EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 351:

  What port scanning method is the most reliable but also the most detectable?

  A. Null Scanning
  B. Connect Scanning
  C. ICMP Scanning
  D. Idlescan Scanning
  E. Half Scanning
  F. Verbose Scanning
  B. Connect Scanning

• Question 352:

  What are the three phases involved in security testing?

  A. Reconnaissance, Conduct, Report
  B. Reconnaissance, Scanning, Conclusion
  C. Preparation, Conduct, Conclusion
  D. Preparation, Conduct, Billing
  C. Preparation, Conduct, Conclusion

• Question 353:

  You are doing IP spoofing while you scan your target. You find that the target has port 23 open. Anyway you are unable to connect. Why?

  A. A firewall is blocking port 23
  B. You cannot spoof + TCP
  C. You need an automated telnet tool
  D. The OS does not reply to telnet even if port 23 is open
  A. A firewall is blocking port 23

• Question 354:

  Ethereal works best on ____________.

  A. Switched networks
  B. Linux platforms
  C. Networks using hubs
  D. Windows platforms
  E. LAN's
  C. Networks using hubs

• Question 355:

  Jane wishes to forward X-Windows traffic to a remote host as well as POP3 traffic. She is worried that adversaries might be monitoring the communication link and could inspect captured traffic. She would like to tunnel the information to the remote end but does not have VPN capabilities to do so. Which of the following tools can she use to protect the link?

  A. MD5
  B. PGP
  C. RSA
  D. SSH
  D. SSH

• Question 356:

  Which of the following resources does NMAP need to be used as a basic vulnerability scanner covering several vectors like SMB, HTTP and FTP?

  A. Metasploit scripting engine
  B. Nessus scripting engine
  C. NMAP scripting engine
  D. SAINT scripting engine
  C. NMAP scripting engine

• Question 357:

  Nathan is testing some of his network devices. Nathan is using Macof to try and flood the ARP cache of these switches. If these switches' ARP cache is successfully flooded, what will be the result?

  A. The switches will drop into hub mode if the ARP cache is successfully flooded.
  B. If the ARP cache is flooded, the switches will drop into pix mode making it less susceptible to attacks.
  C. Depending on the switch manufacturer, the device will either delete every entry in its ARP cache or reroute packets to the nearest switch.
  D. The switches will route all traffic to the broadcast address created collisions.
  A. The switches will drop into hub mode if the ARP cache is successfully flooded.

• Question 358:

  An Evil Cracker is attempting to penetrate your private network security. To do this, he must not be seen by your IDS, as it may take action to stop him. What tool might he use to bypass the IDS? Select the best answer.

  A. Firewalk
  B. Manhunt
  C. Fragrouter
  D. Fragids
  C. Fragrouter

• Question 359:

  Which of the following is considered an acceptable option when managing a risk?

  A. Reject the risk.
  B. Deny the risk.
  C. Mitigate the risk.
  D. Initiate the risk.
  C. Mitigate the risk.

• Question 360:

  A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.

  Which cryptography attack is the student attempting?

  A. Man-in-the-middle attack
  B. Brute-force attack
  C. Dictionary attack
  D. Session hijacking
  C. Dictionary attack