EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 351:

  The Open Web Application Security Project (OWASP) is the worldwide not-for-profit charitable organization focused on improving the security of software. What item is the primary concern on OWASP's Top Ten Project Most Critical Web Application Security Risks?

  A. Injection

  B. Cross Site Scripting

  C. Cross Site Request Forgery

  D. Path disclosure

  Correct Answer: A

  The top item of the OWASP 2013 OWASP's Top Ten Project Most Critical Web Application Security Risks is injection. Injection flaws, such as SQL, OS, and LDAP injection occur when untrusted data is sent to an interpreter as part of a command or query. The attacker's hostile data can trick the interpreter into executing unintended commands or accessing data without proper authorization.

  References: https://www.owasp.org/index.php/Top_10_2013-Top_10

• Question 352:

  Port scanning can be used as part of a technical assessment to determine network vulnerabilities. The TCP XMAS scan is used to identify listening ports on the targeted system.

  If a scanned port is open, what happens?

  A. The port will ignore the packets.

  B. The port will send an RST.

  C. The port will send an ACK.

  D. The port will send a SYN.

  Correct Answer: A

  An attacker uses a TCP XMAS scan to determine if ports are closed on the target machine. This scan type is accomplished by sending TCP segments with the all flags sent in the packet header, generating packets that are illegal based on RFC 793. The RFC 793 expected behavior is that any TCP segment with an outof-state Flag sent to an open port is discarded, whereas segments with out-of-state flags sent to closed ports should be handled with a RST in response. This behavior should allow an attacker to scan for closed ports by sending certain types of rule-breaking packets (out of sync or disallowed by the TCB) and detect closed ports via RST packets.

  References: https://capec.mitre.org/data/definitions/303.html

• Question 353:

  Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it begins to close.

  What just happened?

  A. Piggybacking

  B. Masqurading

  C. Phishing

  D. Whaling

  Correct Answer: A

  In security, piggybacking refers to when a person tags along with another person who is authorized to gain entry into a restricted area, or pass a certain checkpoint.

  References: https://en.wikipedia.org/wiki/Piggybacking_(security)

• Question 354:

  A hacker has successfully infected an internet-facing server which he will then use to send junk mail, take part in coordinated attacks, or host junk email content.

  Which sort of trojan infects this server?

  A. Botnet Trojan

  B. Turtle Trojans

  C. Banking Trojans

  D. Ransomware Trojans

  Correct Answer: A

  In computer science, a zombie is a computer connected to the Internet that has been compromised by a hacker, computer virus or trojan horse and can be used to perform malicious tasks of one sort or another under remote direction. Botnets of zombie computers are often used to spread e-mail spam and launch denial-of-service attacks. Most owners of zombie computers are unaware that their system is being used in this way. Because the owner tends to be unaware, these computers are metaphorically compared to zombies. A coordinated DDoS attack by multiple botnet machines also resembles a zombie horde attack.

• Question 355:

  You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions.

  Which command-line utility are you most likely to use?

  A. Grep

  B. Notepad

  C. MS Excel

  D. Relational Database

  Correct Answer: A

  grep is a command-line utility for searching plain-text data sets for lines matching a regular expression.

  References: https://en.wikipedia.org/wiki/Grep

• Question 356:

  env x=`(){ :;};echo exploit` bash -c 'cat /etc/passwd' What is the Shellshock bash vulnerability attempting to do on a vulnerable Linux host?

  A. Display passwd content to prompt

  B. Removes the passwd file

  C. Changes all passwords in passwd

  D. Add new user to the passwd file

  Correct Answer: A

  To extract private information, attackers are using a couple of techniques. The simplest extraction attacks are in the form: () {:;}; /bin/cat /etc/passwd That reads the password file /etc/passwd, and adds it to the response from the web server. So an attacker injecting this code through the Shellshock vulnerability would see the password file dumped out onto their screen as part of the web page returned.

  References: https://blog.cloudflare.com/inside-shellshock/

• Question 357:

  What is the best description of SQL Injection?

  A. It is an attack used to gain unauthorized access to a database.

  B. It is an attack used to modify code in an application.

  C. It is a Man-in-the-Middle attack between your SQL Server and Web App Server.

  D. It is a Denial of Service Attack.

  Correct Answer: A

  SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker).

  References: https://en.wikipedia.org/wiki/SQL_injection

• Question 358:

  As a Certified Ethical Hacker, you were contracted by a private firm to conduct an external security assessment through penetration testing.

  What document describes the specifics of the testing, the associated violations, and essentially protects both the organization's interest and your liabilities as a tester?

  A. Terms of Engagement

  B. Project Scope

  C. Non-Disclosure Agreement

  D. Service Level Agreement

  Correct Answer: A

• Question 359:

  Which of the following is not a Bluetooth attack?

  A. Bluedriving

  B. Bluejacking

  C. Bluesmacking

  D. Bluesnarfing

  Correct Answer: A

• Question 360:

  You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration?

  alert tcp any any -> 192.168.100.0/24 21 (msg: "FTP on the network!";)

  A. An Intrusion Detection System

  B. A firewall IPTable

  C. A Router IPTable

  D. FTP Server rule

  Correct Answer: A

  Snort is an open source network intrusion detection system (NIDS) for networks .

  Snort rule example:

  This example is a rule with a generator id of 1000001. alert tcp any any -> any 80 (content:"BOB";

  gid:1000001; sid:1; rev:1;)

  References: http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node31.html