EC-COUNCIL 312-50V9 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V9 Online Questions & Answers

• Question 1:

  A new wireless client is configured to join a 802.11 network. Thisclient uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client.

  What is a possible source of this problem?

  A. The client cannot see the SSID of the wireless network
  B. The wireless client is not configured to use DHCP
  C. The WAP does not recognize the client's MAC address
  D. Client isconfigured for the wrong channel
  C. The WAP does not recognize the client's MAC address

• Question 2:

  You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it. What tool will help you with the task?

  A. Armitage
  B. Dimitry
  C. cdpsnarf
  D. Metagoofil
  D. Metagoofil

• Question 3:

  It is a vulnerability in GNU's bash shell, discovered in September of 2004, that gives attackers access to run remote commands on a vulnerable system. The malicious software can take control of an infected machine, launch denial-of service attacks to disrupt websites, and scan for other vulnerable devices (including routers).

  Which of the following vulnerabilities is being described?

  A. Shellshock
  B. Rootshock
  C. Shellbash
  D. Rootshell
  A. Shellshock

• Question 4:

  Which of the following describes the characteristics of a Boot Sector Virus?

  A. Overwrites the original MBR and only executes the new virus code
  B. Modifies directory table entries so that directory entries point to the virus code instead of the actual program
  C. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR
  D. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR
  C. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

• Question 5:

  You have compromised a server on a network and successfully open a shell. You aimed to identify all operating systems running on the network. However, as you attemptto fingerprint all machines in the machines in the network using the

  nmap syntax below, it is not going through.

  invictus@victim_server:~$nmap –T4 –O 10.10.0.0/24

  TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxxx.

  QUITTING!

  What seems to be wrong?

  A. The outgoing TCP/IP fingerprinting is blocked by the host firewall.
  B. This is a common behavior for a corrupted nmap application.
  C. OS Scan requires root privileged.
  D. The nmap syntax is wrong.
  D. The nmap syntax is wrong.

• Question 6:

  What isa "Collision attach" in cryptography?

  A. Collision attacks try to break the hash into two parts, with the same bytes in each part to get the private key.
  B. Collision attacks try to break the hash into three parts to get the plaintext value.
  C. Collision attacks try to find two inputs producing the same hash.
  D. Collision attacks try to get the public key
  C. Collision attacks try to find two inputs producing the same hash.

• Question 7:

  An attacker gains access to a Web server's database and display the contents of the table that holds all of the names, passwords, and other user information. The attacker did this by entering information into the Web site's user login page that the software's designers did not expect to be entered. This is an example of what kind of software design problem?

  A. Insufficient security management
  B. Insufficient database hardening
  C. Insufficient exception handling
  D. Insufficient input validation
  D. Insufficient input validation

• Question 8:

  To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used randomly generate invalid input in an attempt to crash the program. What term is commonly used when referring to this type of testing?

  A. Bounding
  B. Mutating
  C. Puzzing
  D. Randomizing
  C. Puzzing

• Question 9:

  Which method of password cracking takes the most time and effect?

  A. Rainbow Tables
  B. Shoulder surfing
  C. Bruce force
  D. Directory attack
  C. Bruce force

• Question 10:

  Using Windows CMD, how would an attacker list all the shares to which the current user context hasaccess?

  A. NET CONFIG
  B. NET USE
  C. NET FILE
  D. NET VIEW
  D. NET VIEW