EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 381:

  Fingerprinting VPN firewalls is possible with which of the following tools?

  A. Angry IP
  B. Nikto
  C. Ike-scan
  D. Arp-scan
  C. Ike-scan

• Question 382:

  You want to capture Facebook website traffic in Wireshark. What display filter should you use that shows all TCP packets that contain the word 'facebook'?

  A. display==facebook
  B. traffic.content==facebook
  C. tcp contains facebook
  D. list.display.facebook
  C. tcp contains facebook

• Question 383:

  A file integrity program such as Tripwire protects against Trojan horse attacks by: A. Automatically deleting Trojan horse programs

  B. Rejecting packets generated by Trojan horse programs

  C. Using programming hooks to inform the kernel of Trojan horse behavior

  D. Helping you catch unexpected changes to a system utility file that might indicate it had been replaced by a Trojan horse

  Correct Answer. D
  D

• Question 384:

  Google uses a unique cookie for each browser used by an individual user on a computer. This cookie contains information that allows Google to identify records about that user on its database. This cookie is submitted every time a user launches a Google search, visits a site using AdSense etc. The information stored in Google's database, identified by the cookie, includes

  Everything you search for using Google Every web page you visit that has Google Adsense ads

  How would you prevent Google from storing your search keywords?

  A. Block Google Cookie by applying Privacy and Security settings in your web browser
  B. Disable the Google cookie using Google Advanced Search settings on Google Search page
  C. Do not use Google but use another search engine Bing which will not collect and store your search keywords
  D. Use MAC OS X instead of Windows 7. Mac OS has higher level of privacy controls by default.
  A. Block Google Cookie by applying Privacy and Security settings in your web browser

• Question 385:

  This TCP flag instructs the sending system to transmit all buffered data immediately.

  A. SYN
  B. RST
  C. PSH
  D. URG
  E. FIN
  C. PSH

• Question 386:

  A program that defends against a port scanner will attempt to:

  A. Sends back bogus data to the port scanner
  B. Log a violation and recommend use of security-auditing tools
  C. Limit access by the scanning system to publicly available ports only
  D. Update a firewall rule in real time to prevent the port scan from being completed
  D. Update a firewall rule in real time to prevent the port scan from being completed

• Question 387:

  Which types of detection methods are employed by Network Intrusion Detection Systems (NIDS)? (Choose two.)

  A. Signature
  B. Anomaly
  C. Passive
  D. Reactive
  A. Signature
  B. Anomaly

• Question 388:

  Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored? (Choose the best answer)

  A. symmetric algorithms
  B. asymmetric algorithms
  C. hashing algorithms
  D. integrity algorithms
  C. hashing algorithms

• Question 389:

  Which port, when configured on a switch receives a copy of every packet that passes through it?

  

  A. R-DUPE Port
  B. MIRROR port
  C. SPAN port
  D. PORTMON
  C. SPAN port

• Question 390:

  What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

  A. The request to the web server is not visible to the administrator of the vulnerable application.
  B. The attack is called "Blind" because, although the application properly filters user input, it is still vulnerable to code injection.
  C. The successful attack does not show an error message to the administrator of the affected application.
  D. The vulnerable application does not display errors with information about the injection results to the attacker.
  D. The vulnerable application does not display errors with information about the injection results to the attacker.