312-50v8 by EC-COUNCIL Valid Free Exam Practice Test

Question 1

Which of the following are password cracking tools? (Choose three.)

A. John the Ripper B. KerbCrack C. Nikto D. BTCrack E. Cain and Abel F. Havij

Correct Answer: A,B,E

Question 2

This kind of attack will let you assume a users identity at a dynamically generated web page or site:

A. Session Hijacking B. SQL Injection C. Cross Site Scripting D. Zone Transfer

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

What two things will happen if a router receives an ICMP packet, which has a TTL value of 1, and the destination host is several hops away? (Select 2 answers)

A. The router will send an ICMP Redirect Message to the source host B. The router will discard the packet C. The router will increment the TTL value and forward the packet to the next router on the path to the destination host. D. The router will send a time exceeded message to the source host E. The router will decrement the TTL value and forward the packet to the next router on the path to the destination host

Correct Answer: B,D

Question 4

While performing a ping sweep of a subnet you receive an ICMP reply of Code 3/Type 13 for all the pings sent out.
What is the most likely cause behind this response?

A. A router is blocking ICMP. B. The firewall is dropping the packets. C. An in-line IDS is dropping the packets. D. The host does not respond to ICMP packets.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

What is the disadvantage of an automated vulnerability assessment tool?

A. Ineffective B. Prone to false negatives C. Prone to false positives D. Noisy E. Slow

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

When discussing passwords, what is considered a brute force attack?

A. You threaten to use the rubber hose on someone unless they reveal their password B. You attempt every single possibility until you exhaust all possible combinations or discover the password C. You create hashes of a large number of words and compare it with the encrypted passwords D. You wait until the password expires E. You load a dictionary of words into your cracking program

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

In Trojan terminology, what is required to create the executable file chess.exe as shown below?

A. Wrapper B. Converter C. Mixer D. Zipper

Correct Answer: A

Question 8

Network Administrator Patricia is doing an audit of the network. Below are some of her findings concerning DNS. Which of these would be a cause for alarm?
Select the best answer.

A. All external DNS is done by an ISP. B. Private IP addresses are used on the internal network and are registered with the internal AD integrated DNS server. C. unregistered. D. Internal AD Integrated DNS servers are using private DNS names that are E. There are two external DNS Servers for Internet domains. Both are AD integrated.

Correct Answer: E

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

Bill has successfully executed a buffer overflow against a Windows IIS web server. He has been able to spawn an interactive shell and plans to deface the main web page. He first attempts to use the "echo" command to simply overwrite index.html and remains unsuccessful. He then attempts to delete the page and achieves no progress. Finally, he tries to overwrite it with another page in which also he remains unsuccessful. What is the probable cause of Bill's problem?

A. The HTML file has permissions of read only B. The system is a honeypot C. There is a problem with the shell and he needs to run the attack again D. You cannot use a buffer overflow to deface a web page

Correct Answer: A

Question 10

How do you defend against Privilege Escalation?

A. Run services as unprivileged accounts B. Run users and applications on the least privileges C. Use encryption to protect sensitive data D. Restrict the interactive logon privileges E. Allow security settings of IE to zero or Low

Correct Answer: A,B,C,D

EC-COUNCIL Certified Ethical Hacker v8 - 312-50v8 Exam Practice Test