EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 101:

  What type of Virus is shown here?

  

  A. Cavity Virus
  B. Macro Virus
  C. Boot Sector Virus
  D. Metamorphic Virus
  E. Sparse Infector Virus
  E. Sparse Infector Virus

• Question 102:

  Which of the following is a component of a risk assessment?

  A. Physical security
  B. Administrative safeguards
  C. DMZ
  D. Logical interface
  B. Administrative safeguards

• Question 103:

  A corporation hired an ethical hacker to test if it is possible to obtain users' login credentials using methods other than social engineering. Access to offices and to a network node is granted. Results from server scanning indicate all are adequately patched and physical access is denied, thus, administrators have access only through Remote Desktop. Which technique could be used to obtain login credentials?

  A. Capture every users' traffic with Ettercap.
  B. Capture LANMAN Hashes and crack them with LC6.
  C. Guess passwords using Medusa or Hydra against a network service.
  D. Capture administrators RDP traffic and decode it with Cain and Abel.
  D. Capture administrators RDP traffic and decode it with Cain and Abel.

• Question 104:

  What type of encryption does WPA2 use?

  A. DES 64 bit
  B. AES-CCMP 128 bit
  C. MD5 48 bit
  D. SHA 160 bit
  B. AES-CCMP 128 bit

• Question 105:

  The Slammer Worm exploits a stack-based overflow that occurs in a DLL implementing the Resolution Service. Which of the following Database Server was targeted by the slammer worm?

  A. Oracle
  B. MSSQL
  C. MySQL
  D. Sybase
  E. DB2
  B. MSSQL

• Question 106:

  Which of the following parameters enables NMAP's operating system detection feature?

  A. NMAP -sV
  B. NMAP -oS
  C. NMAP -sR
  D. NMAP -O
  D. NMAP -O

• Question 107:

  Maintaining a secure Web server requires constant effort, resources, and vigilance from an organization. Securely administering a Web server on a daily basis is an essential aspect of Web server security. Maintaining the security of a Web server will usually involve the following steps:

  1.Configuring, protecting, and analyzing log files

  2.Backing up critical information frequently

  3.Maintaining a protected authoritative copy of the organization's Web content

  4.Establishing and following procedures for recovering from compromise

  5.Testing and applying patches in a timely manner

  6.Testing security periodically.

  In which step would you engage a forensic investigator?

  A. 1
  B. 2
  C. 3
  D. 4
  E. 5
  F. 6
  D. 4

• Question 108:

  When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

  A. Vulnerability scanning
  B. Social engineering
  C. Application security testing
  D. Network sniffing
  B. Social engineering

• Question 109:

  __________ is found in all versions of NTFS and is described as the ability to fork file data into existing files without affecting their functionality, size, or display to traditional file browsing utilities like dir or Windows Explorer

  A. Alternate Data Streams
  B. Merge Streams
  C. Steganography
  D. NetBIOS vulnerability
  A. Alternate Data Streams

• Question 110:

  Your XYZ trainee Sandra asks you which are the four existing Regional Internet Registry (RIR's)?

  A. APNIC, PICNIC, ARIN, LACNIC
  B. RIPE NCC, LACNIC, ARIN, APNIC
  C. RIPE NCC, NANIC, ARIN, APNIC
  D. RIPE NCC, ARIN, APNIC, LATNIC
  B. RIPE NCC, LACNIC, ARIN, APNIC