EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 151:

  A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

  A. Reject all invalid email received via SMTP.
  B. Allow full DNS zone transfers.
  C. Remove A records for internal hosts.
  D. Enable null session pipes.
  C. Remove A records for internal hosts.

• Question 152:

  Which are true statements concerning the BugBear and Pretty Park worms? Select the best answers.

  A. Both programs use email to do their work.
  B. Pretty Park propagates via network shares and email
  C. BugBear propagates via network shares and email
  D. Pretty Park tries to connect to an IRC server to send your personal passwords.
  E. Pretty Park can terminate anti-virus applications that might be running to bypass them.
  A. Both programs use email to do their work.
  C. BugBear propagates via network shares and email
  D. Pretty Park tries to connect to an IRC server to send your personal passwords.

• Question 153:

  Which of the following programs is usually targeted at Microsoft Office products?

  A. Polymorphic virus
  B. Multipart virus
  C. Macro virus
  D. Stealth virus
  C. Macro virus

• Question 154:

  An nmap command that includes the host specification of 202.176.56-57.* will scan _______ number of hosts.

  A. 2
  B. 256
  C. 512
  D. Over 10, 000
  C. 512

• Question 155:

  TCP SYN Flood attack uses the three-way handshake mechanism.

  1.An attacker at system A sends a SYN packet to victim at system

  B.

  2.System B sends a SYN/ACK packet to victim A.

  3.As a normal three-way handshake mechanism system A should send an ACK packet to system B, however, system A does not send an ACK packet to system

  B. In this case client B is waiting for an ACK packet from client A. This status of client B is called _________________

  A. "half-closed"
  B. "half open"
  C. "full-open"
  D. "xmas-open"
  B. "half open"

• Question 156:

  Which of the following levels of algorithms does Public Key Infrastructure (PKI) use?

  A. RSA 1024 bit strength
  B. AES 1024 bit strength
  C. RSA 512 bit strength
  D. AES 512 bit strength
  A. RSA 1024 bit strength

• Question 157:

  If you perform a port scan with a TCP ACK packet, what should an OPEN port return?

  A. RST
  B. No Reply
  C. SYN/ACK
  D. FIN
  A. RST

• Question 158:

  A hacker is attempting to see which ports have been left open on a network. Which NMAP switch would the hacker use?

  A. -sO
  B. -sP
  C. -sS
  D. -sU
  A. -sO

• Question 159:

  To send a PGP encrypted message, which piece of information from the recipient must the sender have before encrypting the message?

  A. Recipient's private key
  B. Recipient's public key
  C. Master encryption key
  D. Sender's public key
  B. Recipient's public key

• Question 160:

  Which of the following LM hashes represents a password of less than 8 characters?

  A. 0182BD0BD4444BF836077A718CCDF409
  B. 44EFCE164AB921CQAAD3B435B51404EE
  C. BA810DBA98995F1817306D272A9441BB
  D. CEC52EB9C8E3455DC2265B23734E0DAC
  E. B757BF5C0D87772FAAD3B435B51404EE
  F. E52CAC67419A9A224A3B108F3FA6CB6D
  C. BA810DBA98995F1817306D272A9441BB
  E. B757BF5C0D87772FAAD3B435B51404EE