (True or False)

  A. true
  B. false
  A. true

• Question 810:

  Consider the following code:

  URL:http://www.certified.com/search.pl?

  text=

  If an attacker can trick a victim user to click a link like this, and the Web application does not validate input, then the victim's browser will pop up an alert showing the users current set of cookies. An attacker can do much more damage,

  including stealing passwords, resetting your home page, or redirecting the user to another Web site.

  What is the countermeasure against XSS scripting?

  A. Create an IP access list and restrict connections based on port number
  B. Replace "" characters with "and l t;" and "and g t;" using server scripts
  C. Disable Javascript in IE and Firefox browsers
  D. Connect to the server using HTTPS protocol instead of HTTP
  B. Replace "" characters with "and l t;" and "and g t;" using server scripts