312-50 Exam Questions and Answers | Exam-Dumps (Page: 23)

QUESTION: 111

John has performed a scan of the web server with NMAP but did not gather enough information to accurately identify which operating system is running on the remote host. How could you use a web server to help in identifying the OS that is being used?

Telnet to an Open port and grab the banner
Connect to the web server with an FTP client
Connect to the web server with a browser and look at the web page
Telnet to port 8080 on the web server and look at the default page code

Answer(s): A

Explanation:

Most Web servers politely identify themselves and the OS to anyone who asks.

Reveal Solution Next Question

QUESTION: 112

Mark works as a contractor for the Department of Defense and is in charge of network security. He has spent the last month securing access to his network from all possible entry points. He has segmented his network into several subnets and has installed firewalls all over the network. He has placed very stringent rules on all the firewalls, blocking everything in and out except ports that must be used. He does need to have port 80 open since his company hosts a website that must be accessed from the Internet. Mark is fairly confident of his perimeter defense, but is still worried about programs like Hping2 that can get into a network through convert channels.
How should mark protect his network from an attacker using Hping2 to scan his internal network?

Blocking ICMP type 13 messages
Block All Incoming traffic on port 53
Block All outgoing traffic on port 53
Use stateful inspection on the firewalls

Answer(s): A

Explanation:

An ICMP type 13 message is an ICMP timestamp request and waits for an ICMP timestamp reply. The remote node is right to do, still it would not be necessary as it is optional and thus many ip stacks ignore such packets. Nevertheless, nmap again achived to make its packets unique by setting the originating timestamp field in the packet to 0.

Reveal Solution Next Question

QUESTION: 113

Lori has just been tasked by her supervisor conduct vulnerability scan on the corporate network. She has been instructed to perform a very thorough test of the network to ensure that there are no security holes on any of the machines. Lori’s company does not own any commercial scanning products, so she decides to download a free one off the Internet. Lori has never done a vulnerability scan before, so she is unsure of some of the settings available in the software she downloaded. One of the option is to choose which ports that can be scanned. Lori wants to do exactly what her boos has told her, but she does not know ports should be scanned.
If Lori is supposed to scan all known TCP ports, how many ports should she select in the software?

65536
1024
1025
Lori should not scan TCP ports, only UDP ports

Answer(s): A

Explanation:

In both TCP and UDP, each packet header will specify a source port and a destination port, each of which is a 16-bit unsigned integer (i.e. ranging from 0 to 65535).

Reveal Solution Next Question

QUESTION: 114

Samantha has been actively scanning the client network for which she is doing a vulnerability assessment test. While doing a port scan she notices ports open in the 135 to 139 range. What protocol is most likely to be listening on those ports?

SMB
FTP
SAMBA
FINGER

Answer(s): A

Explanation:

Port 135 is for RPC and 136-139 is for NetBIOS traffic. SMB is an upper layer service that runs on top of the Session Service and the Datagram service of NetBIOS.

Reveal Solution Next Question

QUESTION: 115

Paula works as the primary help desk contact for her company. Paula has just received a call from a user reporting that his computer just displayed a Blue Screen of Death screen and he ca no longer work. Paula walks over to the user’s computer and sees the Blue Screen of Death screen. The user’s computer is running Windows XP, but the Blue screen looks like a familiar one that Paula had seen a Windows 2000 Computers periodically.
The user said he stepped away from his computer for only 15 minutes and when he got back, the Blue Screen was there. Paula also noticed that the hard drive activity light was flashing meaning that the computer was processing some thing. Paula knew this should not be the case since the computer should be completely frozen during a Blue screen. She checks the network IDS live log entries and notices numerous nmap scan alerts.
What is Paula seeing happen on this computer?

Paula’s Network was scanned using FloppyScan
Paula’s Netwrok was scanned using Dumpsec
There was IRQ conflict in Paula’s PC
Tool like Nessus will cause BSOD

Answer(s): A

Explanation:

Floppyscan is a dangerous hacking tool which can be used to portscan a system using a floppy disk Bootsup mini Linux Displays Blue screen of death screen Port scans the network using NMAP Send the results by e-mail to a remote server.

Reveal Solution Next Question

EC-Council 312-50 Exam (page: 23) EC-Council Ethical Hacker Certified Updated on: 12-Jan-2026

QUESTION: 111

Explanation:

QUESTION: 112

Explanation:

QUESTION: 113

Explanation:

QUESTION: 114

Explanation:

QUESTION: 115

Explanation:

EC-Council 312-50 Exam (page: 23)
EC-Council Ethical Hacker Certified
Updated on: 12-Jan-2026