EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 891:

  Which of the following keyloggers cannot be detected by anti-virus or anti-spyware products?

  A. Covert keylogger
  B. Stealth keylogger
  C. Software keylogger
  D. Hardware keylogger
  D. Hardware keylogger

• Question 892:

  To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used randomly generate invalid input in an attempt to crash the program. What term is commonly used when referring to this type of testing?

  A. Bounding
  B. Mutating
  C. Puzzing
  D. Randomizing
  C. Puzzing

• Question 893:

  Tess King, the evil hacker, is purposely sending fragmented ICMP packets to a remote target. The total size of this ICMP packet once reconstructed is over 65, 536 bytes. From the information given, what type of attack is Tess King attempting to perform?

  A. Syn flood
  B. Smurf
  C. Ping of death
  D. Fraggle
  C. Ping of death

• Question 894:

  A tester is attempting to capture and analyze the traffic on a given network and realizes that the network has several switches. What could be used to successfully sniff the traffic on this switched network? (Choose three.)

  A. ARP spoofing
  B. MAC duplication
  C. MAC flooding
  D. SYN flood
  E. Reverse smurf attack
  F. ARP broadcasting
  A. ARP spoofing
  B. MAC duplication
  C. MAC flooding

• Question 895:

  Peter is a Linux network admin. As a knowledgeable security consultant, he turns to you to look for help on a firewall. He wants to use Linux as his firewall and use the latest freely available version that is offered. What do you recommend? Select the best answer.

  A. Ipchains
  B. Iptables
  C. Checkpoint FW for Linux
  D. Ipfwadm
  B. Iptables

• Question 896:

  One of the better features of NetWare is the use of packet signature that includes cryptographic signatures. The packet signature mechanism has four levels from 0 to 3.

  In the list below which of the choices represent the level that forces NetWare to sign all packets?

  A. 0 (zero)
  B. 1
  C. 2
  D. 3
  D. 3

• Question 897:

  Under what conditions does a secondary name server request a zone transfer from a primary name server?

  A. When a primary SOA is higher that a secondary SOA
  B. When a secondary SOA is higher that a primary SOA
  C. When a primary name server has had its service restarted
  D. When a secondary name server has had its service restarted
  E. When the TTL falls to zero
  A. When a primary SOA is higher that a secondary SOA

• Question 898:

  A circuit level gateway works at which of the following layers of the OSI Model?

  A. Layer 5 - Application
  B. Layer 4 - TCP
  C. Layer 3 - Internet protocol
  D. Layer 2 - Data link
  B. Layer 4 - TCP

• Question 899:

  Study the following exploit code taken from a Linux machine and answer the questions below:

  echo “ingreslock stream tcp nowait root /bin/sh sh –I" > /tmp/x;

  /usr/sbin/inetd –s /tmp/x;

  sleep 10;

  /bin/ rm –f /tmp/x AAAA…AAA

  In the above exploit code, the command A. The command /bin/sh sh appearing in the exploit code is actually part of an inetd configuration file.
  B. The length of such a buffer overflow exploit makes it prohibitive for user to enter manually. The second `sh' automates this function.
  C. It checks for the presence of a codeword (setting the environment variable) among the environment variables.
  D. It is a giveaway by the attacker that he is a script kiddy.

  A. The command /bin/sh sh appearing in the exploit code is actually part of an inetd configuration file.

• Question 900:

  Which of the following is a protocol that is prone to a man-in-the-middle (MITM) attack and maps a 32-bit address to a 48-bit address?

  A. ICPM
  B. ARP
  C. RARP
  D. ICMP
  B. ARP