EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 851:

  Bob has been hired to do a web application security test. Bob notices that the site is dynamic and must make use of a back end database. Bob wants to see if SQL Injection would be possible. What is the first character that Bob should use to attempt breaking valid SQL request?

  A. Semi Column
  B. Double Quote
  C. Single Quote
  D. Exclamation Mark
  C. Single Quote

• Question 852:

  What is the proper response for a NULL scan if the port is closed?

  A. SYN
  B. ACK
  C. FIN
  D. PSH
  E. RST
  F. No response
  E. RST

• Question 853:

  You suspect that your Windows machine has been compromised with a Trojan virus. When you run anti-virus software it does not pick of the Trojan. Next you run netstat command to look for open ports and you notice a strange port 6666 open.

  What is the next step you would do?

  A. Re-install the operating system.
  B. Re-run anti-virus software.
  C. Install and run Trojan removal software.
  D. Run utility fport and look for the application executable that listens on port 6666.
  D. Run utility fport and look for the application executable that listens on port 6666.

• Question 854:

  WWW wanderers or spiders are programs that traverse many pages in the World Wide Web by recursively retrieving linked pages. Search engines like Google, frequently spider web pages for indexing. How will you stop web spiders from crawling certain directories on your website?

  A. Place robots.txt file in the root of your website with listing of directories that you don't want to be crawled
  B. Place authentication on root directories that will prevent crawling from these spiders
  C. Enable SSL on the restricted directories which will block these spiders from crawling
  D. Place "HTTP:NO CRAWL" on the html pages that you don't want the crawlers to index
  A. Place robots.txt file in the root of your website with listing of directories that you don't want to be crawled

• Question 855:

  Exhibit

  

  Joe Hacker runs the hping2 hacking tool to predict the target host's sequence numbers in one of the hacking session. What does the first and second column mean? Select two.

  A. The first column reports the sequence number
  B. The second column reports the difference between the current and last sequence number
  C. The second column reports the next sequence number
  D. The first column reports the difference between current and last sequence number
  A. The first column reports the sequence number
  B. The second column reports the difference between the current and last sequence number

• Question 856:

  What is the correct order of steps in CEH System Hacking Cycle?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 857:

  Sandra has been actively scanning the client network on which she is doing a vulnerability assessment test. While conducting a port scan she notices open ports in the range of 135 to 139. What protocol is most likely to be listening on those ports?

  A. Finger
  B. FTP
  C. Samba
  D. SMB
  D. SMB

• Question 858:

  In Risk Management, how is the term "likelihood" related to the concept of "threat?"

  A. Likelihood is the probability that a vulnerability is a threat-source.
  B. Likelihood is a possible threat-source that may exploit a vulnerability.
  C. Likelihood is the likely source of a threat that could exploit a vulnerability.
  D. Likelihood is the probability that a threat-source will exploit a vulnerability.
  D. Likelihood is the probability that a threat-source will exploit a vulnerability.

• Question 859:

  A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firm's public facing web servers. The engineer decides to start by using netcat to port 80. The engineer receives this output: HTTP/1.1 200 OK Server: Microsoft-IIS/6 Expires: Tue, 17 Jan 2011 01:41:33 GMT DatE. Mon, 16 Jan 2011 01:41:33 GMT Content-TypE. text/html Accept-Ranges: bytes Last-ModifieD. Wed, 28 Dec 2010 15:32:21 GMT ETaG. "b0aac0542e25c31:89d" Content-Length: 7369 Which of the following is an example of what the engineer performed?

  A. Cross-site scripting
  B. Banner grabbing
  C. SQL injection
  D. Whois database query
  B. Banner grabbing

• Question 860:

  Which of the following can the administrator do to verify that a tape backup can be recovered in its entirety?

  A. Restore a random file.
  B. Perform a full restore.
  C. Read the first 512 bytes of the tape.
  D. Read the last 512 bytes of the tape.
  B. Perform a full restore.