EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 821:

  After studying the following log entries, what is the attacker ultimately trying to achieve as inferred from the log sequence?

  1.

  mkdir -p /etc/X11/applnk/Internet/.etc

  2.

  mkdir -p /etc/X11/applnk/Internet/.etcpasswd

  3.

  touch -acmr /etc/passwd /etc/X11/applnk/Internet/.etcpasswd

  4.

  touch -acmr /etc /etc/X11/applnk/Internet/.etc

  5.

  passwd nobody -d

  6.

  /usr/sbin/adduser dns -d/bin -u 0 -g 0 -s/bin/bash

  7.

  passwd dns -d

  8.

  touch -acmr /etc/X11/applnk/Internet/.etcpasswd /etc/passwd

  9.

  touch -acmr /etc/X11/applnk/Internet/.etc /etc

  A. Change password of user nobody
  B. Extract information from a local directory
  C. Change the files Modification Access Creation times
  D. Download rootkits and passwords into a new directory
  C. Change the files Modification Access Creation times

• Question 822:

  An organization hires a tester to do a wireless penetration test. Previous reports indicate that the last test did not contain management or control packets in the submitted traces. Which of the following is the most likely reason for lack of management or control packets?

  A. The wireless card was not turned on.
  B. The wrong network card drivers were in use by Wireshark.
  C. On Linux and Mac OS X,only 802.11 headers are received in promiscuous mode.
  D. Certain operating systems and adapters do not collect the management or control packets.
  D. Certain operating systems and adapters do not collect the management or control packets.

• Question 823:

  You are the Systems Administrator for a large corporate organization. You need to monitor all network traffic on your local network for suspicious activities and receive notifications when an attack is occurring. Which tool would allow you to accomplish this goal?

  A. Host-based IDS
  B. Firewall
  C. Network-Based IDS
  D. Proxy
  C. Network-Based IDS

• Question 824:

  XSS attacks occur on Web pages that do not perform appropriate bounds checking on data entered by users. Characters like < > that mark the beginning/end of a tag should be converted into HTML entities.

  

  What is the correct code when converted to html entities?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 825:

  Attackers can potentially intercept and modify unsigned SMB packets, modify the traffic and forward it so that the server might perform undesirable actions. Alternatively, the attacker could pose as the server or client after a legitimate authentication and gain unauthorized access to data.

  Which of the following is NOT a means that can be used to minimize or protect against such an attack?

  A. Timestamps
  B. SMB Signing
  C. File permissions
  D. Sequence numbers monitoring
  A. Timestamps
  B. SMB Signing
  D. Sequence numbers monitoring

• Question 826:

  It is a kind of malware (malicious software) that criminals install on your computer so they can lock it from a remote location. This malware generates a pop-up windows, webpage,or email warning from what looks like an officialauthority. It explains your computer has been locked because of possible illegal activities and demands payment before you can access your files and programs again.

  Which term best matches this definition?

  A. Spyware
  B. Adware
  C. Ransomware
  D. Riskware
  C. Ransomware

• Question 827:

  Which of the following can take an arbitrary length of input and produce a message digest output of 160 bit?

  A. SHA-1
  B. MD5
  C. HAVAL
  D. MD4
  A. SHA-1

• Question 828:

  The following exploit code is extracted from what kind of attack?

  

  A. Remote password cracking attack
  B. SQL Injection
  C. Distributed Denial of Service
  D. Cross Site Scripting
  E. Buffer Overflow
  E. Buffer Overflow

• Question 829:

  What is a NULL scan?

  A. A scan in which all flags are turned off
  B. A scan in which certain flags are off
  C. A scan in which all flags are on
  D. A scan in which the packet size is set to zero
  E. A scan with a illegal packet size
  A. A scan in which all flags are turned off

• Question 830:

  Which of the following is an application that requires a host application for replication?

  A. Micro
  B. Worm
  C. Trojan
  D. Virus
  D. Virus