ExamGecko
Home Home / ECCouncil / 312-49v10

ECCouncil 312-49v10 Practice Test - Questions Answers, Page 20

Question list
Search
Search

List of questions

Search

Related questions











Kyle is performing the final testing of an application he developed for the accounting department.

His last round of testing is to ensure that the program is as secure as possible. Kyle runs the following command. What is he testing at this point?

#include #include int main(int argc, char

*argv[]) { char buffer[10]; if (argc < 2) { fprintf (stderr, "USAGE: %s string\n", argv[0]); return 1; } strcpy(buffer, argv[1]); return 0; }

A.
Buffer overflow
A.
Buffer overflow
Answers
B.
SQL injection
B.
SQL injection
Answers
C.
Format string bug
C.
Format string bug
Answers
D.
Kernal injection
D.
Kernal injection
Answers
Suggested answer: A

You are running known exploits against your network to test for possible vulnerabilities. To test the strength of your virus software, you load a test network to mimic your production network. Your software successfully blocks some simple macro and encrypted viruses. You decide to really test the software by using virus code where the code rewrites itself entirely and the signatures change from child to child, but the functionality stays the same. What type of virus is this that you are testing?

A.
Polymorphic
A.
Polymorphic
Answers
B.
Metamorphic
B.
Metamorphic
Answers
C.
Oligomorhic
C.
Oligomorhic
Answers
D.
Transmorphic
D.
Transmorphic
Answers
Suggested answer: B

What is a good security method to prevent unauthorized users from "tailgating"?

A.
Man trap
A.
Man trap
Answers
B.
Electronic combination locks
B.
Electronic combination locks
Answers
C.
Pick-resistant locks
C.
Pick-resistant locks
Answers
D.
Electronic key systems
D.
Electronic key systems
Answers
Suggested answer: A

You are the security analyst working for a private company out of France. Your current assignment is to obtain credit card information from a Swiss bank owned by that company. After initial reconnaissance, you discover that the bank security defenses are very strong and would take too long to penetrate. You decide to get the information by monitoring the traffic between the bank and one of its subsidiaries in London. After monitoring some of the traffic, you see a lot of FTP packets traveling back and forth. You want to sniff the traffic and extract usernames and passwords. What tool could you use to get this information?

A.
Airsnort
A.
Airsnort
Answers
B.
Snort
B.
Snort
Answers
C.
Ettercap
C.
Ettercap
Answers
D.
RaidSniff
D.
RaidSniff
Answers
Suggested answer: C

As a security analyst, you setup a false survey website that will require users to create a username and a strong password. You send the link to all the employees of the company. What information will you be able to gather?

A.
The IP address of the employees' computers
A.
The IP address of the employees' computers
Answers
B.
Bank account numbers and the corresponding routing numbers
B.
Bank account numbers and the corresponding routing numbers
Answers
C.
The employees network usernames and passwords
C.
The employees network usernames and passwords
Answers
D.
The MAC address of the employees' computers
D.
The MAC address of the employees' computers
Answers
Suggested answer: C

Julia is a senior security analyst for Berber Consulting group. She is currently working on a contract for a small accounting firm in Florid a. They have given her permission to perform social engineering attacks on the company to see if their in-house training did any good. Julia calls the main number for the accounting firm and talks to the receptionist. Julia says that she is an IT technician from the company's main office in Iowa. She states that she needs the receptionist's network username and password to troubleshoot a problem they are having. Julia says that Bill Hammond, the CEO of the company, requested this information.

After hearing the name of the CEO, the receptionist gave Julia all the information she asked for. What principal of social engineering did Julia use?

A.
Social Validation
A.
Social Validation
Answers
B.
Scarcity
B.
Scarcity
Answers
C.
Friendship/Liking
C.
Friendship/Liking
Answers
D.
Reciprocation
D.
Reciprocation
Answers
Suggested answer: D

Harold wants to set up a firewall on his network but is not sure which one would be the most appropriate. He knows he needs to allow FTP traffic to one of the servers on his network, but he wants to only allow FTP-PUT. Which firewall would be most appropriate for Harold? needs?

A.
Circuit-level proxy firewall
A.
Circuit-level proxy firewall
Answers
B.
Packet filtering firewall
B.
Packet filtering firewall
Answers
C.
Application-level proxy firewall
C.
Application-level proxy firewall
Answers
D.
Data link layer firewall
D.
Data link layer firewall
Answers
Suggested answer: C

What will the following command accomplish?

A.
Test ability of a router to handle over-sized packets
A.
Test ability of a router to handle over-sized packets
Answers
B.
Test the ability of a router to handle under-sized packets
B.
Test the ability of a router to handle under-sized packets
Answers
C.
Test the ability of a WLAN to handle fragmented packets
C.
Test the ability of a WLAN to handle fragmented packets
Answers
D.
Test the ability of a router to handle fragmented packets
D.
Test the ability of a router to handle fragmented packets
Answers
Suggested answer: A

What does ICMP Type 3/Code 13 mean?

A.
Host Unreachable
A.
Host Unreachable
Answers
B.
Administratively Blocked
B.
Administratively Blocked
Answers
C.
Port Unreachable
C.
Port Unreachable
Answers
D.
Protocol Unreachable
D.
Protocol Unreachable
Answers
Suggested answer: B

How many bits is Source Port Number in TCP Header packet?

A.
16
A.
16
Answers
B.
32
B.
32
Answers
C.
48
C.
48
Answers
D.
64
D.
64
Answers
Suggested answer: A
Total 704 questions
Go to page: of 71