EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 421:

  What port number is used by Kerberos protocol?

  A. 88
  B. 44
  C. 487
  D. 419
  A. 88

• Question 422:

  Bob is going to perform an active session hijack against Brownies Inc. He has found a target that allows session oriented connections (Telnet) and performs the sequence prediction on the target operating system. He manages to find an active session due to the high level of traffic on the network. What is Bob supposed to do next?

  A. Take over the session
  B. Reverse sequence prediction
  C. Guess the sequence numbers
  D. Take one of the parties offline
  C. Guess the sequence numbers

• Question 423:

  When working with Windows systems, what is the RID of the true administrator account?

  A. 500
  B. 501
  C. 512
  D. 1001
  E. 1024
  F. 1000
  A. 500

• Question 424:

  What is the correct order of steps in CEH System Hacking Cycle?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 425:

  Use the traceroute results shown above to answer the following question:

  

  The perimeter security at targetcorp.com does not permit ICMP TTL-expired packets out.

  A. True
  B. False
  A. True

• Question 426:

  Kevin sends an email invite to Chris to visit a forum for security professionals. Chris clicks on the link in the email message and is taken to a web based bulletin board. Unknown to Chris, certain functions are executed on his local system under his privileges, which allow Kevin access to information used on the BBS. However, no executables are downloaded and run on the local system. What would you term this attack?

  A. Phishing
  B. Denial of Service
  C. Cross Site Scripting
  D. Backdoor installation
  C. Cross Site Scripting

• Question 427:

  Which type of sniffing technique is generally referred as MiTM attack?

  

  A. Password Sniffing
  B. ARP Poisoning
  C. Mac Flooding
  D. DHCP Sniffing
  B. ARP Poisoning

• Question 428:

  A company has made the decision to host their own email and basic web services. The administrator needs to set up the external firewall to limit what protocols should be allowed to get to the public part of the company's network. Which ports should the administrator open? (Choose three.)

  A. Port 22
  B. Port 23
  C. Port 25
  D. Port 53
  E. Port 80
  F. Port 139
  G. Port 445
  C. Port 25
  D. Port 53
  E. Port 80

• Question 429:

  A specific site received 91 ICMP_ECHO packets within 90 minutes from 47 different sites. 77 of the ICMP_ECHO packets had an ICMP ID:39612 and Seq:57072. 13 of the ICMP_ECHO packets had an ICMP ID:0 and Seq:0. What can you infer from this information?

  A. The packets were sent by a worm spoofing the IP addresses of 47 infected sites
  B. ICMP ID and Seq numbers were most likely set by a tool and not by the operating system
  C. All 77 packets came from the same LAN segment and hence had the same ICMP ID and Seq number
  D. 13 packets were from an external network and probably behind a NAT, as they had an ICMP ID 0 and Seq 0
  B. ICMP ID and Seq numbers were most likely set by a tool and not by the operating system

• Question 430:

  What sequence of packets is sent during the initial TCP three-way handshake?

  A. SYN, SYN-ACK, ACK
  B. SYN, URG, ACK
  C. SYN, ACK, SYN-ACK
  D. FIN, FIN-ACK, ACK
  A. SYN, SYN-ACK, ACK