Home / ECCouncil / 312-50v12

ECCouncil 312-50v12 Practice Test - Questions Answers, Page 16

Question list

List of questions

Question 151

(0)

What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?

Question 152

(0)

How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?

Question 153

(0)

When discussing passwords, what is considered a brute force attack?

Question 154

(0)

Which of the following are well known password-cracking programs?

Question 155

(0)

Password cracking programs reverse the hashing process to recover passwords. (True/False.)

Question 156

(0)

While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an attack or other wrong

Question 157

(0)

Windows LAN Manager (LM) hashes are known to be weak. Which of the following are known weaknesses of LM? (Choose three.)

Question 158

(0)

You have retrieved the raw hash values from a Windows 2000 Domain Controller. Using social engineering, you come to know that they are enforcing strong passwords. You understand that all users are r

Question 159

(0)

An attacker runs netcat tool to transfer a secret file between two hosts. He is worried about information being sniffed on the network. How would the attacker use netcat to encrypt the informati

Question 160

(0)

What is GINA?

Related questions

The "Gray-box testing" methodology enforces what kind of restriction?

A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?

Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. Identify the behavior of the adversary In the above scenario.

In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various search engines, social networking sites, and web spidering tools. In this process, she also uses an automated tool to gather a list of words from the target website to further perform a brute-force attack on the previously gathered email addresses. What is the tool used by Hailey for gathering a list of words from the target website?

You are the Network Admin, and you get a complaint that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL. What may be the problem?

Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?

Upon establishing his new startup, Tom hired a cloud service provider (CSP) but was dissatisfied with their service and wanted to move to another CSP. What part of the contract might prevent him from doing so?

A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?

A penetration tester was assigned to scan a large network range to find live hosts. The network is known for using strict TCP filtering rules on its firewall, which may obstruct common host discovery techniques. The tester needs a method that can bypass these firewall restrictions and accurately identify live systems. What host discovery technique should the tester use?

Attacker Rony Installed a rogue access point within an organization's perimeter and attempted to Intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by Johnson in the above scenario?

Question 151

What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?

All are hacking tools developed by the legion of doom

All are tools that can be used not only by hackers, but also security personnel

All are DDOS tools

All are tools that are only effective against Windows

All are tools that are only effective against Linux

Show Answer Comment (0)

Question 152

How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?

There is no way to tell because a hash cannot be reversed

The right most portion of the hash is always the same

The hash always starts with AB923D

The left most portion of the hash is always the same

A portion of the hash will be all 0's

Show Answer Comment (0)

Question 153

When discussing passwords, what is considered a brute force attack?

You attempt every single possibility until you exhaust all possible combinations or discover the password

You threaten to use the rubber hose on someone unless they reveal their password

You load a dictionary of words into your cracking program

You create hashes of a large number of words and compare it with the encrypted passwords

You wait until the password expires

Show Answer Comment (0)

Question 154

Which of the following are well known password-cracking programs?

L0phtcrack

NetCat

Jack the Ripper

Netbus

John the Ripper

Show Answer Comment (0)

Question 155

Password cracking programs reverse the hashing process to recover passwords. (True/False.)

True

False

Show Answer Comment (0)

While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an attack or other wrong doing. However, you are concerned about affecting the normal functionality of the email server.

From the following options choose how best you can achieve this objective?

Block port 25 at the firewall.

Shut off the SMTP service on the server.

Force all connections to use a username and password.

Switch from Windows Exchange to UNIX Sendmail.

None of the above.

Show Answer Comment (0)

Question 157

Windows LAN Manager (LM) hashes are known to be weak.

Which of the following are known weaknesses of LM? (Choose three.)

Converts passwords to uppercase.

Hashes are sent in clear text over the network.

Makes use of only 32-bit encryption.

Effective length is 7 characters.

Show Answer Comment (0)

Question 158

You have retrieved the raw hash values from a Windows 2000 Domain Controller. Using social engineering, you come to know that they are enforcing strong passwords. You understand that all users are required to use passwords that are at least 8 characters in length. All passwords must also use 3 of the 4 following categories: lower case letters, capital letters, numbers and special characters.

With your existing knowledge of users, likely user account names and the possibility that they will choose the easiest passwords possible, what would be the fastest type of password cracking attack you can run against these hash values and still get results?

Online Attack

Dictionary Attack

Brute Force Attack

Hybrid Attack

Show Answer Comment (0)