EC0-350 Exam Questions and Answers | Exam-Dumps (Page: 10)

QUESTION: 2

A remote user tries to login to a secure network using Telnet, but accidently types in an invalid user name or password. Which responses would NOT be preferred by an experienced Security Manager? (multiple answer)

Invalid Username
Invalid Password
Authentication Failure
Login Attempt Failed
Access Denied

Answer(s): A,B

Explanation:

As little information as possible should be given about a failed login attempt. Invalid username or password is not desirable.

Reveal Solution Next Question

QUESTION: 3

The programmers on your team are analyzing the free, open source software being used to run FTP services on a server. They notice that there is an excessive number of fgets() and gets() on the source code. These C++ functions do not check bounds.
What kind of attack is this program susceptible to?

Buffer of Overflow
Denial of Service
Shatter Attack
Password Attack

Answer(s): A

Explanation:

C users must avoid using dangerous functions that do not check bounds unless they've ensured that the bounds will never get exceeded. A buffer overflow occurs when you write a set of values (usually a string of characters) into a fixed length buffer and write at least one value outside that buffer's boundaries (usually past its end). A buffer overflow can occur when reading input from the user into a buffer, but it can also occur during other kinds of processing in a program.

Reveal Solution Next Question

QUESTION: 3

In which of the following should be performed first in any penetration test?

System identification
Intrusion Detection System testing
Passive information gathering
Firewall testing

Answer(s): C

Reveal Solution Next Question

QUESTION: 3

If you receive a RST packet while doing an ACK scan, it indicates that the port is open.(True/False).

True
False

Answer(s): A

Explanation:

When and ACK is sent to an open port, a RST is returned.

Reveal Solution Next Question

QUESTION: 3

Symmetric encryption algorithms are known to be fast but present great challenges on the key management side. Asymmetric encryption algorithms are slow but allow communication with a remote host without having to transfer a key out of band or in person. If we combine the strength of both crypto systems where we use the symmetric algorithm to encrypt the bulk of the data and then use the asymmetric encryption system to encrypt the symmetric key, what would this type of usage be known as?

Symmetric system
Combined system
Hybrid system
Asymmetric system

Answer(s): C

Explanation:

Because of the complexity of the underlying problems, most public-key algorithms involve operations such as modular multiplication and exponentiation, which are much more computationally expensive than the techniques used in most block ciphers, especially with typical key sizes. As a result, public-key cryptosystems are commonly "hybrid" systems, in which a fast symmetric-key encryption algorithm is used for the message itself, while the relevant symmetric key is sent with the message, but encrypted using a public-key algorithm. Similarly, hybrid signature schemes are often used, in which a cryptographic hash function is computed, and only the resulting hash is digitally signed.

Reveal Solution Next Question

EC-Council EC0-350 Exam (page: 10) EC-Council Ethical Hacking and Countermeasures Updated on: 25-Dec-2025

QUESTION: 2

Explanation:

QUESTION: 3

Explanation:

QUESTION: 3

QUESTION: 3

Explanation:

QUESTION: 3

Explanation:

EC-Council EC0-350 Exam (page: 10)
EC-Council Ethical Hacking and Countermeasures
Updated on: 25-Dec-2025