EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 491:

  Which type of scan measures a person's external features through a digital video camera?

  A. Iris scan
  B. Retinal scan
  C. Facial recognition scan
  D. Signature kinetics scan
  C. Facial recognition scan

• Question 492:

  Lauren is performing a network audit for her entire company. The entire network is comprised of around 500 computers. Lauren starts an ICMP ping sweep by sending one IP packet to the broadcast address of the network, but only receives responses from around five hosts. Why did this ping sweep only produce a few responses?

  A. Only Windows systems will reply to this scan.
  B. A switched network will not respond to packets sent to the broadcast address.
  C. Only Linux and Unix-like (Non-Windows) systems will reply to this scan.
  D. Only servers will reply to this scan.
  C. Only Linux and Unix-like (Non-Windows) systems will reply to this scan.

• Question 493:

  While footprinting a network, what port/service should you look for to attempt a zone transfer?

  A. 53 UDP
  B. 53 TCP
  C. 25 UDP
  D. 25 TCP
  E. 161 UDP
  F. 22 TCP
  G. 60 TCP
  B. 53 TCP

• Question 494:

  What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

  A. Blue Book
  B. ISO 26029
  C. Common Criteria
  D. The Wassenaar Agreement
  C. Common Criteria

• Question 495:

  _________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.

  A. Trojan
  B. RootKit
  C. DoS tool
  D. Scanner
  E. Backdoor
  B. RootKit

• Question 496:

  Password cracking programs reverse the hashing process to recover passwords.(True/False.

  A. True
  B. False
  B. False

• Question 497:

  _____________ is a type of symmetric-key encryption algorithm that transforms a fixed- length block of plaintext (unencrypted text) data into a block of ciphertext (encrypted text) data of the same length.

  A. Stream Cipher
  B. Block Cipher
  C. Bit Cipher
  D. Hash Cipher
  B. Block Cipher

• Question 498:

  Which of the following attacks takes best advantage of an existing authenticated connection?

  A. Spoofing
  B. Session Hijacking
  C. Password Sniffing
  D. Password Guessing
  B. Session Hijacking

• Question 499:

  Jacob is looking through a traffic log that was captured using Wireshark. Jacob has come across what appears to be SYN requests to an internal computer from a spoofed IP address. What is Jacob seeing here?

  A. Jacob is seeing a Smurf attack.
  B. Jacob is seeing a SYN flood.
  C. He is seeing a SYN/ACK attack.
  D. He has found evidence of an ACK flood.
  B. Jacob is seeing a SYN flood.

• Question 500:

  Which property ensures that a hash function will not produce the same hashed value for two different messages?

  A. Collision resistance
  B. Bit length
  C. Key strength
  D. Entropy
  A. Collision resistance