EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 811:

  When working with Windows systems, what is the RID of the true administrator account?

  A. 500
  B. 501
  C. 1000
  D. 1001
  E. 1024
  F. 512
  A. 500

• Question 812:

  Bryan notices the error on the web page and asks Liza to enter liza' or '1'='1 in the email field. They are greeted with a message "Your login information has been mailed to [email protected]". What do you think has occurred?

  A. The web application picked up a record at random
  B. The web application returned the first record it found
  C. The server error has caused the application to malfunction
  D. The web application emailed the administrator about the error
  B. The web application returned the first record it found

• Question 813:

  Which security control role does encryption meet?

  A. Preventative
  B. Detective
  C. Offensive
  D. Defensive
  A. Preventative

• Question 814:

  Vulnerability mapping occurs after which phase of a penetration test?

  A. Host scanning
  B. Passive information gathering
  C. Analysis of host scanning
  D. Network level discovery
  C. Analysis of host scanning

• Question 815:

  Which NMAP feature can a tester implement or adjust while scanning for open ports to avoid detection by the network's IDS?

  A. Timing options to slow the speed that the port scan is conducted
  B. Fingerprinting to identify which operating systems are running on the network
  C. ICMP ping sweep to determine which hosts on the network are not available
  D. Traceroute to control the path of the packets sent during the scan
  A. Timing options to slow the speed that the port scan is conducted

• Question 816:

  Exhibit

  

  (Note: the student is being tested on concepts learnt during passive OS fingerprinting, basic TCP/IP connection concepts and the ability to read packet signatures from a sniff dump.)

  Snort has been used to capture packets on the network. On studying the packets, the penetration tester finds it to be abnormal. If you were the penetration tester, why would you find this abnormal?

  What is odd about this attack? Choose the best answer.

  A. This is not a spoofed packet as the IP stack has increasing numbers for the three flags.
  B. This is back orifice activity as the scan comes form port 31337.
  C. The attacker wants to avoid creating a sub-carries connection that is not normally valid.
  D. These packets were crafted by a tool,they were not created by a standard IP stack.
  B. This is back orifice activity as the scan comes form port 31337.

• Question 817:

  A company is legally liable for the content of email that is sent from its systems, regardless of whether the message was sent for private or business-related purposes. This could lead to prosecution for the sender and for the company's directors if, for example, outgoing email was found to contain material that was pornographic, racist, or likely to incite someone to commit an act of terrorism. You can always defend yourself by "ignorance of the law" clause.

  A. true
  B. false
  B. false

• Question 818:

  You are conducting a port scan on a subnet that has ICMP blocked. You have discovered 23 live systems and after scanning each of them you notice that they all show port 21 in closed state. What should be the next logical step that should be performed?

  A. Connect to open ports to discover applications.
  B. Perform a ping sweep to identify any additional systems that might be up.
  C. Perform a SYN scan on port 21 to identify any additional systems that might be up.
  D. Rescan every computer to verify the results.
  C. Perform a SYN scan on port 21 to identify any additional systems that might be up.

• Question 819:

  Joe Hacker is going wardriving. He is going to use PrismStumbler and wants it to go to a GPS mapping software application. What is the recommended and well- known GPS mapping package that would interface with PrismStumbler? Select the best answer.

  A. GPSDrive
  B. GPSMap
  C. WinPcap
  D. Microsoft Mappoint
  A. GPSDrive

• Question 820:

  Which of the following is a component of a risk assessment?

  A. Physical security
  B. Administrative safeguards
  C. DMZ
  D. Logical interface
  B. Administrative safeguards