EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 451:

  Your company has blocked all the ports via external firewall and only allows port 80/443 to connect to the Internet. You want to use FTP to connect to some remote server on the Internet. How would you accomplish this?

  A. Use HTTP Tunneling
  B. Use Proxy Chaining
  C. Use TOR Network
  D. Use Reverse Chaining
  A. Use HTTP Tunneling

• Question 452:

  What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

  A. Passive
  B. Reflective
  C. Active
  D. Distributive
  C. Active

• Question 453:

  A particular database threat utilizes a SQL injection technique to penetrate a target system. How would an attacker use this technique to compromise a database?

  A. An attacker uses poorly designed input validation routines to create or alter SQL commands to gain access to unintended data or execute commands of the database
  B. An attacker submits user input that executes an operating system command to compromise a target system
  C. An attacker gains control of system to flood the target system with requests, preventing legitimate users from gaining access
  D. An attacker utilizes an incorrect configuration that leads to access with higher-than- expected privilege of the database
  A. An attacker uses poorly designed input validation routines to create or alter SQL commands to gain access to unintended data or execute commands of the database

• Question 454:

  How would you prevent session hijacking attacks?

  A. Using biometrics access tokens secures sessions against hijacking
  B. Using non-Internet protocols like http secures sessions against hijacking
  C. Using hardware-based authentication secures sessions against hijacking
  D. Using unpredictable sequence numbers secures sessions against hijacking
  D. Using unpredictable sequence numbers secures sessions against hijacking

• Question 455:

  Neil notices that a single address is generating traffic from its port 500 to port 500 of several other machines on the network. This scan is eating up most of the network bandwidth and Neil is concerned. As a security professional, what would you infer from this scan?

  A. It is a network fault and the originating machine is in a network loop
  B. It is a worm that is malfunctioning or hardcoded to scan on port 500
  C. The attacker is trying to detect machines on the network which have SSL enabled
  D. The attacker is trying to determine the type of VPN implementation and checking for IPSec
  D. The attacker is trying to determine the type of VPN implementation and checking for IPSec

• Question 456:

  ARP poisoning is achieved in _____ steps

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 457:

  Sally is a network admin for a small company. She was asked to install wireless accesspoints in the building. In looking at the specifications for the access-points, she sees that all of them offer WEP. Which of these are true about WEP? Select the best answer.

  A. Stands for Wireless Encryption Protocol
  B. It makes a WLAN as secure as a LAN
  C. Stands for Wired Equivalent Privacy
  D. It offers end to end security
  C. Stands for Wired Equivalent Privacy

• Question 458:

  One of your team members has asked you to analyze the following SOA record. What is the version?

  Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600

  3600 604800 2400.

  A. 200303028
  B. 3600
  C. 604800
  D. 2400
  E. 60
  F. 4800
  A. 200303028

• Question 459:

  An attacker has captured a target file that is encrypted with public key cryptography. Which of the attacks below is likely to be used to crack the target file?

  A. Timing attack
  B. Replay attack
  C. Memory trade-off attack
  D. Chosen plain-text attack
  D. Chosen plain-text attack

• Question 460:

  If a competitor wants to cause damage to your organization, steal critical secrets, or put you out of business, they just have to find a job opening, prepare someone to pass the interview, have that person hired, and they will be in the organization.

  

  How would you prevent such type of attacks?

  A. It is impossible to block these attacks
  B. Hire the people through third-party job agencies who will vet them for you
  C. Conduct thorough background checks before you engage them
  D. Investigate their social networking profiles
  C. Conduct thorough background checks before you engage them