312-50 Exam Dumps - Certified Ethical Hacker Exam

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
Next
Last >>

Question # 17

Which of the following describes the characteristics of a Boot Sector Virus?

Moves the MBR to another location on the RAM and copies itself to the original location of the MBR

Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

Modifies directory table entries so that directory entries point to the virus code instead of the actual program

Overwrites the original MBR and only executes the new virus code

Full Access

Question # 18

Which statement is TRUE regarding network firewalls preventing Web Application attacks?

Network firewalls can prevent attacks because they can detect malicious HTTP traffic.

Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.

Network firewalls can prevent attacks if they are properly configured.

Network firewalls cannot prevent attacks because they are too complex to configure.

Full Access

Question # 19

A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the corporate network. What tool should the analyst use to perform a Blackjacking attack?

Paros Proxy

BBProxy

BBCrack

Blooover

Full Access

Question # 20

An attacker has been successfully modifying the purchase price of items purchased on the company's web site. The security administrators verify the web server and Oracle database have not been compromised directly. They have also verified the Intrusion Detection System (IDS) logs and found no attacks that could have caused this. What is the mostly likely way the attacker has been able to modify the purchase price?

By using SQL injection

By changing hidden form values

By using cross site scripting

By utilizing a buffer overflow attack

Full Access

Question # 21

In order to show improvement of security over time, what must be developed?

Reports

Testing tools

Metrics

Taxonomy of vulnerabilities

Full Access