Ethical Hacking and Countermeasures Exam Questions PDF download

QUESTION: 3

Clive has been hired to perform a Black-Box test by one of his clients.
How much information will Clive obtain from the client before commencing his test?

IP Range, OS, and patches installed.
Only the IP address range.
Nothing but corporate name.
All that is available from the client site.

Answer(s): C

Explanation:

Penetration tests can be conducted in one of two ways: black-box (with no prior knowledge the infrastructure to be tested) or white-box (with complete knowledge of the infrastructure to be tested). As you might expect, there are conflicting opinions about this choice and the value that either approach will bring to a project.

Reveal Solution Next Question

QUESTION: 3

You want to use netcat to generate huge amount of useless network data continuously for various performance testing between 2 hosts.
Which of the following commands accomplish this?

Machine A
#yes AAAAAAAAAAAAAAAAAAAAAA | nc –v –v –l –p 2222 > /dev/null
Machine B
#yes BBBBBBBBBBBBBBBBBBBBBB | nc machinea 2222 > /dev/null
Machine A
cat somefile | nc –v –v –l –p 2222
Machine B
cat somefile | nc othermachine 2222
Machine A
nc –l –p 1234 | uncompress –c | tar xvfp
Machine B
tar cfp - /some/dir | compress –c | nc –w 3 machinea 1234
Machine A
while true : do
nc –v –l –s –p 6000 machineb 2
Machine B
while true ; do
nc –v –l –s –p 6000 machinea 2
done

Answer(s): A

Explanation:

Machine A is setting up a listener on port 2222 using the nc command and then having the letter A sent an infinite amount of times, when yes is used to send data yes NEVER stops until it recieves a break signal from the terminal (Control+C), on the client end (machine B), nc is being used as a client to connect to machine A, sending the letter B and infinite amount of times, while both clients have established a TCP connection each client is infinitely sending data to each other, this process will run FOREVER until it has been stopped by an administrator or the attacker.

Reveal Solution Next Question

QUESTION: 3

Global deployment of RFC 2827 would help mitigate what classification of attack?

Sniffing attack
Denial of service attack
Spoofing attack
Reconnaissance attack
Prot Scan attack

Answer(s): C

Explanation:

RFC 2827 - Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing

Reveal Solution Next Question

QUESTION: 3

A POP3 client contacts the POP3 server:

To send mail
To receive mail
to send and receive mail
to get the address to send mail to
initiate a UDP SMTP connection to read mail

Answer(s): B

Explanation:

POP is used to receive e-mail.
SMTP is used to send e-mail.

Reveal Solution Next Question

QUESTION: 4

Bob has a good understanding of cryptography, having worked with it for many years. Cryptography is used to secure data from specific threat, but it does not secure the application from coding errors. It can provide data privacy, integrity and enable strong authentication but it cannot mitigate programming errors.
What is a good example of a programming error that Bob can use to illustrate to the management that encryption will not address all of their security concerns?

Bob can explain that a random generator can be used to derive cryptographic keys but it uses a weak seed value and it is a form of programming error.
Bob can explain that by using passwords to derive cryptographic keys it is a form of a programming error.
Bob can explain that a buffer overflow is an example of programming error and it is a common mistake associated with poor programming technique.
Bob can explain that by using a weak key management technique it is a form of programming error.

Answer(s): C

Explanation:

A buffer overflow occurs when you write a set of values (usually a string of characters) into a fixed length buffer and write at least one value outside that buffer's boundaries (usually past its end). A buffer overflow can occur when reading input from the user into a buffer, but it can also occur during other kinds of processing in a program. Technically, a buffer overflow is a problem with the program's internal implementation.

Reveal Solution Next Question

EC-Council Ethical Hacking and Countermeasures EC0-350 Exam Questions in PDF

Free EC-Council EC0-350 Dumps Questions (page: 14)

QUESTION: 3

Explanation:

QUESTION: 3

Explanation:

QUESTION: 3

Explanation:

QUESTION: 3

Explanation:

QUESTION: 4

Explanation: