EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 81:

  You have successfully gained access to a linux server and would like to ensure that the succeeding outgoing traffic from the server will not be caught by a Network Based Intrusion Detection System (NIDS). Which is the best way to evade the NIDS?

  A. Out of band signaling
  B. Encryption
  C. Alternate Data Streams
  D. Protocol Isolation
  B. Encryption

• Question 82:

  Which of the following display filters will you enable in Ethereal to view the three-way handshake for a connection from host 192.168.0.1?

  A. ip == 192.168.0.1 and tcp.syn
  B. ip.addr = 192.168.0.1 and syn = 1
  C. ip.addr==192.168.0.1 and tcp.flags.syn
  D. ip.equals 192.168.0.1 and syn.equals on
  C. ip.addr==192.168.0.1 and tcp.flags.syn

• Question 83:

  When discussing passwords, what is considered a brute force attack?

  A. You attempt every single possibility until you exhaust all possible combinations or discover the password
  B. You threaten to use the rubber hose on someone unless they reveal their password
  C. You load a dictionary of words into your cracking program
  D. You create hashes of a large number of words and compare it with the encrypted passwords
  E. You wait until the password expires
  A. You attempt every single possibility until you exhaust all possible combinations or discover the password

• Question 84:

  A security administrator notices that the log file of the company`s webserver contains suspicious entries:

  

  Based on source code analysis, the analyst concludes that the login.php script is vulnerable to

  A. command injection.
  B. SQL injection.
  C. directory traversal.
  D. LDAP injection.
  B. SQL injection.

• Question 85:

  Which of the following is NOT a valid NetWare access level?

  A. Not Logged in
  B. Logged in
  C. Console Access
  D. Administrator
  D. Administrator

• Question 86:

  Which type of hacker represents the highest risk to your network?

  A. black hat hackers
  B. grey hat hackers
  C. disgruntled employees
  D. script kiddies
  C. disgruntled employees

• Question 87:

  Eric notices repeated probes to port 1080. He learns that the protocol being used is designed to allow a host outside of a firewall to connect transparently and securely through the firewall. He wonders if his firewall has been breached. What would be your inference?

  A. Eric network has been penetrated by a firewall breach
  B. The attacker is using the ICMP protocol to have a covert channel
  C. Eric has a Wingate package providing FTP redirection on his network
  D. Somebody is using SOCKS on the network to communicate through the firewall
  D. Somebody is using SOCKS on the network to communicate through the firewall

• Question 88:

  ICMP ping and ping sweeps are used to check for active systems and to check

  A. if ICMP ping traverses a firewall.
  B. the route that the ICMP ping took.
  C. the location of the switchport in relation to the ICMP ping.
  D. the number of hops an ICMP ping takes to reach a destination.
  A. if ICMP ping traverses a firewall.

• Question 89:

  John has scanned the web server with NMAP. However, he could not gather enough information to help him identify the operating system running on the remote host accurately. What would you suggest to John to help identify the OS that is being used on the remote web server?

  A. Connect to the web server with a browser and look at the web page.
  B. Connect to the web server with an FTP client.
  C. Telnet to port 8080 on the web server and look at the default page code.
  D. Telnet to an open port and grab the banner.
  D. Telnet to an open port and grab the banner.

• Question 90:

  You are writing security policy that hardens and prevents Footprinting attempt by Hackers.

  Which of the following countermeasures will NOT be effective against this attack?

  A. Configure routers to restrict the responses to Footprinting requests
  B. Configure Web Servers to avoid information leakage and disable unwanted protocols
  C. Lock the ports with suitable Firewall configuration
  D. Use an IDS that can be configured to refuse suspicious traffic and pick up Footprinting patterns
  E. Evaluate the information before publishing it on the Website/Intranet
  F. Monitor every employee computer with Spy cameras,keyloggers and spy on them
  G. Perform Footprinting techniques and remove any sensitive information found on DMZ sites
  H. Prevent search engines from caching a Webpage and use anonymous registration services
  I. Disable directory and use split-DNS
  F. Monitor every employee computer with Spy cameras,keyloggers and spy on them