EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 881:

  What are the main drawbacks for anti-virus software?

  A. AV software is difficult to keep up to the current revisions.

  B. AV software can detect viruses but can take no action.

  C. AV software is signature driven so new exploits are not detected.

  D. It's relatively easy for an attacker to change the anatomy of an attack to bypass AV systems

  E. AV software isn't available on all major operating systems platforms.

  F. AV software is very machine (hardware) dependent.

  Correct Answer: C

• Question 882:

  Virus Scrubbers and other malware detection program can only detect items that they are aware of. Which of the following tools would allow you to detect unauthorized changes or modifications of binary files on your system by unknown malware?

  A. System integrity verification tools

  B. Anti-Virus Software

  C. A properly configured gateway

  D. There is no way of finding out until a new updated signature file is released

  Correct Answer: A

• Question 883:

  Joe Hacker is going wardriving. He is going to use PrismStumbler and wants it to go to a GPS mapping software application. What is the recommended and well- known GPS mapping package that would interface with PrismStumbler?

  Select the best answer.

  A. GPSDrive

  B. GPSMap

  C. WinPcap

  D. Microsoft Mappoint

  Correct Answer: A

• Question 884:

  A new wireless client is configured to join a 802.11 network. Thisclient uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client.

  What is a possible source of this problem?

  A. The client cannot see the SSID of the wireless network

  B. The wireless client is not configured to use DHCP

  C. The WAP does not recognize the client's MAC address

  D. Client isconfigured for the wrong channel

  Correct Answer: C

• Question 885:

  You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it.

  What tool will help you with the task?

  A. Armitage

  B. Dimitry

  C. cdpsnarf

  D. Metagoofil

  Correct Answer: D

• Question 886:

  It is a vulnerability in GNU's bash shell, discovered in September of 2004, that gives attackers access to run remote commands on a vulnerable system. The malicious software can take control of an infected machine, launch denial-of service attacks to disrupt websites, and scan for other vulnerable devices (including routers).

  Which of the following vulnerabilities is being described?

  A. Shellshock

  B. Rootshock

  C. Shellbash

  D. Rootshell

  Correct Answer: A

• Question 887:

  Which of the following describes the characteristics of a Boot Sector Virus?

  A. Overwrites the original MBR and only executes the new virus code

  B. Modifies directory table entries so that directory entries point to the virus code instead of the actual program

  C. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

  D. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR

  Correct Answer: C

• Question 888:

  You have compromised a server on a network and successfully open a shell. You aimed to identify all operating systems running on the network. However, as you attemptto fingerprint all machines in the machines in the network using the nmap syntax below, it is not going through.

  invictus@victim_server:~$nmap –T4 –O 10.10.0.0/24

  TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxxx.

  QUITTING!

  What seems to be wrong?

  A. The outgoing TCP/IP fingerprinting is blocked by the host firewall.

  B. This is a common behavior for a corrupted nmap application.

  C. OS Scan requires root privileged.

  D. The nmap syntax is wrong.

  Correct Answer: D

• Question 889:

  What isa "Collision attach" in cryptography?

  A. Collision attacks try to break the hash into two parts, with the same bytes in each part to get the private key.

  B. Collision attacks try to break the hash into three parts to get the plaintext value.

  C. Collision attacks try to find two inputs producing the same hash.

  D. Collision attacks try to get the public key

  Correct Answer: C

• Question 890:

  An attacker gains access to a Web server's database and display the contents of the table that holds all of the names, passwords, and other user information. The attacker did this by entering information into the Web site's user login page that the software's designers did not expect to be entered. This is an example of what kind of software design problem?

  A. Insufficient security management

  B. Insufficient database hardening

  C. Insufficient exception handling

  D. Insufficient input validation

  Correct Answer: D