EC-COUNCIL 312-92 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-92 Online Questions & Answers

• Question 31:

  What is the security and cryptographic framework used in Mac OS X called?

  A. AppleSecure
  B. CSAPI
  C. CDSA
  D. Secure API
  C. CDSA

• Question 32:

  Simon is going through some of Heather's code and notices an issue. What issue did Simon find in the following code?

  void f4(void * arg, size_t len)

  {

  char *buff = new char[100];

  C *ptr = new C;

  memcpy(buff, arg, len);

  ptr->vf();

  return;

  }

  A. Function pointer clobbering
  B. Null-termination
  C. Data pointer modification
  D. Virtual pointer smashing
  D. Virtual pointer smashing

• Question 33:

  What two encryption methods are used by the Secure Electronic Transaction system?

  A. RSA
  B. AES
  C. DES
  D. 3DES
  A. RSA
  C. DES

• Question 34:

  What is the new lightweight audit framework that is built into Red Hat Linux Enterprise?

  A. HelperReview
  B. Audit2
  C. SOCK review
  D. RedHat review
  B. Audit2

• Question 35:

  Darren has just been hired on as the SQL dba for Fredrickson Inc., a marketing firm in New York City. He has been asked to clearn up the SQL databases on one of the servers. What SQL stored procedure could Darren use to remove user accounts from the databases?

  A. sp_revokedbaccess
  B. sp_revokeusers
  C. sp_removeoldusers
  D. sp_denyaccess
  A. sp_revokedbaccess

• Question 36:

  Carl just purchased an expensive smart phone to use for personal and business use. Carl wants to protect his investment so he decides to register the unique GSM number of the phone in case it is ever stolen. Which number should he have registered?

  A. SIM card serial number
  B. 15-digit IMEI number
  C. Phone manufacturer's serial number
  D. Device's phone number with country and area code
  B. 15-digit IMEI number

• Question 37:

  Why would a software development firm want to fix any issues with a program at the design stage as opposed to fixing issues with a program through a patch release?

  A. Releasing a patch costs 25 times as much as fixing the issue in the design stage
  B. Releasing a patch costs 5 times as much as fixing the issue in the design stage
  C. Releasing a patch is actually the most efficient and cost effective way of solving issues
  D. Releasing a patch costs 60 times as much as fixing the issue in the design stage
  D. Releasing a patch costs 60 times as much as fixing the issue in the design stage

• Question 38:

  When a developer is creating port binding shell code, why should he/she not use the NULL characters?

  A. Creates hardware call errors
  B. Create firmware vulnerabilities with hardware
  C. Create buffer overflow
  D. Create open sockets
  C. Create buffer overflow

• Question 39:

  What type of problem or error will result from the following statement? void f2b(void * arg, size_t len)

  {

  char buffer[100];

  long val = ...;

  long *ptr = ...;

  extern void (*f)();

  memcpy(buff, arg, len);

  *ptr = val;

  f();

  return;

  }

  A. Pointer subterfuge
  B. Heap smashing
  C. Virtual pointer smashing
  D. Sign error
  A. Pointer subterfuge

• Question 40:

  What compression library is used by wiretap, the packet analyzer reader for Wireshark?

  A. wtapbil
  B. pclib
  C. winrar
  D. zllib
  D. zllib