EC-COUNCIL EC0-350 Online Practice Questions and Exam Preparation

EC-COUNCIL EC0-350 Online Questions & Answers

• Question 561:

  What is the key advantage of Session Hijacking?

  A. It can be easily done and does not require sophisticated skills.
  B. You can take advantage of an authenticated connection.
  C. You can successfully predict the sequence number generation.
  D. You cannot be traced in case the hijack is detected.
  B. You can take advantage of an authenticated connection.

• Question 562:

  For messages sent through an insecure channel, a properly implemented digital signature gives the receiver reason to believe the message was sent by the claimed sender. While using a digital signature, the message digest is encrypted with which key?

  A. Sender's public key
  B. Receiver's private key
  C. Receiver's public key
  D. Sender's private key
  D. Sender's private key

• Question 563:

  Which of the following activities will NOT be considered as passive footprinting?

  A. Go through the rubbish to find out any information that might have been discarded.
  B. Search on financial site such as Yahoo Financial to identify assets.
  C. Scan the range of IP address found in the target DNS database.
  D. Perform multiples queries using a search engine.
  C. Scan the range of IP address found in the target DNS database.

• Question 564:

  Some passwords are stored using specialized encryption algorithms known as hashes. Why is this an appropriate method?

  A. It is impossible to crack hashed user passwords unless the key used to encrypt them is obtained.
  B. If a user forgets the password, it can be easily retrieved using the hash key stored by administrators.
  C. Hashing is faster compared to more traditional encryption algorithms.
  D. Passwords stored using hashes are non-reversible, making finding the password much more difficult.
  D. Passwords stored using hashes are non-reversible, making finding the password much more difficult.

• Question 565:

  A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area. Which type of attack did the consultant perform?

  A. Man trap
  B. Tailgating
  C. Shoulder surfing
  D. Social engineering
  B. Tailgating

• Question 566:

  Which of the following open source tools would be the best choice to scan a network for potential targets?

  A. NMAP
  B. NIKTO
  C. CAIN
  D. John the Ripper
  A. NMAP

• Question 567:

  While reviewing the result of scanning run against a target network you come across the following:

  

  Which among the following can be used to get this output?

  A. A Bo2k system query.
  B. nmap protocol scan
  C. A sniffer
  D. An SNMP walk
  D. An SNMP walk

• Question 568:

  A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

  A. Ignore the problem completely and let someone else deal with it.
  B. Create a document that will crash the computer when opened and send it to friends.
  C. Find an underground bulletin board and attempt to sell the bug to the highest bidder.
  D. Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.
  D. Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.

• Question 569:

  In which step Steganography fits in CEH System Hacking Cycle (SHC)

  A. Step 2: Crack the password
  B. Step 1: Enumerate users
  C. Step 3: Escalate privileges
  D. Step 4: Execute applications
  E. Step 5: Hide files
  F. Step 6: Cover your tracks
  E. Step 5: Hide files

• Question 570:

  On a backdoored Linux box there is a possibility that legitimate programs are modified or trojaned. How is it possible to list processes and uids associated with them in a more reliable manner?

  A. Use "Is"
  B. Use "lsof"
  C. Use "echo"
  D. Use "netstat"
  B. Use "lsof"