EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 921:

  What are two things that are possible when scanning UDP ports? (Choose two.

  A. A reset will be returned
  B. An ICMP message will be returned
  C. The four-way handshake will not be completed
  D. An RFC 1294 message will be returned
  E. Nothing
  B. An ICMP message will be returned
  E. Nothing

• Question 922:

  When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

  A. At least once a year and after any significant upgrade or modification
  B. At least once every three years or after any significant upgrade or modification
  C. At least twice a year or after any significant upgrade or modification
  D. At least once every two years and after any significant upgrade or modification
  A. At least once a year and after any significant upgrade or modification

• Question 923:

  When an alert rule is matched in a network-based IDS like snort, the IDS does which of the following?

  A. Drops the packet and moves on to the next one
  B. Continues to evaluate the packet until all rules are checked
  C. Stops checking rules,sends an alert,and lets the packet continue
  D. Blocks the connection with the source IP address in the packet
  B. Continues to evaluate the packet until all rules are checked

• Question 924:

  A security engineer has been asked to deploy a secure remote access solution that will allow employees to connect to the company's internal network. Which of the following can be implemented to minimize the opportunity for the man-in-the-middle attack to occur?

  A. SSL
  B. Mutual authentication
  C. IPSec
  D. Static IP addresses
  C. IPSec

• Question 925:

  You are trying to break into a highly classified top-secret mainframe computer with highest security system in place at Merclyn Barley Bank located in Los Angeles. You know that conventional hacking doesn't work in this case, because organizations such as banks are generally tight and secure when it comes to protecting their systems. In other words you are trying to penetrate an otherwise impenetrable system.

  How would you proceed?

  A. Look for "zero-day" exploits at various underground hacker websites in Russia and China and buy the necessary exploits from these hackers and target the bank's network
  B. Try to hang around the local pubs or restaurants near the bank,get talking to a poorly-paid or disgruntled employee,and offer them money if they'll abuse their access privileges by providing you with sensitive information
  C. Launch DDOS attacks against Merclyn Barley Bank's routers and firewall systems using 100,000 or more "zombies" and "bots"
  D. Try to conduct Man-in-the-Middle (MiTM) attack and divert the network traffic going to the Merclyn Barley Bank's Webserver to that of your machine using DNS Cache Poisoning techniques
  B. Try to hang around the local pubs or restaurants near the bank,get talking to a poorly-paid or disgruntled employee,and offer them money if they'll abuse their access privileges by providing you with sensitive information

• Question 926:

  In which step Steganography fits in CEH System Hacking Cycle (SHC)

  A. Step 2: Crack the password
  B. Step 1: Enumerate users
  C. Step 3: Escalate privileges
  D. Step 4: Execute applications
  E. Step 5: Hide files
  F. Step 6: Cover your tracks
  E. Step 5: Hide files

• Question 927:

  Passive reconnaissance involves collecting information through which of the following?

  A. Social engineering
  B. Network traffic sniffing
  C. Man in the middle attacks
  D. Publicly accessible sources
  D. Publicly accessible sources

• Question 928:

  Bob is a very security conscious computer user. He plans to test a site that is known to have malicious applets, code, and more. Bob always make use of a basic Web Browser to perform such testing. Which of the following web browser can adequately fill this purpose?

  A. Internet Explorer
  B. Mozila
  C. Lynx
  D. Tiger
  C. Lynx

• Question 929:

  Nation-state threat actors often discover vulnerabilitiesand hold on to them until they want to launch a sophisticated attack. The Stuxnet attack was an unprecedented style of attack because it used four types of this vulnerability.

  What is this style of attack called?

  A. zero-hour
  B. no-day
  C. zero-day
  D. zero-sum
  C. zero-day

• Question 930:

  You receive an email with the following message:

  Hello Steve,

  We are having technical difficulty in restoring user database record after the recent blackout. Your account data is corrupted. Please logon to the SuperEmailServices.com and

  change your password.

  http://[email protected]/support/logon.htm

  If you do not reset your password within 7 days, your account will be permanently disabled locking you out from our e-mail services.

  Sincerely,

  Technical Support

  SuperEmailServices

  From this e-mail you suspect that this message was sent by some hacker since you have been using their e-mail services for the last 2 years and they have never sent out an e-mail such as this. You also observe the URL in the message and

  confirm your suspicion about 0xde.0xad.0xbde.0xef which looks like hexadecimal numbers. You immediately enter the following at Windows 2000 command prompt:

  Ping 0xde.0xad.0xbe.0xef

  You get a response with a valid IP address.

  What is the obstructed IP address in the e-mail URL?

  A. 222.173.190.239
  B. 233.34.45.64
  C. 54.23.56.55
  D. 199.223.23.45
  A. 222.173.190.239