EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 331:

  Study the snort rule given below:

  

  From the options below, choose the exploit against which this rule applies.

  A. WebDav
  B. SQL Slammer
  C. MS Blaster
  D. MyDoom
  C. MS Blaster

• Question 332:

  What type of Trojan is this?

  

  A. RAT Trojan
  B. E-Mail Trojan
  C. Defacement Trojan
  D. Destructing Trojan
  E. Denial of Service Trojan
  C. Defacement Trojan

• Question 333:

  Which of the following LM hashes represent a password of less than 8 characters? (Select 2)

  A. BA810DBA98995F1817306D272A9441BB
  B. 44EFCE164AB921CQAAD3B435B51404EE
  C. 0182BD0BD4444BF836077A718CCDF409
  D. CEC52EB9C8E3455DC2265B23734E0DAC
  E. B757BF5C0D87772FAAD3B435B51404EE
  F. E52CAC67419A9A224A3B108F3FA6CB6D
  B. 44EFCE164AB921CQAAD3B435B51404EE
  E. B757BF5C0D87772FAAD3B435B51404EE

• Question 334:

  Under what conditions does a secondary name server request a zone transfer from a primary name server?

  A. When a primary SOA is higher that a secondary SOA
  B. When a secondary SOA is higher that a primary SOA
  C. When a primary name server has had its service restarted
  D. When a secondary name server has had its service restarted
  E. When the TTL falls to zero
  A. When a primary SOA is higher that a secondary SOA

• Question 335:

  A buffer overflow occurs when a program or process tries to store more data in a buffer (temporary data storage area) then it was intended to hold. What is the most common cause of buffer overflow in software today?

  A. Bad permissions on files.
  B. High bandwidth and large number of users.
  C. Usage of non standard programming languages.
  D. Bad quality assurance on software produced.
  D. Bad quality assurance on software produced.

• Question 336:

  A hacker searches in Google for filetype:pcf to find Cisco VPN config files. Those files may contain connectivity passwords that can be decoded with which of the following?

  A. Cupp
  B. Nessus
  C. Cain and Abel
  D. John The Ripper Pro
  C. Cain and Abel

• Question 337:

  Which of the following problems can be solved by using Wireshark?

  A. Tracking version changes of source code
  B. Checking creation dates on all webpages on a server
  C. Resetting the administrator password on multiple systems
  D. Troubleshooting communication resets between two systems
  D. Troubleshooting communication resets between two systems

• Question 338:

  A developer for a company is tasked with creating a program that will allow customers to update their billing and shipping information. The billing address field used is limited to 50 characters. What pseudo code would the developer use to avoid a buffer overflow attack on the billing address field?

  A. if (billingAddress = 50) {update field} else exit
  B. if (billingAddress != 50) {update field} else exit
  C. if (billingAddress >= 50) {update field} else exit
  D. if (billingAddress
  D. if (billingAddress

• Question 339:

  A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

  A. Issue the pivot exploit and set the meterpreter.
  B. Reconfigure the network settings in the meterpreter.
  C. Set the payload to propagate through the meterpreter.
  D. Create a route statement in the meterpreter.
  D. Create a route statement in the meterpreter.

• Question 340:

  Data hiding analysis can be useful in

  A. determining the level of encryption used to encrypt the data.
  B. detecting and recovering data that may indicate knowledge, ownership or intent.
  C. identifying the amount of central processing unit (cpu) usage over time to process the data.
  D. preventing a denial of service attack on a set of enterprise servers to prevent users from accessing the data.
  B. detecting and recovering data that may indicate knowledge, ownership or intent.