312-50 Online Practice Questions and Answers

What is a primary advantage a hacker gains by using encryption or programs such as Loki?

A. It allows an easy way to gain administrator rights

B. It is effective against Windows computers

C. It slows down the effective response of an IDS

D. IDS systems are unable to decrypt it

E. Traffic will not be modified in transit

While probing an organization you discover that they have a wireless network. From your attempts to connect to the WLAN you determine that they have deployed MAC filtering by using ACL on the access points. What would be the easiest way to circumvent and communicate on the WLAN?

A. Attempt to crack the WEP key using Airsnort.

B. Attempt to brute force the access point and update or delete the MAC ACL.

C. Steel a client computer and use it to access the wireless network.

D. Sniff traffic if the WLAN and spoof your MAC address to one that you captured.

Paul has just finished setting up his wireless network. He has enabled numerous security features such as changing the default SSID, enabling WPA encryption and enabling MAC filtering on hi wireless router. Paul notices when he uses his wireless connection, the speed is sometimes 54 Mbps and sometimes it is only 24mbps or less. Paul connects to his wireless router's management utility and notices that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the router's logs and notices that the unfamiliar machine has the same MAC address as his laptop.

What is Paul seeing here?

A. MAC Spoofing

B. Macof

C. ARP Spoofing

D. DNS Spoofing

Which of the following is the best way an attacker can passively learn about technologies used in an organization?

A. By sending web bugs to key personnel

B. By webcrawling the organization web site

C. By searching regional newspapers and job databases for skill sets technology hires need to possess in the organization

D. By performing a port scan on the organization's web site

A Buffer Overflow attack involves:

A. Using a trojan program to direct data traffic to the target host's memory stack

B. Flooding the target network buffers with data traffic to reduce the bandwidth available to legitimate users

C. Using a dictionary to crack password buffers by guessing user names and passwords

D. Poorly written software that allows an attacker to execute arbitrary code on a target system

Erik notices a big increase in UDP packets sent to port 1026 and 1027 occasionally. He enters the following at the command prompt.

$ nc -l -p 1026 -u -v

In response, he sees the following message.

cell(?(c)????STOPALERT77STOP! WINDOWS REQUIRES IMMEDIATE ATTENTION.

Windows has found 47 Critical Errors.

To fix the errors please do the following:

1.

Download Registry Repair from: www.reg-patch.com

2.

Install Registry Repair

3.

Run Registry Repair

4.

Reboot your computer

FAILURE TO ACT NOW MAY LEAD TO DATA LOSS AND CORRUPTION!

What would you infer from this alert?

A. The machine is redirecting traffic to www.reg-patch.com using adware

B. It is a genuine fault of windows registry and the registry needs to be backed up

C. An attacker has compromised the machine and backdoored ports 1026 and 1027

D. It is a messenger spam. Windows creates a listener on one of the low dynamic ports from 1026 to 1029 and the message usually promotes malware disguised as legitimate utilities

You are the security administrator for a large online auction company based out of Los Angeles. After getting your ENSA CERTIFICATION last year, you have steadily been fortifying your network's security including training OS hardening and network security. One of the last things you just changed for security reasons was to modify all the built-in administrator accounts on the local computers of PCs and in Active Directory. After through testing you found and no services or programs were affected by the name changes.

Your company undergoes an outside security audit by a consulting company and they said that even through all the administrator account names were changed, the accounts could still be used by a clever hacker to gain unauthorized access. You argue with the auditors and say that is not possible, so they use a tool and show you how easy it is to utilize the administrator account even though its name was changed.

What tool did the auditors use?

A. sid2user

B. User2sid

C. GetAcct

D. Fingerprint

War dialing is a very old attack and depicted in movies that were made years ago. Why would a modem security tester consider using such an old technique?

A. It is cool, and if it works in the movies it must work in real life.

B. It allows circumvention of protection mechanisms by being on the internal network.

C. It allows circumvention of the company PBX.

D. A good security tester would not use such a derelict technique.

You are footprinting an organization to gather competitive intelligence. You visit the company's website for contact information and telephone numbers but do not find it listed there. You know that they had the entire staff directory listed on their website 12 months ago but not it is not there.

How would it be possible for you to retrieve information from the website that is outdated?

A. Visit google's search engine and view the cached copy.

B. Visit Archive.org web site to retrieve the Internet archive of the company's website.

C. Crawl the entire website and store them into your computer.

D. Visit the company's partners and customers website for this information.

NSLookup is a good tool to use to gain additional information about a target network. What does the following command accomplish? nslookup

> server

> set type =any

> ls -d

A. Enables DNS spoofing

B. Loads bogus entries into the DNS table

C. Verifies zone security

D. Performs a zone transfer

E. Resets the DNS cache