EC0-350 Exam Dumps - Ethical Hacking and Countermeasures V8

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 9

A penetration tester was hired to perform a penetration testÂ for aÂ bank.Â The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news articles online about the bank, watching what times the bank employees come into work and leave from work, searching the bank's job postings (paying special attention to IT related jobs), and visiting the local dumpster for the bank's corporate office. What phase of the penetration test is the tester currently in?

Information reporting

Vulnerability assessment

Active information gathering

Passive information gathering

Full Access

Question # 10

Which of the following is a characteristic of Public Key InfrastructureÂ (PKI)?

Public-key cryptosystems are faster thanÂ symmetric-key cryptosystems.

Public-key cryptosystems distribute public-keys within digital signatures.

Public-key cryptosystems do not require a secure key distribution channel.

Public-key cryptosystems do not provide technical non-repudiation via digital signatures.

Full Access

Question # 11

An attacker sniffs encrypted traffic from the network and is subsequently able to decrypt it. The attacker can now use which cryptanalytic technique to attempt to discover the encryption key?

Birthday attack

Plaintext attack

Meet in the middle attack

Chosen ciphertext attack

Full Access

Question # 12

Blane is a security analyst for a law firm. One of the lawyers needs to send out an email to a client but he wants to know if the email is forwarded on to any other recipients. The client is explicitly asked not to re-send the email since that would be a violation of the lawyer's and client's agreement for this particular case. What can Blane use to accomplish this?

He can use a split-DNS service to ensure the email is not forwarded on.

A service such as HTTrack would accomplish this.

Blane could use MetaGoofil tracking tool.

Blane can use a service such as ReadNotify tracking tool.

Full Access

Question # 13

Which property ensures that a hash function will not produce the same hashed value for two different messages?

Collision resistance

Bit length

Key strength

Entropy

Full Access

Question # 14

A company has publicly hosted web applications and an internal Intranet protected by a firewall.Â Which technique will help protect against enumeration?

Reject all invalid email received via SMTP.

Allow full DNS zone transfers.

Remove A records for internal hosts.

Enable null session pipes.

Full Access

Question # 15

Which statement isÂ TRUEÂ regarding network firewalls preventing Web Application attacks?

Network firewalls can prevent attacks because they can detect malicious HTTP traffic.

Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.

Network firewalls can prevent attacks if they are properly configured.

Network firewalls cannot prevent attacks becauseÂ they areÂ too complex to configure.

Full Access