312-50V13 Exam Questions

Susan has attached to her company's network. She has managed to synchronize her boss's sessions with that of the file server. She then intercepted his traffic destined for the serv...

Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able...

Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice...

Which of the following represents the initial two commands that an IRC client sends to join an IRC network?

Study the following log extract and identify the attack.

Null sessions are un-authenticated connections (not using a username or password.) to an NT or 2000 system. Which TCP and UDP ports must you filter to check null sessions on your n...

The following is an entry captured by a network IDS. You are assigned the task of analyzing this entry. You notice the value 0x90, which is the most common NOOP instruction for the...

Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal? c:\> cmd /c type c:\winnt\repair\sam > c:\har.txt Volume in drive C...

As a securing consultant, what are some of the things you would recommend to a company to ensure DNS security?

Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?

What tool can crack Windows SMB passwords simply by listening to network traffic?

A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network. What are some things he can do to prevent it? Select the best answers.

Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network. Which of these tools would do the SNMP enum...

If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack i...

Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm througho...

Study the snort rule given below: From the options below, choose the exploit against which this rule applies.

Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored?

A user on your Windows 2000 network has discovered that he can use L0phtcrack to sniff the SMB exchanges which carry user logons. The user is plugged into a hub with 23 other syste...

You are attempting to crack LM Manager hashed from Windows 2000 SAM file. You will be using LM Brute force hacking tool for decryption. What encryption algorithm will you be decryp...

In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtC...

What is the algorithm used by LM for Windows2000 SAM?

E-mail scams and mail fraud are regulated by which of the following?

Which of the following LM hashes represent a password of less than 8 characters? (Choose two.)

Which of the following is the primary objective of a rootkit?

This kind of password cracking method uses word lists in combination with numbers and special characters:

_________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.

What is the BEST alternative if you discover that a rootkit has been installed on one of your computers?

What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?

How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?

When discussing passwords, what is considered a brute force attack?

Which of the following are well known password-cracking programs?

Password cracking programs reverse the hashing process to recover passwords. (True/False.)

While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an atta...

Windows LAN Manager (LM) hashes are known to be weak. Which of the following are known weaknesses of LM? (Choose three.)

You have retrieved the raw hash values from a Windows 2000 Domain Controller. Using social engineering, you come to know that they are enforcing strong passwords. You understand th...

An attacker runs netcat tool to transfer a secret file between two hosts. He is worried about information being sniffed on the network. How would the attacker use netcat to encrypt...

Fingerprinting an Operating System helps a cracker because:

In the context of Windows Security, what is a 'null' user?

What does the following command in netcat do? nc ­l ­u ­p55555 < /etc/passwd

What hacking attack is challenge/response authentication used to prevent?

In this attack, a victim receives an e-mail claiming from PayPal stating that their account has been disabled and confirmation is required before activation. The attackers then sca...

Bob is going to perform an active session hijack against Brownies Inc. He has found a target that allows session oriented connections (Telnet) and performs the sequence prediction...

ViruXine.W32 virus hides their presence by changing the underlying executable code. This Virus code mutates while keeping the original algorithm intact, the code changes itself eac...

Identify the correct terminology that defines the above statement.

Nathan is testing some of his network devices. Nathan is using Macof to try and flood the ARP cache of these switches. If these switches' ARP cache is successfully flooded, what wi...

You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c What is the hexadecimal value of NOP instruction?

This TCP flag instructs the sending system to transmit all buffered data immediately.

The network administrator at Spears Technology, Inc has configured the default gateway Cisco router's access-list as below: You are hired to conduct security testing on their netwo...

You work for Acme Corporation as Sales Manager. The company has tight network security restrictions. You are trying to steal data from the company's Sales database (Sales.xls) and...

Study the snort rule given below and interpret the rule. alert tcp any any --> 192.168.1.0/24 111 (content:"|00 01 86 a5|"; msG. "mountd access";)