EC-COUNCIL EC-COUNCIL Certifications 312-49 Questions & Answers

• Question 351:

  What are the security risks of running a "repair" installation for Windows XP?

  A. Pressing Shift+F10gives the user administrative rights

  B. Pressing Shift+F1gives the user administrative rights

  C. Pressing Ctrl+F10 gives the user administrative rights

  D. There are no security risks when running the "repair" installation for Windows XP

  Correct Answer: A

• Question 352:

  You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to accomplish here?

  A. Poison the DNS records with false records

  B. Enumerate MX and A records from DNS

  C. Establish a remote connection to the Domain Controller

  D. Enumerate domain user accounts and built-in groups

  Correct Answer: D

• Question 353:

  Jason has set up a honeypot environment by creating a DMZ that has no physical or logical access to his production network. In this honeypot, he has placed a server running Windows Active Directory. He has also placed a Web server in the DMZ that services a number of web pages that offer visitors a chance to download sensitive information by clicking on a button. A week later, Jason finds in his network logs how an intruder accessed the honeypot and downloaded sensitive information. Jason uses the logs to try and prosecute the intruder for stealing sensitive corporate information. Why will this not be viable?

  A. Entrapment

  B. Enticement

  C. Intruding into a honeypot is not illegal

  D. Intruding into a DMZ is not illegal

  Correct Answer: A

• Question 354:

  Software firewalls work at which layer of the OSI model?

  A. Application

  B. Network

  C. Transport

  D. Data Link

  Correct Answer: D

• Question 355:

  After passing her CEH exam, Carol wants to ensure that her network is completely secure. She implements a DMZ, stateful firewall, NAT, IPSEC, and a packet filtering firewall. Since all security measures were taken, none of the hosts on her network can reach the Internet. Why is that?

  A. Stateful firewalls do not work with packet filtering firewalls

  B. NAT does not work with stateful firewalls

  C. IPSEC does not work with packet filtering firewalls

  D. NAT does not work with IPSEC

  Correct Answer: D

• Question 356:

  You just passed your ECSA exam and are about to start your first consulting job running security audits for a financial institution in Los Angeles. The IT manager of the company you will be working for tries to see if you remember your ECSA class. He asks about the methodology you will be using to test the company's network. How would you answer?

  A. Microsoft Methodology

  B. Google Methodology

  C. IBM Methodology

  D. LPT Methodology

  Correct Answer: D

• Question 357:

  You are running through a series of tests on your network to check for any security vulnerabilities.

  After normal working hours, you initiate a DoS attack against your external firewall. The firewall Quickly

  freezes up and becomes unusable. You then initiate an FTP connection from an external IP into your

  internal network. The connection is successful even though you have FTP blocked at the external firewall.

  What has happened?

  A. The firewall failed-bypass

  B. The firewall failed-closed

  C. The firewall ACL has been purged

  D. The firewall failed-open

  Correct Answer: D

• Question 358:

  When setting up a wireless network with multiple access points, why is it important to set each access point on a different channel?

  A. Multiple access points can be set up on the same channel without any issues

  B. Avoid over-saturation of wireless signals

  C. So that the access points will work on different frequencies

  D. Avoid cross talk

  Correct Answer: D

• Question 359:

  Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM files on a computer. Where should Harold navigate on the computer to find the file?

  A. %systemroot%\system32\LSA

  B. %systemroot%\system32\drivers\etc

  C. %systemroot%\repair

  D. %systemroot%\LSA

  Correct Answer: C

• Question 360:

  You are trying to locate Microsoft Outlook Web Access Default Portal using Google search on the Internet. What search string will you use to locate them?

  A. allinurl:"exchange/logon.asp"

  B. intitle:"exchange server"

  C. locate:"logon page"

  D. outlook:"search"

  Correct Answer: A