EC-COUNCIL EC-COUNCIL Certifications 312-50 Questions & Answers

• Question 151:

  Under what conditions does a secondary name server request a zone transfer from a primary name server?

  A. When a primary SOA is higher that a secondary SOA

  B. When a secondary SOA is higher that a primary SOA

  C. When a primary name server has had its service restarted

  D. When a secondary name server has had its service restarted

  E. When the TTL falls to zero

  Correct Answer: A

  Understanding DNS is critical to meeting the requirements of the CEH. When the serial number that is within the SOA record of the primary server is higher than the Serial number within the SOA record of the secondary DNS server, a zone transfer will take place.

• Question 152:

  MX record priority increases as the number increases.(True/False.

  A. True

  B. False

  Correct Answer: B

  The highest priority MX record has the lowest number.

• Question 153:

  Which of the following tools can be used to perform a zone transfer?

  A. NSLookup

  B. Finger

  C. Dig

  D. Sam Spade

  E. Host

  F. Netcat

  G. Neotrace

  Correct Answer: ACDE

  There are a number of tools that can be used to perform a zone transfer. Some of these include: NSLookup, Host, Dig, and Sam Spade.

• Question 154:

  One of your team members has asked you to analyze the following SOA record. What is the version? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.

  A. 200303028

  B. 3600

  C. 604800

  D. 2400

  E. 60

  F. 4800

  Correct Answer: A

  The SOA starts with the format of YYYYMMDDVV where VV is the version.

• Question 155:

  One of your team members has asked you to analyze the following SOA record. What is the TTL? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.

  A. 200303028

  B. 3600

  C. 604800

  D. 2400

  E. 60

  F. 4800

  Correct Answer: D

  The SOA includes a timeout value. This value can tell an attacker how long any DNS "poisoning" would last. It is the last set of numbers in the record.

• Question 156:

  What is the proper response for a NULL scan if the port is closed?

  A. SYN

  B. ACK

  C. FIN

  D. PSH

  E. RST

  F. No response

  Correct Answer: E

  Closed ports respond to a NULL scan with a reset.

• Question 157:

  What is the following command used for? net use \targetipc$ "" /u:""

  A. Grabbing the etc/passwd file

  B. Grabbing the SAM

  C. Connecting to a Linux computer through Samba.

  D. This command is used to connect as a null session

  E. Enumeration of Cisco routers

  Correct Answer: D

  The null session is one of the most debilitating vulnerabilities faced by Windows. Null sessions can be established through port 135, 139, and 445.

• Question 158:

  Which address translation scheme would allow a single public IP address to always correspond to a single machine on an internal network, allowing "server publishing"?

  A. Overloading Port Address Translation

  B. Dynamic Port Address Translation

  C. Dynamic Network Address Translation

  D. Static Network Address Translation

  Correct Answer: D

  Mapping an unregistered IP address to a registered IP address on a one-to-one basis. Particularly useful when a device needs to be accessible from outside the network.

  

• Question 159:

  Peter extracts the SIDs list from Windows 2000 Server machine using the hacking tool "SIDExtractor". Here is the output of the SIDs:

  s-1-5-21-1125394485-807628933-54978560-100Johns s-1-5-21-1125394485-807628933-54978560-652Rebecca s-1-5-21-1125394485-807628933-54978560-412Sheela s-1-5-21-1125394485-807628933-54978560-999Shawn s-1-5-21-1125394485-807628933-54978560-777Somia s-1-5-21-1125394485-807628933-54978560-500chang s-1-5-21-1125394485-807628933-54978560-555Micah

  From the above list identify the user account with System Administrator privileges.

  A. John

  B. Rebecca

  C. Sheela

  D. Shawn

  E. Somia

  F. Chang

  G. Micah

  Correct Answer: F

  The SID of the built-in administrator will always follow this example: S-1-5-domain-500

• Question 160:

  Bob is acknowledged as a hacker of repute and is popular among visitors of "underground" sites. Bob is willing to share his knowledge with those who are willing to learn, and many have expressed their interest in learning from him. However, this knowledge has a risk associated with it, as it can be used for malevolent attacks as well.

  In this context, what would be the most affective method to bridge the knowledge gap between the "black" hats or crackers and the "white" hats or computer security professionals? (Choose the test answer)

  A. Educate everyone with books, articles and training on risk analysis, vulnerabilities and safeguards.

  B. Hire more computer security monitoring personnel to monitor computer systems and networks.

  C. Make obtaining either a computer security certification or accreditation easier to achieve so more individuals feel that they are a part of something larger than life.

  D. Train more National Guard and reservist in the art of computer security to help out in times of emergency or crises.

  Correct Answer: A

  Bridging the gap would consist of educating the white hats and the black hats equally so that their knowledge is relatively the same. Using books, articles, the internet, and professional training seminars is a way of completing this goal.