EC-COUNCIL EC-COUNCIL Certifications EC0-349 Questions & Answers

• Question 281:

  On Linux/Unix based Web servers, what privilege should the daemon service be run under?

  A. Guest

  B. Root

  C. You cannot determine what privilege runs the daemon service

  D. Something other than root

  Correct Answer: D

• Question 282:

  What will the following URL produce in an unpatched IIS Web Server?

  http://www.thetargetsite.com/scripts/..% co%af../..%co%af../windows/system32/cmd.exe?/c+dir+c:\

  A. Directory listing of C: drive on the web server

  B. Insert a Trojan horse into the C: drive of the web server

  C. Execute a buffer flow in the C: drive of the web server

  D. Directory listing of the C:\windows\system32 folder on the web server

  Correct Answer: A

• Question 283:

  What is kept in the following directory? HKLM\SECURITY\Policy\Secrets

  A. Cached password hashes for the past 20 users

  B. Service account passwords in plain text

  C. IAS account names and passwords D. Local store PKI Kerberos certificates

  Correct Answer: B

• Question 284:

  Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM files on a computer. Where should Harold navigate on the computer to find the file?

  A. %systemroot%\system32\LSA

  B. %systemroot%\system32\drivers\etc

  C. %systemroot%\repair

  D. %systemroot%\LSA

  Correct Answer: C

• Question 285:

  You are trying to locate Microsoft Outlook Web Access Default Portal using Google search on the Internet. What search string will you use to locate them?

  A. allinurl:"exchange/logon.asp"

  B. intitle:"exchange server"

  C. locate:"logon page"

  D. outlook:"search"

  Correct Answer: A

• Question 286:

  When setting up a wireless network with multiple access points, why is it important to set each access point on a different channel?

  A. Multiple access points can be set up on the same channel without any issues

  B. Avoid over-saturation of wireless signals

  C. So that the access points will work on different frequencies

  D. Avoid cross talk

  Correct Answer: D

• Question 287:

  In Linux, what is the smallest possible shellcode?

  A. 24 bytes

  B. 8 bytes

  C. 800 bytes

  D. 80 bytes

  Correct Answer: A

• Question 288:

  Jim performed a vulnerability analysis on his network and found no potential problems. He runs another utility that executes exploits against his system to verify the results of the vulnerability test. The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis?

  A. False negatives

  B. False positives

  C. True negatives

  D. True positives

  Correct Answer: A

• Question 289:

  You work as a penetration tester for Hammond Security Consultants. You are currently working on a contract for the state government of California. Your next step is to initiate a DoS attack on their network. Why would you want to initiate a DoS attack on a system you are testing?

  A. Show outdated equipment so it can be replaced

  B. List weak points on their network

  C. Use attack as a launching point to penetrate deeper into the network

  D. Demonstrate that no system can be protected against DoS attacks

  Correct Answer: B

• Question 290:

  Why are Linux/Unix based computers better to use than Windows computers for idle scanning?

  A. Linux/Unix computers are easier to compromise

  B. Linux/Unix computers are constantly talking

  C. Windows computers are constantly talking

  D. Windows computers will not respond to idle scans

  Correct Answer: C