EC0-350 ECCouncil Ethical Hacking and Countermeasures V8 exact Exam Questions

Ethical Hacking and Countermeasures V8

Last Update 19 hours ago Total Questions : 878

The Ethical Hacking and Countermeasures V8 content is now fully updated, with all current exam questions added 19 hours ago. Deciding to include EC0-350 practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our EC0-350 exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these EC0-350 sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Ethical Hacking and Countermeasures V8 practice test comfortably within the allotted time.

Question # 4

William has received a Chess game from someone in his computer programming class through email. William does not really know the person who sent the game very well, but decides to install the game anyway because he really likes Chess.

After William installs the game, he plays it for a couple of hours. The next day, William plays the Chess game again and notices that his machine has begun to slow down. He brings up his Task Manager and sees the following programs running:

What has William just installed?

Zombie Zapper (ZoZ)

Remote Access Trojan (RAT)

Bot IRC Tunnel (BIT)

Root Digger (RD)

Question # 5

Exhibit

(Note: the student is being tested on concepts learnt during passive OS fingerprinting, basic TCP/IP connection concepts and the ability to read packet signatures from a sniff dump.)

Snort has been used to capture packets on the network. On studying the packets, the penetration tester finds it to be abnormal. If you were the penetration tester, why would you find this abnormal?

What is odd about this attack? Choose the best answer.

This is not a spoofed packet as the IP stack has increasing numbers for the three flags.

This is back orifice activity as the scan comes form port 31337.

The attacker wants to avoid creating a sub-carries connection that is not normally valid.

These packets were crafted by a tool, they were not created by a standard IP stack.

Question # 6

Which of the following is a common Service Oriented Architecture (SOA) vulnerability?

Cross-site scripting

SQL injection

VPath injection

XML denial of service issues

Question # 7

What techniques would you use to evade IDS during a Port Scan? (Select 4 answers)

Use fragmented IP packets

Spoof your IP address when launching attacks and sniff responses from the server

Overload the IDS with Junk traffic to mask your scan

Use source routing (if possible)

Connect to proxy servers or compromised Trojaned machines to launch attacks

Question # 8

Which type of scan measures a person ' s external features through a digital video camera?

Iris scan

Retinal scan

Facial recognition scan

Signature kinetics scan

Question # 9

John is discussing security with Jane. Jane had mentioned to John earlier that she suspects an LKM has been installed on her server. She believes this is the reason that the server has been acting erratically lately. LKM stands for Loadable Kernel Module.

What does this mean in the context of Linux Security?

Loadable Kernel Modules are a mechanism for adding functionality to a file system without requiring a kernel recompilation.

Loadable Kernel Modules are a mechanism for adding functionality to an operating-system kernel after it has been recompiled and the system rebooted.

Loadable Kernel Modules are a mechanism for adding auditing to an operating-system kernel without requiring a kernel recompilation.

Loadable Kernel Modules are a mechanism for adding functionality to an operating-system kernel without requiring a kernel recompilation.

Question # 10

Steven the hacker realizes that the network administrator of XYZ is using syskey to protect organization resources in the Windows 2000 Server. Syskey independently encrypts the hashes so that physical access to the server, tapes, or ERDs is only first step to cracking the passwords. Steven must break through the encryption used by syskey before he can attempt to brute force dictionary attacks on the hashes. Steven runs a program called “SysCracker” targeting the Windows 2000 Server machine in attempting to crack the hash used by Syskey. He needs to configure the encryption level before he can launch attach.

How many bits does Syskey use for encryption?

40 bit

64 bit

256 bit

128 bit

Question # 11

What are the two basic types of attacks? (Choose two.

DoS

Passive

Sniffing

Active

Cracking

Question # 12

NSLookup is a good tool to use to gain additional information about a target network. What does the following command accomplish?

nslookup

> server < ipaddress >

> set type =any

> ls -d < target.com >

Enables DNS spoofing

Loads bogus entries into the DNS table

Verifies zone security

Performs a zone transfer

Resets the DNS cache

Question # 13

What statement is true regarding LM hashes?

LM hashes consist in 48 hexadecimal characters.

LM hashes are based on AES128 cryptographic standard.

Uppercase characters in the password are converted to lowercase.

LM hashes are not generated when the password length exceeds 15 characters.

Question # 14

The fundamental difference between symmetric and asymmetric key cryptographic systems is that symmetric key cryptography uses which of the following?

Multiple keys for non-repudiation of bulk data

Different keys on both ends of the transport medium

Bulk encryption for data transmission over fiber

The same key on each end of the transmission medium

Question # 15

How does an operating system protect the passwords used for account logins?

The operating system performs a one-way hash of the passwords.

The operating system stores the passwords in a secret file that users cannot find.

The operating system encrypts the passwords, and decrypts them when needed.

The operating system stores all passwords in a protected segment of non-volatile memory.

Question # 16

You are the CIO for Avantes Finance International, a global finance company based in Geneva. You are responsible for network functions and logical security throughout the entire corporation. Your company has over 250 servers running Windows Server, 5000 workstations running Windows Vista, and 200 mobile users working from laptops on Windows 7.

Last week, 10 of your company ' s laptops were stolen from salesmen while at a conference in Amsterdam. These laptops contained proprietary company information. While doing damage assessment on the possible public relations nightmare this may become, a news story leaks about the stolen laptops and also that sensitive information from those computers was posted to a blog online.

What built-in Windows feature could you have implemented to protect the sensitive information on these laptops?

You should have used 3DES which is built into Windows

If you would have implemented Pretty Good Privacy (PGP) which is built into Windows, the sensitive information on the laptops would not have leaked out

You should have utilized the built-in feature of Distributed File System (DFS) to protect the sensitive information on the laptops

You could have implemented Encrypted File System (EFS) to encrypt the sensitive files on the laptops

Question # 17

Lee is using Wireshark to log traffic on his network. He notices a number of packets being directed to an internal IP from an outside IP where the packets are ICMP and their size is around 65, 536 bytes. What is Lee seeing here?

Lee is seeing activity indicative of a Smurf attack.

Most likely, the ICMP packets are being sent in this manner to attempt IP spoofing.

Lee is seeing a Ping of death attack.

This is not unusual traffic, ICMP packets can be of any size.