EC0-350 Exam Questions and Answers | Exam-Dumps (Page: 5)

QUESTION: 1

Assuring two systems that are using IPSec to protect traffic over the internet, what type of general attack could compromise the data?

Spoof Attack
Smurf Attack
Man in the Middle Attack
Trojan Horse Attack
Back Orifice Attack

Answer(s): D,E

Explanation:

To compromise the data, the attack would need to be executed before the encryption takes place at either end of the tunnel. Trojan Horse and Back Orifice attacks both allow for potential data manipulation on host computers. In both cases, the data would be compromised either before encryption or after decryption, so IPsec is not preventing the attack.

Reveal Solution Next Question

QUESTION: 1

The evil hacker, is purposely sending fragmented ICMP packets to a remote target. The total size of this ICMP packet once reconstructed is over 65, 536 bytes. From the information given, what type of attack is attempting to perform?

Syn flood
Smurf
Ping of death
Fraggle

Answer(s): C

Reference:

http://insecure.org/sploits/ping-o-death.html

Reveal Solution Next Question

QUESTION: 1

Exhibit:
ettercap –NCLzs --quiet
What does the command in the exhibit do in “Ettercap”?

This command will provide you the entire list of hosts in the LAN
This command will check if someone is poisoning you and will report its IP.
This command will detach from console and log all the collected passwords from the network to a file.
This command broadcasts ping to scan the LAN instead of ARP request of all the subnet IPs.

Answer(s): C

Explanation:

-N = NON interactive mode (without ncurses)
-C = collect all users and passwords
-L = if used with -C (collector) it creates a file with all the password sniffed in the session in the form "YYYYMMDD-collected-pass.log"
-z = start in silent mode (no arp storm on start up)
-s = IP BASED sniffing
--quiet = "demonize" ettercap. Useful if you want to log all data in background.

Reveal Solution Next Question

QUESTION: 2

You have been using the msadc.pl attack script to execute arbitrary commands on an NT4 web server. While it is effective, you find it tedious to perform extended functions. On further research you come across a perl script that runs the following msadc functions:

What kind of exploit is indicated by this script?

A buffer overflow exploit.
A SUID exploit.
A SQL injection exploit.
A chained exploit.
A buffer under run exploit.

Answer(s): D

Reveal Solution Next Question

QUESTION: 2

A client has approached you with a penetration test requirements. They are concerned with the possibility of external threat, and have invested considerable resources in protecting their Internet exposure. However, their main concern is the possibility of an employee elevating his/her privileges and gaining access to information outside of their respective department.
What kind of penetration test would you recommend that would best address the client’s concern?

A Black Box test
A Black Hat test
A Grey Box test
A Grey Hat test
A White Box test
A White Hat test

Answer(s): C

Reveal Solution Next Question

EC-Council EC0-350 Exam (page: 5) EC-Council Ethical Hacking and Countermeasures Updated on: 25-Dec-2025

QUESTION: 1

Explanation:

QUESTION: 1

Reference:

QUESTION: 1

Explanation:

QUESTION: 2

QUESTION: 2

EC-Council EC0-350 Exam (page: 5)
EC-Council Ethical Hacking and Countermeasures
Updated on: 25-Dec-2025