EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 871:

  You have compromised a server on a network and successfully open a shell. You aimed to identify all operating systems running on the network. However, as you attemptto fingerprint all machines in the machines in the network using the

  nmap syntax below, it is not going through.

  invictus@victim_server:~$nmap –T4 –O 10.10.0.0/24

  TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxxx.

  QUITTING!

  What seems to be wrong?

  A. The outgoing TCP/IP fingerprinting is blocked by the host firewall.
  B. This is a common behavior for a corrupted nmap application.
  C. OS Scan requires root privileged.
  D. The nmap syntax is wrong.
  D. The nmap syntax is wrong.

• Question 872:

  The network administrator contacts you and tells you that she noticed the temperature on the internal wireless router increases by more than 20% during weekend hours when the office was closed. She asks you to investigate the issue because she is busy dealing with a big conference and she doesn't have time to perform the task.

  What tool can you use to view the network traffic being sent and received by the wireless router?

  A. Netcat
  B. Wireshark
  C. Nessus
  D. Netstat
  B. Wireshark

• Question 873:

  SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts. Which of the following features makes this possible? (Choose two)

  A. It used TCP as the underlying protocol.
  B. It uses community string that is transmitted in clear text.
  C. It is susceptible to sniffing.
  D. It is used by all network devices on the market.
  B. It uses community string that is transmitted in clear text.
  D. It is used by all network devices on the market.

• Question 874:

  What file system vulnerability does the following command take advantage of? type c:\anyfile.exe > c:\winnt\system32\calc.exe:anyfile.exe

  A. HFS
  B. ADS
  C. NTFS
  D. Backdoor access
  B. ADS

• Question 875:

  Ann would like to perform a reliable scan against a remote target. She is not concerned about being stealth at this point. Which of the following type of scans would be the most accurate and reliable option?

  A. A half-scan
  B. A UDP scan
  C. A TCP Connect scan
  D. A FIN scan
  C. A TCP Connect scan

• Question 876:

  What is the goal of a Denial of Service Attack?

  A. Capture files from a remote computer.
  B. Render a network or computer incapable of providing normal service.
  C. Exploit a weakness in the TCP stack.
  D. Execute service at PS 1009.
  B. Render a network or computer incapable of providing normal service.

• Question 877:

  Which of the following is an example of IP spoofing?

  A. SQL injections
  B. Man-in-the-middle
  C. Cross-site scripting
  D. ARP poisoning
  B. Man-in-the-middle

• Question 878:

  You visit a website to retrieve the listing of a company's staff members. But you can not find it on the website. You know the listing was certainly present one year before. How can you retrieve information from the outdated website?

  A. Through Google searching cached files
  B. Through Archive.org
  C. Download the website and crawl it
  D. Visit customers' and prtners' websites
  B. Through Archive.org

• Question 879:

  Which of the following are advantages of adopting a Single Sign On (SSO) system? (Choose two.)

  A. A reduction in password fatigue for users because they do not need to know multiple passwords when accessing multiple applications
  B. A reduction in network and application monitoring since all recording will be completed at the SSO system
  C. A reduction in system administration overhead since any user login problems can be resolved at the SSO system
  D. A reduction in overall risk to the system since network and application attacks can only happen at the SSO point
  A. A reduction in password fatigue for users because they do not need to know multiple passwords when accessing multiple applications
  C. A reduction in system administration overhead since any user login problems can be resolved at the SSO system

• Question 880:

  An Evil Cracker is attempting to penetrate your private network security. To do this, he must not be seen by your IDS, as it may take action to stop him. What tool might he use to bypass the IDS? Select the best answer.

  A. Firewalk
  B. Manhunt
  C. Fragrouter
  D. Fragids
  C. Fragrouter