EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 341:

  If the final set of security controls does not eliminate all risk in a system, what could be done next?

  A. Continue to apply controls until there is zero risk.
  B. Ignore any remaining risk.
  C. If the residual risk is low enough, it can be accepted.
  D. Remove current controls since they are not completely effective.
  C. If the residual risk is low enough, it can be accepted.

• Question 342:

  Which of the following items is unique to the N-tier architecture method of designing software applications?

  A. Application layers can be separated, allowing each layer to be upgraded independently from other layers.
  B. It is compatible with various databases including Access, Oracle, and SQL.
  C. Data security is tied into each layer and must be updated for all layers when any upgrade is performed.
  D. Application layers can be written in C, ASP.NET, or Delphi without any performance loss.
  A. Application layers can be separated, allowing each layer to be upgraded independently from other layers.

• Question 343:

  WPA2 uses AES for wireless data encryption at which of the following encryption levels?

  A. 64 bit and CCMP
  B. 128 bit and CRC
  C. 128 bit and CCMP
  D. 128 bit and TKIP
  C. 128 bit and CCMP

• Question 344:

  Which one of the following instigates a SYN flood attack?

  A. Generating excessive broadcast packets.
  B. Creating a high number of half-open connections.
  C. Inserting repetitive Internet Relay Chat (IRC) messages.
  D. A large number of Internet Control Message Protocol (ICMP) traces.
  B. Creating a high number of half-open connections.

• Question 345:

  Which of the following are password cracking tools? (Choose three.)

  A. BTCrack
  B. John the Ripper
  C. KerbCrack
  D. Nikto
  E. Cain and Abel
  F. Havij
  B. John the Ripper
  C. KerbCrack
  E. Cain and Abel

• Question 346:

  Jayden is a network administrator for her company. Jayden wants to prevent MAC spoofing on all the Cisco switches in the network. How can she accomplish this?

  A. Jayden can use the commanD. ip binding set.
  B. Jayden can use the commanD. no ip spoofing.
  C. She should use the commanD. no dhcp spoofing.
  D. She can use the commanD. ip dhcp snooping binding.
  D. She can use the commanD. ip dhcp snooping binding.

• Question 347:

  A company is legally liable for the content of email that is sent from its systems, regardless of whether the message was sent for private or business-related purposes. This could lead to prosecution for the sender and for the company's directors if, for example, outgoing email was found to contain material that was pornographic, racist, or likely to incite someone to commit an act of terrorism. You can always defend yourself by "ignorance of the law" clause.

  A. true
  B. false
  B. false

• Question 348:

  Steven the hacker realizes that the network administrator of XYZ is using syskey to protect organization resources in the Windows 2000 Server. Syskey independently encrypts the hashes so that physical access to the server, tapes, or ERDs is only first step to cracking the passwords. Steven must break through the encryption used by syskey before he can attempt to brute force dictionary attacks on the hashes. Steven runs a program called "SysCracker" targeting the Windows 2000 Server machine in attempting to crack the hash used by Syskey. He needs to configure the encryption level before he can launch attach.

  How many bits does Syskey use for encryption?

  A. 40 bit
  B. 64 bit
  C. 256 bit
  D. 128 bit
  D. 128 bit

• Question 349:

  Tess King, the evil hacker, is purposely sending fragmented ICMP packets to a remote target. The total size of this ICMP packet once reconstructed is over 65, 536 bytes. From the information given, what type of attack is Tess King attempting to perform?

  A. Syn flood
  B. Smurf
  C. Ping of death
  D. Fraggle
  C. Ping of death

• Question 350:

  To reduce the attack surface of a system, administrators should perform which of the following processes to remove unnecessary software, services, and insecure configuration settings?

  A. Harvesting
  B. Windowing
  C. Hardening
  D. Stealthing
  C. Hardening