EC0-350 Exam Questions and Answers | Exam-Dumps (Page: 18)

QUESTION: 4

Jack Hacker wants to break into company’s computers and obtain their secret double fudge cookie recipe. Jacks calls Jane, an accountant at company pretending to be an administrator from company. Jack tells Jane that there has been a problem with some accounts and asks her to verify her password with him “just to double check our records”. Jane does not suspect anything amiss, and parts with her password. Jack can now access company’s computers with a valid user name and password, to steal the cookie recipe.
What kind of attack is being illustrated here? (Choose the best answer)

Reverse Psychology
Reverse Engineering
Social Engineering
Spoofing Identity
Faking Identity

Answer(s): C

Explanation:

This is a typical case of pretexting. Pretexting is the act of creating and using an invented scenario (the pretext) to persuade a target to release information or perform an action and is usually done over the telephone.

Reveal Solution Next Question

QUESTION: 4

Bart is looking for a Windows NT/2000/XP command-line tool that can be used to assign, display, or modify ACL’s (access control lists) to files or folders and also one that can be used within batch files.
Which of the following tools can be used for that purpose? (Choose the best answer)

PERM.exe
CACLS.exe
CLACS.exe
NTPERM.exe

Answer(s): B

Explanation:

Cacls.exe is a Windows NT/2000/XP command-line tool you can use to assign, display, or modify ACLs (access control lists) to files or folders. Cacls is an interactive tool, and since it's a command-line utility, you can also use it in batch files.

Reveal Solution Next Question

QUESTION: 4

Johnny is a member of the hacking group orpheus1. He is currently working on breaking into the Department of Defense’s front end exchange server. He was able to get into the server, located in a DMZ, by using an unused service account that had a very weak password that he was able to guess. Johnny wants to crack the administrator password, but does not have a lot of time to crack it. He wants to use a tool that already has the LM hashes computed for all possible permutations of the administrator password.
What tool would be best used to accomplish this?

RainbowCrack
SMBCrack
SmurfCrack
PSCrack

Answer(s): A

Explanation:

RainbowCrack is a general propose implementation of Philippe Oechslin's faster time-memory trade-off technique. In short, the RainbowCrack tool is a hash cracker. A traditional brute force cracker try all possible plaintexts one by one in cracking time. It is time consuming to break complex password in this way. The idea of time-memory trade-off is to do all cracking time computation in advance and store the result in files so called "rainbow table". It does take a long time to precompute the tables. But once the one time precomputation is finished, a time-memory trade-off cracker can be hundreds of times faster than a brute force cracker, with the help of precomputed tables.

Reveal Solution Next Question

QUESTION: 4

Scanning for services is an easy job for Bob as there are so many tools available from the Internet. In order for him to check the vulnerability of company, he went through a few scanners that are currently available. Here are the scanners that he uses:
1. Axent’s NetRecon (http://www.axent.com)
2. SARA, by Advanced Research Organization (http://www-arc.com/sara)
3. VLAD the Scanner, by Razor (http://razor.bindview.com/tools/)
However, there are many other alternative ways to make sure that the services that have been scanned will be more accurate and detailed for Bob.
What would be the best method to accurately identify the services running on a victim host?

Using Cheops-ng to identify the devices of company.
Using the manual method of telnet to each of the open ports of company.
Using a vulnerability scanner to try to probe each port to verify or figure out which service is running for company.
Using the default port and OS to make a best guess of what services are running on each port for company.

Answer(s): B

Explanation:

By running a telnet connection to the open ports you will receive banners that tells you what service is answering on that specific port.

Reveal Solution Next Question

QUESTION: 4

In the context of Trojans, what is the definition of a Wrapper?

An encryption tool to protect the Trojan.
A tool used to bind the Trojan with legitimate file.
A tool used to encapsulated packets within a new header and footer.
A tool used to calculate bandwidth and CPU cycles wasted by the Trojan.

Answer(s): B

Explanation:

These wrappers allow an attacker to take any executable back-door program and combine it with any legitimate executable, creating a Trojan horse without writing a single line of new code.

Reveal Solution Next Question

EC-Council EC0-350 Exam (page: 18) EC-Council Ethical Hacking and Countermeasures Updated on: 25-Dec-2025

QUESTION: 4

Explanation:

QUESTION: 4

Explanation:

QUESTION: 4

Explanation:

QUESTION: 4

Explanation:

QUESTION: 4

Explanation:

EC-Council EC0-350 Exam (page: 18)
EC-Council Ethical Hacking and Countermeasures
Updated on: 25-Dec-2025