EC0-350

EC0-350 practice questions, page 5 of 15, with answer review and explanations.

Question 21

Which of the following techniques will identify if computer files have been changed?

  1. Network sniffing
  2. Permission sets
  3. Integrity checking hashes
  4. Firewall alerts

Question 22

Which system consists of a publicly available set of databases that contain domain name registration contact information?

  1. WHOIS
  2. IANA
  3. CAPTCHA
  4. IETF

Question 23

A penetration tester was hired to perform a penetration test for a bank. The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news articles online about the bank, watching what times the bank employees come into work and leave from work, searching the bank's job postings (paying special attention to IT related jobs), and visiting the local dumpster for the bank's corporate office. What phase of the penetration test is the tester currently in?

  1. Information reporting
  2. Vulnerability assessment
  3. Active information gathering
  4. Passive information gathering

Question 24

The following is part of a log file taken from the machine on the network with the IP address of 192.168.1.106: Time:Mar 13 17:30:15 Port:20 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:17 Port:21 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:19 Port:22 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:21 Port:23 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:22 Port:25 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:23 Port:80 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:30 Port:443 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP What type of activity has been logged?

  1. Port scan targeting 192.168.1.103
  2. Teardrop attack targeting 192.168.1.106
  3. Denial of service attack targeting 192.168.1.103
  4. Port scan targeting 192.168.1.106

Question 25

A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firm's public facing web servers. The engineer decides to start by using netcat to port 80. The engineer receives this output: HTTP/1.1 200 OK - Server: Microsoft-IIS/6 - Expires: Tue, 17 Jan 2011 01:41:33 GMT Date: Mon, 16 Jan 2011 01:41:33 GMT Content-Type: text/html - Accept-Ranges: bytes - Last-Modified: Wed, 28 Dec 2010 15:32:21 GMT ETag: "b0aac0542e25c31:89d" Content-Length: 7369 - Which of the following is an example of what the engineer performed?

  1. Cross-site scripting
  2. Banner grabbing
  3. SQL injection
  4. Whois database query