EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 391:

  The follows is an email header. What address is that of the true originator of the message?

  

  A. 19.25.19.10
  B. 51.32.123.21
  C. 168.150.84.123
  D. 215.52.220.122
  E. 8.10.2/8.10.2
  C. 168.150.84.123

• Question 392:

  How do you defend against ARP Spoofing? Select three.

  A. Use ARPWALL system and block ARP spoofing attacks
  B. Tune IDS Sensors to look for large amount of ARP traffic on local subnets
  C. Use private VLANS
  D. Place static ARP entries on servers, workstation and routers
  A. Use ARPWALL system and block ARP spoofing attacks
  C. Use private VLANS
  D. Place static ARP entries on servers, workstation and routers

• Question 393:

  How do you defend against MAC attacks on a switch?

  

  A. Disable SPAN port on the switch
  B. Enable SNMP Trap on the switch
  C. Configure IP security on the switch
  D. Enable Port Security on the switch
  D. Enable Port Security on the switch

• Question 394:

  User which Federal Statutes does FBI investigate for computer crimes involving e-mail scams and mail fraud?

  A. 18 U.S.C 1029 Possession of Access Devices
  B. 18 U.S.C 1030 Fraud and related activity in connection with computers
  C. 18 U.S.C 1343 Fraud by wire, radio or television
  D. 18 U.S.C 1361 Injury to Government Property
  E. 18 U.S.C 1362 Government communication systems
  F. 18 U.S.C 1831 Economic Espionage Act
  G. 18 U.S.C 1832 Trade Secrets Act
  B. 18 U.S.C 1030 Fraud and related activity in connection with computers

• Question 395:

  What is the purpose of conducting security assessments on network resources?

  A. Documentation
  B. Validation
  C. Implementation
  D. Management
  B. Validation

• Question 396:

  A security policy will be more accepted by employees if it is consistent and has the support of

  A. coworkers.
  B. executive management.
  C. the security officer.
  D. a supervisor.
  B. executive management.

• Question 397:

  Matthew re-injects a captured wireless packet back onto the network. He does this hundreds of times within a second. The packet is correctly encrypted and Matthew assumes it is an ARP request packet. The wireless host responds with a stream of responses, all individually encrypted with different IVs. What is this attack most appropriately called?

  A. Spoof attack
  B. Replay attack
  C. Injection attack
  D. Rebound attack
  B. Replay attack

• Question 398:

  What results will the following command yielD. 'NMAP -sS -O -p 123-153 192.168.100.3'?

  A. A stealth scan, opening port 123 and 153
  B. A stealth scan, checking open ports 123 to 153
  C. A stealth scan, checking all open ports excluding ports 123 to 153
  D. A stealth scan, determine operating system, and scanning ports 123 to 153
  D. A stealth scan, determine operating system, and scanning ports 123 to 153

• Question 399:

  What is Form Scalpel used for?

  A. Dissecting HTML Forms
  B. Dissecting SQL Forms
  C. Analysis of Access Database Forms
  D. Troubleshooting Netscape Navigator
  E. Quatro Pro Analysis Tool
  A. Dissecting HTML Forms

• Question 400:

  You want to know whether a packet filter is in front of 192.168.1.10. Pings to 192.168.1.10 don't get answered. A basic nmap scan of 192.168.1.10 seems to hang without returning any information. What should you do next?

  A. Run NULL TCP hping2 against 192.168.1.10
  B. Run nmap XMAS scan against 192.168.1.10
  C. The firewall is blocking all the scans to 192.168.1.10
  D. Use NetScan Tools Pro to conduct the scan
  A. Run NULL TCP hping2 against 192.168.1.10