EC-COUNCIL Ethical hacking and countermeasures - EC0-350 模擬練習
If you perform a port scan with a TCP ACK packet, what should an OPEN port return?
正解: B
Jeremy is web security consultant for Information Securitas. Jeremy has just been hired to perform contract work for a large state agency in Michigan. Jeremy's first task is to scan all the company's external websites. Jeremy comes upon a login page which appears to allow employees access to sensitive areas on the website. James types in the following statement in the username field:
SELECT * from Users where username='admin' ?AND password='' AND email like '%@testers.com%' What will the SQL statement accomplish?
SELECT * from Users where username='admin' ?AND password='' AND email like '%@testers.com%' What will the SQL statement accomplish?
正解: C
解説: (PassTest メンバーにのみ表示されます)
What statement is true regarding LM hashes?
正解: D
Samantha was hired to perform an internal security test of XYZ. She quickly realized that all networks are making use of switches instead of traditional hubs. This greatly limits her ability to gather information through network sniffing.
Which of the following techniques can she use to gather information from the switched network or to disable some of the traffic isolation features of the switch? (Choose two)
Which of the following techniques can she use to gather information from the switched network or to disable some of the traffic isolation features of the switch? (Choose two)
正解: A,B
解説: (PassTest メンバーにのみ表示されます)
Which of the following programming languages is most vulnerable to buffer overflow attacks?
正解: A
Jack Hacker wants to break into Brown Co.'s computers and obtain their secret double fudge cookie recipe. Jack calls Jane, an accountant at Brown Co., pretending to be an administrator from Brown Co. Jack tells Jane that there has been a problem with some accounts and asks her to verify her password with him ''just to double check our records.'' Jane does not suspect anything amiss, and parts with her password. Jack can now access Brown Co.'s computers with a valid user name and password, to steal the cookie recipe. What kind of attack is being illustrated here?
正解: E
One of the better features of NetWare is the use of packet signature that includes cryptographic signatures. The packet signature mechanism has four levels from 0 to 3.
In the list below which of the choices represent the level that forces NetWare to sign all packets?
In the list below which of the choices represent the level that forces NetWare to sign all packets?
正解: A
解説: (PassTest メンバーにのみ表示されます)
Destination unreachable administratively prohibited messages can inform the hacker to what?
正解: B
解説: (PassTest メンバーにのみ表示されます)
Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network. Which of these tools would do the SNMP enumeration he is looking for?
Select the best answers.
Select the best answers.
正解: B,C,E
解説: (PassTest メンバーにのみ表示されます)