EC-COUNCIL EC-COUNCIL Certifications 312-50 Questions & Answers

• Question 81:

  What is the disadvantage of an automated vulnerability assessment tool?

  A. Ineffective

  B. Slow

  C. Prone to false positives

  D. Prone to false negatives

  E. Noisy

  Correct Answer: E

  Vulnerability assessment tools perform a good analysis of system vulnerabilities; however, they are noisy and will quickly trip IDS systems.

• Question 82:

  What is the proper response for a X-MAS scan if the port is open?

  A. SYN

  B. ACK

  C. FIN

  D. PSH

  E. RST

  F. No response

  Correct Answer: F

  Closed ports respond to a X-MAS scan by ignoring the packet.

• Question 83:

  What flags are set in a X-MAS scan?(Choose all that apply.

  A. SYN

  B. ACK

  C. FIN

  D. PSH

  E. RST

  F. URG

  Correct Answer: CDF

  FIN, URG, and PSH are set high in the TCP packet for a X-MAS scan

• Question 84:

  Which of the following is an automated vulnerability assessment tool.

  A. Whack a Mole

  B. Nmap

  C. Nessus

  D. Kismet

  E. Jill32

  Correct Answer: C

  Nessus is a vulnerability assessment tool.

• Question 85:

  John is using a special tool on his Linux platform that has a signature database and is therefore able to detect hundred of vulnerabilities in UNIX, Windows, and commonly-used web CGI scripts. Additionally, the database detects DDoS zombies and Trojans. What would be the name of this multifunctional tool?

  A. nmap

  B. hping

  C. nessus

  D. make

  Correct Answer: C

  Nessus is the world's most popular vulnerability scanner, estimated to be used by over 75,000 organizations world-wide. Nmap is mostly used for scanning, not for detecting vulnerabilities. Hping is a free packet generator and analyzer for the TCP/IP protocol and make is used to automatically build large applications on the *nix plattform.

• Question 86:

  What is the proper response for a X-MAS scan if the port is closed?

  A. SYN

  B. ACK

  C. FIN

  D. PSH

  E. RST

  F. No response

  Correct Answer: E

  Closed ports respond to a X-MAS scan with a RST.

• Question 87:

  What is the proper response for a FIN scan if the port is open?

  A. SYN

  B. ACK

  C. FIN

  D. PSH

  E. RST

  F. No response

  Correct Answer: F

  Open ports respond to a FIN scan by ignoring the packet in question.

• Question 88:

  What is the proper response for a FIN scan if the port is closed?

  A. SYN

  B. ACK

  C. FIN

  D. PSH

  E. RST

  Correct Answer: E

  Closed ports respond to a FIN scan with a RST.

• Question 89:

  Which of the following ICMP message types are used for destinations unreachables?

  B. 3

  C. 11

  D. 13

  E. 17

  Correct Answer: B

  Type 3 messages are used for unreachable messages. 0 is Echo Reply, 8 is Echo request, 11 is time exceeded, 13 is timestamp and 17 is subnet mask request. Learning these would be advisable for the test.

• Question 90:

  What are the default passwords used by SNMP?(Choose two.)

  A. Password

  B. SA

  C. Private

  D. Administrator

  E. Public

  F. Blank

  Correct Answer: CE

  Besides the fact that it passes information in clear text, SNMP also uses well-known passwords. Public and private are the default passwords used by SNMP.