A user on your Windows 2000 network has discovered that he can use L0phtcrack to sniff the SMB exchanges which carry user logons. The user is plugged into a hub with 23 other systems.However, he is unable to capture any logons though he knows that other users are logging in.What do you think is the most likely reason behind this?

There is a NIDS present on that segment.

Windows logons cannot be sniffed.

L0phtcrack only sniffs logons to web servers.

E-mail scams and mail fraud are regulated by which of the following?

18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers

18 U.S.C. par. 1029 Fraud and Related activity in connection with Access Devices

18 U.S.C. par. 1362 Communication Lines, Stations, or Systems

18 U.S.C. par. 2510 Wire and Electronic Communications Interception and Interception of Oral Communication

Which of the following LM hashes represent a password of less than 8 characters? (Choose two.)

44EFCE164AB921CQAAD3B435B51404EE

B757BF5C0D87772FAAD3B435B51404EE

BA810DBA98995F1817306D272A9441BB

44EFCE164AB921CQAAD3B435B51404EE

0182BD0BD4444BF836077A718CCDF409

CEC52EB9C8E3455DC2265B23734E0DAC

B757BF5C0D87772FAAD3B435B51404EE

E52CAC67419A9A224A3B108F3FA6CB6D

Which of the following is the primary objective of a rootkit?

It replaces legitimate programs

It opens a port to provide an unauthorized service

It replaces legitimate programs

It provides an undocumented opening in a program

What is the BEST alternative if you discover that a rootkit has been installed on one of your computers?

Copy the system files from a known good system

Delete the files and try to determine the source

A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?

The WAP does not recognize the client's MAC address

The client cannot see the SSID of the wireless network

Client is configured for the wrong channel

The wireless client is not configured to use DHCP

Which is the first step followed by Vulnerability Scanners for scanning a network?

Checking if the remote host is alive

A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24. Which of the following has occurred?

The gateway is not routing to a public IP address.

The computer is not using a private IP address.

The gateway is not routing to a public IP address.

The gateway and the computer are not on the same network.

The computer is using an invalid IP address.

An incident investigator asks to receive a copy of the event logs from all firewalls, proxy servers, and Intrusion Detection Systems (IDS) on the network of an organization that has experienced a possible breach of security. When the investigator attempts to correlate the information in all of the logs, the sequence of many of the logged events do not match up.What is the most likely cause?

The network devices are not all synchronized.

Proper chain of custody was not observed while collecting the logs.

The attacker altered or erased events from the logs.

The security breach was a false positive.

By using a smart card and pin, you are using a two-factor authentication that satisfies

Something you have and something you know

Something you are and something you remember

Something you have and something you know

Something you know and something you are

Something you have and something you are

.......is an attack type for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. It is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hot-spot by posing as a legitimate provider. This type of attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there." Fill in the blank with appropriate choice.

Which of the following is the BEST way to defend against network sniffing?

Using encryption protocols to secure network communications

Register all machines MAC Address in a Centralized Database

Restrict Physical Access to Server Rooms hosting Critical Servers

You are the Network Admin, and you get a complaint that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL.What may be the problem?

Traffic is Blocked on UDP Port 53

Traffic is Blocked on TCP Port 80

Traffic is Blocked on TCP Port 54

Traffic is Blocked on UDP Port 80

Attacker creates a transparent 'iframe' in front of the URL which victim attempts to click, so victim thinks that he/she clicks to the 'Do you want to make $1000 in a day?' URL but actually he/she clicks to the content or URL that exists in the transparent 'iframe' which is setup by the attacker.What is the name of the attack which is mentioned in the scenario?

Victim opens the attacker's web site.

Attacker sets up a web site which contains interesting and attractive content like 'Do you want to make $1000 in a day?'.

Victim clicks to the interesting and attractive content URL.

Attacker creates a transparent 'iframe' in front of the URL which victim attempts to click, so victim thinks that he/she clicks to the 'Do you want to make $1000 in a day?' URL but actually he/she clicks to the content or URL that exists in the transparent 'iframe' which is setup by the attacker.What is the name of the attack which is mentioned in the scenario?

What does the –oX flag do in an Nmap scan?

Output the results in XML format to a file

Output the results in truncated format to the screen

Output the results in XML format to a file

A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?

Determine the impact of enabling the audit feature.

Perform a vulnerability scan of the system.

Determine the impact of enabling the audit feature.

Perform a cost/benefit analysis of the audit feature.

Allocate funds for staffing of audit log review.

Which Intrusion Detection System is the best applicable for large environments where critical assets on the network need extra scrutiny and is ideal for observing sensitive network segments?

Network-based intrusion detection system (NIDS)

Host-based intrusion detection system (HIDS)

What is one of the advantages of using both symmetric and asymmetric cryptography in SSL/TLS?

Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.

Symmetric algorithms such as AES provide a failsafe when asymmetric methods fail.

Symmetric encryption allows the server to security transmit the session keys out-of-band.

Asymmetric cryptography is computationally expensive in comparison. However, it is well-suited to securely negotiate keys for use with symmetric cryptography.

ECCouncil 312-50v12 Practice Test 1 - Free Online Exam Prep & Questions

Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored?

symmetric algorithms

asymmetric algorithms

hashing algorithms

integrity algorithms

Comment (0)

ECCouncil 312-50v12 Practice Test 1

Question

ECCouncil 312-50v12 Practice Tests

Practice Tests