EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 321:

  Why do you need to capture five to ten million packets in order to crack WEP with AirSnort?

  A. All IVs are vulnerable to attack
  B. Air Snort uses a cache of packets
  C. Air Snort implements the FMS attack and only encrypted packets are counted
  D. A majority of weak IVs transmitted by access points and wireless cards are not filtered by contemporary wireless manufacturers
  C. Air Snort implements the FMS attack and only encrypted packets are counted

• Question 322:

  Smart cards use which protocol to transfer the certificate in a secure manner?

  A. Extensible Authentication Protocol (EAP)
  B. Point to Point Protocol (PPP)
  C. Point to Point Tunneling Protocol (PPTP)
  D. Layer 2 Tunneling Protocol (L2TP)
  A. Extensible Authentication Protocol (EAP)

• Question 323:

  What does ICMP (type 11, code 0) denote?

  A. Source Quench
  B. Destination Unreachable
  C. Time Exceeded
  D. Unknown Type
  C. Time Exceeded

• Question 324:

  A remote user tries to login to a secure network using Telnet, but accidently types in an invalid user name or password. Which responses would NOT be preferred by an experienced Security Manager? (multiple answer)

  A. Invalid Username
  B. Invalid Password
  C. Authentication Failure
  D. Login Attempt Failed
  E. Access Denied
  A. Invalid Username
  B. Invalid Password

• Question 325:

  What type of port scan is shown below?

  

  A. Idle Scan
  B. FIN Scan
  C. XMAS Scan
  D. Windows Scan
  B. FIN Scan

• Question 326:

  One of the ways to map a targeted network for live hosts is by sending an ICMP ECHO request to the broadcast or the network address. The request would be broadcasted to all hosts on the targeted network. The live hosts will send an

  ICMP ECHO Reply to the attacker's source IP address.

  You send a ping request to the broadcast address 192.168.5.255.

  

  There are 40 computers up and running on the target network. Only 13 hosts send a reply while others do not. Why?

  A. Windows machines will not generate an answer (ICMP ECHO Reply) to an ICMP ECHO request aimed at the broadcast address or at the network address.
  B. Linux machines will not generate an answer (ICMP ECHO Reply) to an ICMP ECHO request aimed at the broadcast address or at the network address.
  C. You should send a ping request with this command ping ? 192.168.5.0-255
  D. You cannot ping a broadcast address. The above scenario is wrong.
  A. Windows machines will not generate an answer (ICMP ECHO Reply) to an ICMP ECHO request aimed at the broadcast address or at the network address.

• Question 327:

  Which tool can be used to silently copy files from USB devices?

  A. USB Grabber
  B. USB Dumper
  C. USB Sniffer
  D. USB Snoopy
  B. USB Dumper

• Question 328:

  Sniffing is considered an active attack.

  A. True
  B. False
  B. False

• Question 329:

  Which of the following scanning tools is specifically designed to find potential exploits in Microsoft Windows products?

  A. Microsoft Security Baseline Analyzer
  B. Retina
  C. Core Impact
  D. Microsoft Baseline Security Analyzer
  D. Microsoft Baseline Security Analyzer

• Question 330:

  What does FIN in TCP flag define?

  A. Used to abort a TCP connection abruptly
  B. Used to close a TCP connection
  C. Used to acknowledge receipt of a previous packet or transmission
  D. Used to indicate the beginning of a TCP connection
  B. Used to close a TCP connection