EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 51:

  Peter extracts the SIDs list from Windows 2000 Server machine using the hacking tool "SIDExtractor". Here is the output of the SIDs:

  

  From the above list identify the user account with System Administrator privileges.

  A. John

  B. Rebecca

  C. Sheela

  D. Shawn

  E. Somia

  F. Chang

  G. Micah

  Correct Answer: F

• Question 52:

  Null sessions are un-authenticated connections (not using a username or password.) to an NT or 2000 system. Which TCP and UDP ports must you filter to check null sessions on your network?

  A. 137 and 139

  B. 137 and 443

  C. 139 and 443

  D. 139 and 445

  Correct Answer: D

• Question 53:

  _________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.

  A. Trojan

  B. RootKit

  C. DoS tool

  D. Scanner

  E. Backdoor

  Correct Answer: B

• Question 54:

  Fingerprinting an Operating System helps a cracker because:

  A. It defines exactly what software you have installed

  B. It opens a security-delayed window based on the port being scanned

  C. It doesn't depend on the patches that have been applied to fix existing security holes

  D. It informs the cracker of which vulnerabilities he may be able to exploit on your system

  Correct Answer: D

• Question 55:

  What kind of detection techniques is being used in antivirus softwares that identifies malware by collecting data from multiple protected systems and instead of analyzing files locally it's made on the premiers environment-

  A. VCloud based

  B. Honypot based

  C. Behaviour based

  D. Heuristics based

  Correct Answer: A

• Question 56:

  What is GINA?

  A. Gateway Interface Network Application

  B. GUI Installed Network Application CLASS

  C. Global Internet National Authority (G-USA)

  D. Graphical Identification and Authentication DLL

  Correct Answer: D

• Question 57:

  Study the snort rule given below:

  

  From the options below, choose the exploit against which this rule applies.

  A. WebDav

  B. SQL Slammer

  C. MS Blaster

  D. MyDoom

  Correct Answer: C

• Question 58:

  Which of the following tools can be used to perform a zone transfer?

  A. NSLookup

  B. Finger

  C. Dig

  D. Sam Spade

  E. Host

  F. Netcat

  G. Neotrace

  Correct Answer: ACDE

• Question 59:

  This kind of password cracking method uses word lists in combination with numbers and special characters:

  A. Hybrid

  B. Linear

  C. Symmetric

  D. Brute Force

  Correct Answer: A

• Question 60:

  Susan has attached to her company's network. She has managed to synchronize her boss's sessions with that of the file server. She then intercepted his traffic destined for the server, changed it the way she wanted to and then placed it on the server in his home directory.

  What kind of attack is Susan carrying on?

  A. A sniffing attack

  B. A spoofing attack

  C. A man in the middle attack

  D. A denial of service attack

  Correct Answer: C