Ethical hacking and countermeasures (EC0-350) Free Practice Test

Question 1

Which of the following network attacks takes advantage of weaknesses in the fragment reassembly functionality of the TCP/IP protocol stack?

A. SYN flood

B. Teardrop

C. Smurf attack

D. Ping of death

Correct Answer: B

Question 2

Who is an Ethical Hacker?

A. A person who hacks for defensive purposes

B. A person who hacks for offensive purposes

C. A person who hacks for an ethical cause

D. A person who hacks for ethical reasons

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which Type of scan sends a packets with no flags set? Select the Answer

A. Open Scan

B. Xmas Scan

C. Null Scan

D. Half-Open Scan

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Windump is the windows port of the famous TCPDump packet sniffer available on a variety of platforms. In order to use this tool on the Windows platform you must install a packet capture library.
What is the name of this library?

A. LibPCAP

B. NTPCAP

C. WinPCAP

D. PCAP

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Joel and her team have been going through tons of garbage, recycled paper, and other rubbish in order to find some information about the target they are attempting to penetrate. How would you call this type of activity?

A. Garbage Scooping

B. Scanning

C. Dumpster Diving

D. CI Gathering

Correct Answer: C

Question 6

Which type of scan measures a person's external features through a digital video camera?

A. Signature kinetics scan

B. Retinal scan

C. Facial recognition scan

D. Iris scan

Correct Answer: C

Question 7

In order to show improvement of security over time, what must be developed?

A. Taxonomy of vulnerabilities

B. Reports

C. Metrics

D. Testing tools

Correct Answer: C

Question 8

You have performed the traceroute below and notice that hops 19 and 20 both show the same IP address.
What can be inferred from this output?

A. A host based IDS

B. A Honeypot

C. A stateful inspection firewall

D. An application proxy firewall

Correct Answer: C

Question 9

SOAP services use which technology to format information?

A. SATA

B. XML

C. PCI

D. ISDN

Correct Answer: B

Question 10

Which cipher encrypts the plain text digit (bit or byte) one by one?

A. Block cipher

B. Modern cipher

C. Classical cipher

D. Stream cipher

Correct Answer: D

Question 11

Neil is an IT security consultant working on contract for Davidson Avionics. Neil has been hired to audit the network of Davidson Avionics. He has been given permission to perform any tests necessary. Neil has created a fake company ID badge and uniform. Neil waits by one of the company's entrance doors and follows an employee into the office after they use their valid access card to gain entrance. What type of social engineering attack has Neil employed here?

A. Neil is using the technique of reverse social engineering to gain access to the offices of Davidson Avionics

B. This type of social engineering attack is called man trapping

C. He has used a piggybacking technique to gain unauthorized access

D. Neil has used a tailgating social engineering attack to gain access to the offices

Correct Answer: D

Question 12

The SNMP Read-Only Community String is like a password. The string is sent along with each SNMP Get-Request and allows (or denies) access to a device. Most network vendors ship their equipment with a default password of "public". This is the so-called "default public community string". How would you keep intruders from getting sensitive information regarding the network devices using SNMP? (Select 2 answers)

A. Use your company name as the public community string replacing the default 'public'

B. The default configuration provided by device vendors is highly secure and you don't need to change anything

C. Enable SNMPv3 which encrypts username/password authentication

D. Enable IP filtering to limit access to SNMP device

Correct Answer: C,D

Welcome to TestSimulate

EC-COUNCIL Ethical hacking and countermeasures (EC0-350) Free Practice Test