Home / ECCouncil / 312-50v12

ECCouncil 312-50v12 Practice Test - Questions Answers, Page 15

Question list

List of questions

Question 141

(0)

The following is an entry captured by a network IDS. You are assigned the task of analyzing this entry. You notice the value 0x90, which is the most common NOOP instruction for the Intel processor.

Question 142

(0)

Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal?

Question 143

(0)

As a securing consultant, what are some of the things you would recommend to a company to ensure DNS security?

Question 144

(0)

Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?

Question 145

(0)

What tool can crack Windows SMB passwords simply by listening to network traffic?

Question 146

(0)

A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network. What are some things he can do to prevent it? Select the best answers.

Question 147

(0)

Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network. Which of these tools would do the SNMP enumeration he is loo

Question 148

(0)

If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack is possible?

Question 149

(0)

Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he

Question 150

(0)

Study the snort rule given below: From the options below, choose the exploit against which this rule applies.

Related questions

The "Gray-box testing" methodology enforces what kind of restriction?

A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?

Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. Identify the behavior of the adversary In the above scenario.

In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various search engines, social networking sites, and web spidering tools. In this process, she also uses an automated tool to gather a list of words from the target website to further perform a brute-force attack on the previously gathered email addresses. What is the tool used by Hailey for gathering a list of words from the target website?

You are the Network Admin, and you get a complaint that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL. What may be the problem?

Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?

Upon establishing his new startup, Tom hired a cloud service provider (CSP) but was dissatisfied with their service and wanted to move to another CSP. What part of the contract might prevent him from doing so?

A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?

A penetration tester was assigned to scan a large network range to find live hosts. The network is known for using strict TCP filtering rules on its firewall, which may obstruct common host discovery techniques. The tester needs a method that can bypass these firewall restrictions and accurately identify live systems. What host discovery technique should the tester use?

Attacker Rony Installed a rogue access point within an organization's perimeter and attempted to Intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by Johnson in the above scenario?

Question 141

The following is an entry captured by a network IDS. You are assigned the task of analyzing this entry.

You notice the value 0x90, which is the most common NOOP instruction for the Intel processor. You figure that the attacker is attempting a buffer overflow attack.

You also notice "/bin/sh" in the ASCII part of the output.

As an analyst what would you conclude about the attack?

The buffer overflow attack has been neutralized by the IDS

The attacker is creating a directory on the compromised machine

The attacker is attempting a buffer overflow attack and has succeeded

The attacker is attempting an exploit that launches a command-line shell

Show Answer Comment (0)

Question 142

Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal?

har.txt

SAM file

wwwroot

Repair file

Show Answer Comment (0)

Question 143

As a securing consultant, what are some of the things you would recommend to a company to ensure DNS security?

Use the same machines for DNS and other applications

Harden DNS servers

Use split-horizon operation for DNS servers

Restrict Zone transfers

Have subnet diversity between DNS servers

Show Answer Comment (0)

Question 144

Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?

To determine who is the holder of the root account

To perform a DoS

To create needless SPAM

To illicit a response back that will reveal information about email servers and how they treat undeliverable mail

To test for virus protection

Show Answer Comment (0)

Question 145

What tool can crack Windows SMB passwords simply by listening to network traffic?

This is not possible

Netbus

NTFSDOS

L0phtcrack

Show Answer Comment (0)

Question 146

A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network. What are some things he can do to prevent it? Select the best answers.

Use port security on his switches.

Use a tool like ARPwatch to monitor for strange ARP activity.

Use a firewall between all LAN segments.

If you have a small network, use static ARP entries.

Use only static IP addresses on all PC's.

Show Answer Comment (0)

Question 147

Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network.

Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.

SNMPUtil

SNScan

SNMPScan

Solarwinds IP Network Browser

NMap

Show Answer Comment (0)

Question 148

If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack is possible?

Birthday

Brute force

Man-in-the-middle

Smurf

Show Answer Comment (0)

Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers.

Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?

Hardware, Software, and Sniffing.

Hardware and Software Keyloggers.

Passwords are always best obtained using Hardware key loggers.

Software only, they are the most effective.

Show Answer Comment (0)