EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 941:

  June, a security analyst, understands that a polymorphic virus has the ability to mutate and can change its known viral signature and hide from signature-based antivirus programs. Can June use an antivirus program in this case and would it be effective against a polymorphic virus?

  A. Yes. June can use an antivirus program since it compares the parity bit of executable files to the database of known check sum counts and it is effective on a polymorphic virus
  B. Yes. June can use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and it is very effective against a polymorphic virus
  C. No. June can't use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and in the case the polymorphic viruses cannot be detected by a signature-based anti-virus program
  D. No. June can't use an antivirus program since it compares the size of executable files to the database of known viral signatures and it is effective on a polymorphic virus
  C. No. June can't use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and in the case the polymorphic viruses cannot be detected by a signature-based anti-virus program

• Question 942:

  ViruXine.W32 virus hides their presence by changing the underlying executable code. This Virus code mutates while keeping the original algorithm intact, the code changes itself each time it runs, but the function of the code (its semantics) will not change at all.

  

  Here is a section of the Virus code:

  

  What is this technique called?

  A. Polymorphic Virus
  B. Metamorphic Virus
  C. Dravidic Virus
  D. Stealth Virus
  A. Polymorphic Virus

• Question 943:

  Who is an Ethical Hacker?

  A. A person who hacks for ethical reasons
  B. A person who hacks for an ethical cause
  C. A person who hacks for defensive purposes
  D. A person who hacks for offensive purposes
  C. A person who hacks for defensive purposes

• Question 944:

  During a wireless penetration test, a tester detects an access point using WPA2 encryption. Which of the following attacks should be used to obtain the key?

  A. The tester must capture the WPA2 authentication handshake and then crack it.
  B. The tester must use the tool inSSIDer to crack it using the ESSID of the network.
  C. The tester cannot crack WPA2 because it is in full compliance with the IEEE 802.11i standard.
  D. The tester must change the MAC address of the wireless network card and then use the AirTraf tool to obtain the key.
  A. The tester must capture the WPA2 authentication handshake and then crack it.

• Question 945:

  How many bits encryption does SHA-1 use?

  A. 64 bits
  B. 128 bits
  C. 256 bits
  D. 160 bits
  D. 160 bits

• Question 946:

  Your company performs penetration tests and security assessments for small and medium- sized business in the local area. During a routine security assessment, you discover information that suggests your client is involved with human trafficking.

  What should you do?

  A. Copy the data to removable media and keep it in case you need it.
  B. Ignore the data and continue the assessment until completed as agreed.
  C. Confront theclient on a respectful manner and ask her about the data.
  D. Immediately stop work and contact the proper legal authorities.
  D. Immediately stop work and contact the proper legal authorities.

• Question 947:

  Why would an attacker want to perform a scan on port 137?

  A. To discover proxy servers on a network
  B. To disrupt the NetBIOS SMB service on the target host
  C. To check for file and print sharing on Windows systems
  D. To discover information about a target host using NBTSTAT
  D. To discover information about a target host using NBTSTAT

• Question 948:

  While probing an organization you discover that they have a wireless network. From your attempts to connect to the WLAN you determine that they have deployed MAC filtering by using ACL on the access points. What would be the easiest way to circumvent and communicate on the WLAN?

  A. Attempt to crack the WEP key using Airsnort.
  B. Attempt to brute force the access point and update or delete the MAC ACL.
  C. Steel a client computer and use it to access the wireless network.
  D. Sniff traffic if the WLAN and spoof your MAC address to one that you captured.
  D. Sniff traffic if the WLAN and spoof your MAC address to one that you captured.

• Question 949:

  One of your junior administrator is concerned with Windows LM hashes and password cracking. In your discussion with them, which of the following are true statements that you would point out? Select the best answers.

  A. John the Ripper can be used to crack a variety of passwords,but one limitation is that the output doesn't show if the password is upper or lower case.
  B. BY using NTLMV1,you have implemented an effective countermeasure to password cracking.
  C. SYSKEY is an effective countermeasure.
  D. If a Windows LM password is 7 characters or less,the hash will be passed with the following characters,in HEX- 00112233445566778899.
  E. Enforcing Windows complex passwords is an effective countermeasure.
  A. John the Ripper can be used to crack a variety of passwords,but one limitation is that the output doesn't show if the password is upper or lower case.
  C. SYSKEY is an effective countermeasure.
  E. Enforcing Windows complex passwords is an effective countermeasure.

• Question 950:

  What is SYSKEY # of bits used for encryption?

  A. 40
  B. 64
  C. 128
  D. 256
  C. 128