[Free] 2018(Jan) EnsurePass Pass4sure ECCouncil EC1-350 Dumps with VCE and PDF 161-170

Ensurepass.com : Ensure you pass the IT Exams
2018 Jan ECCouncil Official New Released EC1-350
100% Free Download! 100% Pass Guaranteed!
http://www.EnsurePass.com/EC1-350.html

Ethical Hacking and Countermeasures V7

Question No: 161 – (Topic 2)

A digital signature is simply a message that is encrypted with the public key instead of the private key.

  1. true

  2. false

Answer: B

Question No: 162 – (Topic 2)

Blane is a network security analyst for his company. From an outside IP, Blane performs an XMAS scan using Nmap. Almost every port scanned does not illicit a response. What can he infer from this kind of response?

  1. These ports are open because they do not illicit a response.

  2. He can tell that these ports are in stealth mode.

  3. If a port does not respond to an XMAS scan using NMAP, that port is closed.

  4. The scan was not performed correctly using NMAP since all ports, no matter what their state, will illicit some sort of response from an XMAS scan.

Answer: A

Question No: 163 – (Topic 2)

In TCP communications there are 8 flags; FIN, SYN, RST, PSH, ACK, URG, ECE, CWR. These flags have decimal numbers assigned to them:

FIN = 1

SYN = 2

RST = 4

PSH = 8

ACK = 16

URG = 32

ECE = 64

CWR =128

Example: To calculate SYN/ACK flag decimal value, add 2 (which is the decimal value of

the SYN flag) to 16 (which is the decimal value of the ACK flag), so the result would be 18. Based on the above calculation, what is the decimal value for XMAS scan?

  1. 23

  2. 24

  3. 41

  4. 64

Answer: C

Question No: 164 – (Topic 2)

A simple compiler technique used by programmers is to add a terminator #39;canary word#39; containing four letters NULL (0x00), CR (0x0d), LF (0x0a) and EOF (0xff) so that most string operations are terminated. If the canary word has been altered when the function returns, and the program responds by emitting an intruder alert into syslog, and then halts what does it indicate?

  1. A buffer overflow attack has been attempted

  2. A buffer overflow attack has already occurred

  3. A firewall has been breached and this is logged

  4. An intrusion detection system has been triggered

  5. The system has crashed

Answer: A

Question No: 165 – (Topic 2)

This is an example of whois record.

Ensurepass 2018 PDF and VCE

Sometimes a company shares a little too much information on their organization through public domain records. Based on the above whois record, what can an attacker do? (Select 2 answers)

  1. Search engines like Google, Bing will expose information listed on the WHOIS record

  2. An attacker can attempt phishing and social engineering on targeted individuals using the information from WHOIS record

  3. Spammers can send unsolicited e-mails to addresses listed in the WHOIS record

  4. IRS Agents will use this information to track individuals using the WHOIS record information

Answer: B,C

Question No: 166 – (Topic 2)

Neil is closely monitoring his firewall rules and logs on a regular basis. Some of the users have complained to Neil that there are a few employees who are visiting offensive web site during work hours, without any consideration for others. Neil knows that he has an up-to- date content filtering system and such access should not be authorized. What type of technique might be used by these offenders to access the Internet without restriction?

  1. They are using UDP that is always authorized at the firewall

  2. They are using HTTP tunneling software that allows them to communicate with protocols in a way it was not intended

  3. They have been able to compromise the firewall, modify the rules, and give themselves proper access

  4. They are using an older version of Internet Explorer that allow them to bypass the proxy server

Answer: B

Question No: 167 – (Topic 2)

In this attack, a victim receives an e-mail claiming from PayPal stating that their account has been disabled and confirmation is required before activation. The attackers then scam to collect not one but two credit card numbers, ATM PIN number and other personal details.

Ensurepass 2018 PDF and VCE

Ignorant users usually fall prey to this scam. Which of the following statement is incorrect

related to this attack?

  1. Do not reply to email messages or popup ads asking for personal or financial information

  2. Do not trust telephone numbers in e-mails or popup ads

  3. Review credit card and bank account statements regularly

  4. Antivirus, anti-spyware, and firewall software can very easily detect these type of attacks

  5. Do not send credit card numbers, and personal or financial information via e-mail

Answer: D

Question No: 168 – (Topic 2)

Bob is going to perform an active session hijack against Brownies Inc. He has found a target that allows session oriented connections (Telnet) and performs the sequence prediction on the target operating system. He manages to find an active session due to the high level of traffic on the network. What is Bob supposed to do next?

  1. Take over the session

  2. Reverse sequence prediction

  3. Guess the sequence numbers

  4. Take one of the parties offline

Answer: C

Question No: 169 – (Topic 2)

ViruXine.W32 virus hides their presence by changing the underlying executable code. This Virus code mutates while keeping the original algorithm intact, the code changes itself each time it runs, but the function of the code (its semantics) will not change at all.

Ensurepass 2018 PDF and VCE

Here is a section of the Virus code:

Ensurepass 2018 PDF and VCE

What is this technique called?

  1. Polymorphic Virus

  2. Metamorphic Virus

  3. Dravidic Virus

  4. Stealth Virus

Answer: A

Question No: 170 – (Topic 2)

quot;Testing the network using the same methodologies and tools employed by attackersquot; Identify the correct terminology that defines the above statement.

  1. Vulnerability Scanning

  2. Penetration Testing

  3. Security Policy Implementation

  4. Designing Network Security

Answer: B

100% Ensurepass Free Download!
Download Free Demo:EC1-350 Demo PDF
100% Ensurepass Free Guaranteed!
EC1-350 Dumps

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No