312-50 practice questions 591–600

1. Question 591 · 888 in bank

   What tool can crack Windows SMB passwords simply by listening to network traffic?

   • AThis is not possible
   • BNetbus
   • CNTFSDOS
   • DL0phtcrack

   Show answer

   Answer: A

   Next question

2. Question 592 · 888 in bank

   Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it begins to close. What just happened?

   • AMasquerading
   • BTailgating
   • CPhishing
   • DWhaling

   Show answer

   Answer: B

   Next question

3. Question 593 · 888 in bank

   During an attempt to perform an SQL injection attack, a certified ethical hacker is focusing on the identification of database engine type by generating an ODBC error. The ethical hacker, after injecting various payloads, finds that the web application returns a standard, generic error message that does not reveal any detailed database information. Which of the following techniques would the hacker consider next to obtain useful information about the underlying database?

   • AUtilize a blind injection technique that uses time delays or error signatures to extract information
   • BTry to insert a string value where a number is expected in the input field
   • CAttempt to compromise the system through OS-level command shell execution
   • DUse the UNION operator to combine the result sets of two or more SELECT statements

   Show answer

   Answer: A

   Next question

4. Question 594 · 888 in bank

   You are attempting to crack LM Manager hashed from Windows 2000 SAM file. You will be using LM Brute force hacking tool for decryption. What encryption algorithm will you be decrypting?

   • AMD4
   • BDES
   • CSHA
   • DSSL

   Show answer

   Answer: B

   Next question

5. Question 595 · 888 in bank

   Judy created a forum. One day, she discovers that a user is posting strange images without writing comments. She immediately calls a security expert, who discovers that the following code is hidden behind those images:

   

   What issue occurred for the users who clicked on the image?

   • AThis php file silently executes the code and grabs the user's session cookie and session ID.
   • BThe code redirects the user to another site.
   • CThe code injects a new cookie to the browser.
   • DThe code is a virus that is attempting to gather the user's username and password.

   Show answer

   Answer: A

   Next question

6. Question 596 · 888 in bank

   During an ethical hacking engagement, you have been assigned to evaluate the security of a large organization's network. While examining the network traffic, you notice numerous incoming requests on various ports from different locations that show a pattern of an orchestrated attack. Based on your analysis, you deduce that the requests are likely to be automated scripts being run by unskilled hackers. What type of hacker classification does this scenario most likely represent?

   • AScript Kiddies trying to compromise the system using pre-made scripts.
   • BGray Hats testing system vulnerabilities to help vendors improve security.
   • CWhite Hats conducting penetration testing to identify security weaknesses.
   • DBlack Hats trying to exploit system vulnerabilities for malicious intent.

   Show answer

   Answer: A

   Next question

7. Question 597 · 888 in bank

   Suppose that you test an application for the SQL injection vulnerability. You know that the backend database is based on Microsoft SQL Server. In the login/ password form, you enter the following credentials:

   

   Based on the above credentials, which of the following SQL commands are you expecting to be executed by the server, if there is indeed an SQL injection vulnerability?

   • Aselect * from Users where UserName = 'attack' ' or 1=1 -- and UserPassword = '123456'
   • Bselect * from Users where UserName = 'attack' or 1=1 -- and UserPassword = '123456'
   • Cselect * from Users where UserName = 'attack or 1=1 -- and UserPassword = '123456'
   • Dselect * from Users where UserName = 'attack' or 1=1 --' and UserPassword = '123456'

   Show answer

   Answer: D

   Next question

8. Question 598 · 888 in bank

   Your company suspects a potential security breach and has hired you as a Certified Ethical Hacker to investigate. You discover evidence of footprinting through search engines and advanced Google hacking techniques. The attacker utilized Google search operators to extract sensitive information. You further notice queries that indicate the use of the Google Hacking Database (CHDB) with an emphasis on VPN footprinting. Which of the following Google advanced search operators would be the LEAST useful in providing the attacker with sensitive VPN-related information?

   • Alocation: This operator finds information for a specific location
   • Binurl: This operator restricts the results to only the pages containing the specified word in the URL
   • Clink: This operator searches websites or pages that contain links to the specified website or page
   • Dintitle: This operator restricts results to only the pages containing the specified term in the title

   Show answer

   Answer: A

   Next question

9. Question 599 · 888 in bank

   Which of the following is the primary objective of a rootkit?

   • AIt opens a port to provide an unauthorized service
   • BIt creates a buffer overflow
   • CIt replaces legitimate programs
   • DIt provides an undocumented opening in a program

   Show answer

   Answer: C

   Next question

10. Question 600 · 888 in bank

    A friend of yours tells you that he downloaded and executed a file that was sent to him by a coworker. Since the file did nothing when executed, he asks you for help because he suspects that he may have installed a trojan on his computer. What tests would you perform to determine whether his computer is infected?

    • AUpload the file to VirusTotal.
    • BYou do not check; rather, you immediately restore a previous snapshot of the operating system.
    • CUse ExifTool and check for malicious content.
    • DUse netstat and check for outgoing connections to strange IP addresses or domains.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 591. 888 questions available.