312-50 Exam AI-Powered | Exam-Dumps.net (Page: 18)

QUESTION: 86

You are performing a port scan with nmap. You are in hurry and conducting the scans at the fastest possible speed. However, you don't want to sacrifice reliability for speed. If stealth is not an issue, what type of scan should you run to get very reliable results?

XMAS scan
Stealth scan
Connect scan
Fragmented packet scan

Answer(s): C

Explanation:

A TCP Connect scan, named after the Unix connect() system call is the most accurate scanning method. If a port is open the operating system completes the TCP three-way handshake, and the port scanner immediately closes the connection.

Reveal Solution Next Question

QUESTION: 87

Neil notices that a single address is generating traffic from its port 500 to port 500 of several other machines on the network. This scan is eating up most of the network bandwidth and Neil is concerned. As a security professional, what would you infer from this scan?

It is a network fault and the originating machine is in a network loop
It is a worm that is malfunctioning or hardcoded to scan on port 500
The attacker is trying to detect machines on the network which have SSL enabled
The attacker is trying to determine the type of VPN implementation and checking for IPSec

Answer(s): D

Explanation:

Port 500 is used by IKE (Internet Key Exchange). This is typically used for IPSECbased VPN software, such as Freeswan, PGPnet, and various vendors of in-a-box VPN solutions such as Cisco. IKE is used to set up the session keys. The actual session is usually sent with ESP (Encapsulated Security Payload) packets, IP protocol 50 (but some in-a-box VPN's such as Cisco are capable of negotiating to send the encrypted tunnel over a UDP channel, which is useful for use across firewalls that block IP protocols other than TCP or UDP).

Reveal Solution Next Question

QUESTION: 88

A distributed port scan operates by:

Blocking access to the scanning clients by the targeted host
Using denial-of-service software against a range of TCP ports
Blocking access to the targeted host by each of the distributed scanning clients
Having multiple computers each scan a small number of ports, then correlating the results

Answer(s): D

Explanation:

Think of dDoS (distributed Denial of Service) where you use a large number of computers to create simultaneous traffic against a victim in order to shut them down.

Reveal Solution Next Question

QUESTION: 89

You want to know whether a packet filter is in front of 192.168.1.10. Pings to 192.168.1.10 don't get answered. A basic nmap scan of 192.168.1.10 seems to hang without returning any information. What should you do next?

Use NetScan Tools Pro to conduct the scan
Run nmap XMAS scan against 192.168.1.10
Run NULL TCP hping2 against 192.168.1.10
The firewall is blocking all the scans to 192.168.1.10

Answer(s): C

Reveal Solution Next Question

QUESTION: 90

What does ICMP (type 11, code 0) denote?

Unknown Type
Time Exceeded
Source Quench
Destination Unreachable

Answer(s): B

Explanation:

An ICMP Type 11, Code 0 means Time Exceeded [RFC792], Code 0 = Time to Live exceeded in Transit and Code 1 = Fragment Reassembly Time Exceeded.

Reveal Solution Next Question

EC-Council 312-50 (page: 18)

QUESTION: 86

Explanation:

QUESTION: 87

Explanation:

QUESTION: 88

Explanation:

QUESTION: 89

QUESTION: 90

Explanation: