EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 71:

  You have successfully run a buffer overflow attack against a default IIS installation running on a Windows 2000 Server. The server allows you to spawn a shell. In order to perform the actions you intend to do, you

  need elevated permission. You need to know what your current privileges are within the shell. Which of the following options would be your current privileges?

  A. Administrator

  B. IUSR_COMPUTERNAME

  C. LOCAL_SYSTEM

  D. Whatever account IIS was installed with

  Correct Answer: C

• Question 72:

  Henry is an attacker and wants to gain control of a system and use it to flood a target system with

  requests, so as to prevent legitimate users from gaining access.

  What type of attack is Henry using?

  A. Henry is executing commands or viewing data outside the intended target path

  B. Henry is using a denial of service attack which is a valid threat used by an attacker

  C. Henry is taking advantage of an incorrect configuration that leads to access with higher-than-expected privilege

  D. Henry uses poorly designed input validation routines to create or alter commands to gain access to unintended data or execute commands

  Correct Answer: B

• Question 73:

  Eve decides to get her hands dirty and tries out a Denial of Service attack that is relatively new to her. This time she envisages using a different kind of method to attack Brownies Inc. Eve tries to forge the packets and uses the broadcast address. She launches an attack similar to that of fraggle.

  What is the technique that Eve used in the case above?

  A. Smurf

  B. Bubonic

  C. SYN Flood

  D. Ping of Death

  Correct Answer: A

• Question 74:

  Peter is a Network Admin. He is concerned that his network is vulnerable to a smurf attack.

  What should Peter do to prevent a smurf attack? Select the best answer.

  A. He should disable unicast on all routers

  B. Disable multicast on the router

  C. Turn off fragmentation on his router

  D. Make sure all anti-virus protection is updated on all systems

  E. Make sure his router won't take a directed broadcast

  Correct Answer: E

• Question 75:

  John is using tokens for the purpose of strong authentication. He is not confident that his security is considerably strong.

  In the context of Session hijacking why would you consider this as a false sense of security?

  A. The token based security cannot be easily defeated.

  B. The connection can be taken over after authentication.

  C. A token is not considered strong authentication.

  D. Token security is not widely used in the industry.

  Correct Answer: B

• Question 76:

  A Buffer Overflow attack involves:

  A. Using a trojan program to direct data traffic to the target host's memory stack

  B. Flooding the target network buffers with data traffic to reduce the bandwidth available to legitimate users

  C. Using a dictionary to crack password buffers by guessing user names and passwords

  D. Poorly written software that allows an attacker to execute arbitrary code on a target system

  Correct Answer: D

• Question 77:

  When working with Windows systems, what is the RID of the true administrator account?

  A. 500

  B. 501

  C. 512

  D. 1001

  E. 1024

  F. 1000

  Correct Answer: A

• Question 78:

  If you send a SYN to an open port, what is the correct response?(Choose all correct answers.)

  A. SYN

  B. ACK

  C. FIN

  D. PSH

  Correct Answer: AB

• Question 79:

  When working with Windows systems, what is the RID of the true administrator account?

  A. 500

  B. 501

  C. 1000

  D. 1001

  E. 1024

  F. 512

  Correct Answer: A

• Question 80:

  You have been called to investigate a sudden increase in network traffic at XYZ. It seems that the traffic generated was too heavy that normal business functions could no longer be rendered to external employees and clients. After a quick investigation, you find that the computer has services running attached to TFN2k and Trinoo software.

  What do you think was the most likely cause behind this sudden increase in traffic?

  A. A distributed denial of service attack.

  B. A network card that was jabbering.

  C. A bad route on the firewall.

  D. Invalid rules entry at the gateway.

  Correct Answer: A