EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 371:

  What is a successful method for protecting a router from potential smurf attacks?

  A. Placing the router in broadcast mode
  B. Enabling port forwarding on the router
  C. Installing the router outside of the network's firewall
  D. Disabling the router from accepting broadcast ping messages
  D. Disabling the router from accepting broadcast ping messages

• Question 372:

  Which of the following tools are used for enumeration? (Choose three.)

  A. SolarWinds
  B. USER2SID
  C. Cheops
  D. SID2USER
  E. DumpSec
  B. USER2SID
  D. SID2USER
  E. DumpSec

• Question 373:

  From the two screenshots below, which of the following is occurring?

  A. 10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.
  B. 10.0.0.253 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.
  C. 10.0.0.2 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.
  D. 10.0.0.252 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.
  A. 10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.

• Question 374:

  You work for Acme Corporation as Sales Manager. The company has tight network security restrictions. You are trying to steal data from the company's Sales database (Sales.xls) and transfer them to your home computer. Your company filters and monitors traffic that leaves from the internal network to the Internet. How will you achieve this without raising suspicion?

  A. Encrypt the Sales.xls using PGP and e-mail it to your personal gmail account
  B. Package the Sales.xls using Trojan wrappers and telnet them back your home computer
  C. You can conceal the Sales.xls database in another file like photo.jpg or other files and send it out in an innocent looking email or file transfer using Steganography techniques
  D. Change the extension of Sales.xls to sales.txt and upload them as attachment to your hotmail account
  C. You can conceal the Sales.xls database in another file like photo.jpg or other files and send it out in an innocent looking email or file transfer using Steganography techniques

• Question 375:

  Tess King is making use of Digest Authentication for her Web site. Why is this considered to be more secure than Basic authentication?

  A. Basic authentication is broken
  B. The password is never sent in clear text over the network
  C. The password sent in clear text over the network is never reused.
  D. It is based on Kerberos authentication protocol
  B. The password is never sent in clear text over the network

• Question 376:

  What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?

  A. Due to the key size, the time it will take to encrypt and decrypt the message hinders efficient communication.
  B. To get messaging programs to function with this algorithm requires complex configurations.
  C. It has been proven to be a weak cipher; therefore, should not be trusted to protect sensitive data.
  D. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.
  D. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.

• Question 377:

  In the context of Trojans, what is the definition of a Wrapper?

  A. An encryption tool to protect the Trojan
  B. A tool used to bind the Trojan with a legitimate file
  C. A tool used to calculate bandwidth and CPU cycles wasted by the Trojan
  D. A tool used to encapsulate packets within a new header and footer
  B. A tool used to bind the Trojan with a legitimate file

• Question 378:

  Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the command prompt, she types the

  following command.

  For /f "tokens=1 %%a in (hackfile.txt) do net use * \\10.1.2.3\c$ /user:"Administrator" %%a

  What is Eve trying to do?

  A. Eve is trying to connect as an user with Administrator privileges
  B. Eve is trying to enumerate all users with Administrative privileges
  C. Eve is trying to carry out a password crack for user Administrator
  D. Eve is trying to escalate privilege of the null user to that of Administrator
  C. Eve is trying to carry out a password crack for user Administrator

• Question 379:

  Which Windows system tool checks integrity of critical files that has been digitally signed by Microsoft?

  A. signverif.exe
  B. sigverif.exe
  C. msverif.exe
  D. verifier.exe
  B. sigverif.exe

• Question 380:

  Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

  A. Certificate issuance
  B. Certificate validation
  C. Certificate cryptography
  D. Certificate revocation
  B. Certificate validation