312-92 Exam Questions

Which Linux command will securely delete a file by overwriting its contents?

Shayla is designing a web-based application that will pass data to and from a company extranet. This data is very sensitive and must be protected at all costs. Shayla will use a di...

EC-Council 312-92 Exam After learning from an external auditor that his code was susceptible to attack, George decided to rewrite some of his code to look like the following. What...

Fred is planning on using the windows socket application ClientApp.exe program to create a client-side application that his employees will use. This program will access backend pro...

What would be the result of the following code? #include <stdio.h> #include <stdlib.h> int main(int argc, char *argv[]) { char *input=malloc(20); char *output=malloc(20); strcpy(ou...

Wayne is a gaming software developer for a large video gaming company in Los Angeles. Wayne has just completed developing a new action/adventure game for the company that is to be...

Kenny is the CIO for Fredrickson Entertainment, a gaming software company in Omaha. The developers in Kenny's company have just finished creating a 3D first person shooter game tha...

John is creating a website using ASP. John's web pages will have a number of calculations, so he decides to create an include file that the pages will call so he does not have to r...

Devon is an applications developer that just got back from a conference on how to correctly write code. Devon has a number of programs he has written that access data across WAN li...

Malory is creating a webpage in PHP where users will have to logon to gain access to certain areas of the site. Malory is concerned that malicious users might try to exploit her si...

Tyler is in the applicaion testing phase of a particular project. He has decided to use the White Box testing method. Tyler has made a number of changes to his code after some init...

In which of the following attacks does an attacker successfully insert an intermediary software or program between two communicating hosts?

Megan has just build a new kernel using the command make bzImage. Where can Megan go now to see the newly created kernel?

Why would a software development firm want to fix any issues with a program at the design stage as opposed to fixing issues with a program through a patch release?

Fred wants to create his web page using AJAX to make them dynamic and give them the ability to use and share data. After an internal auditor examines the compliance of Fred's page,...

Lyle is writing some code in VB.NET and is implementing some build-in security. What type of .NET security is Lyle using in the following code? public class Myclass1 Public Sub New...

Versions Unlimited, a software design company in Seattle, has just finished development of a new mapping software product. They have completed testing the internal code and are now...

When the following code is compiled and run is a program what size block will be used to hold name string? #include <stdio.h> int main(int argc, char **argv) { char target[5]="TTTT...

Nathan, an application developer, has taken over the lead developer's position and now will administer five other developers. The last lead developer was a programmer specialized i...

What testing methodology does not require any knowledge of the internal design or code of a software application?

Travis is working on some code in C# that will create a digital signature. What will the following snippet from his program accomplish? childkat.xml signnode = xmlDoc.NewChild("sig...

What is the security and cryptographic framework used in Mac OS X called?

Kevin wants to use an SSL certificate from his Mac OS X server so that he can send and receive encrypted email. What would Kevin accomplish by typing in the following command? cert...

Fred has just finished developing a number of ASP pages that will be posted to his company's website. Fred does not want the page's source code viewed by anyone, so he decided to e...

When making a RPC function call on the local machine, what function should be used?

Gerald is a web security consultant for Protectors International. Gerald's main responsibility is to search the Internet for malicious and deceitful sites that the public should be...

What compression library is used by wiretap, the packet analyzer reader for Wireshark?

What is the following PERL script trying to accomplish? sub mycode_string { join("" map('$_ > 255 ? sprintf("\\x{%04x]", $_) : chr($_) = ~ /[[:cntrl:]]/ ? sprintf(\\x%02X", $_) : c...

What will the following SQL command accomplish? USE Accounting GO EXECUTE sp_grantdbaccess guest

When a developer is creating port binding shell code, why should he/she not use the NULL characters?

Devon is writing the following code to avoid what? <script language="vb" runat="server"> Sub Application_BeginRequest(Sender as object, E as EventArgs) If (Request.Path.Indexof(chr...

Jacob just purchased the BlueFire Mobile Security Enterprise software package for all his company's mobile devices. Jacob wants to configure the software so that it will quarantine...

Simon is writing an application that will use RPC to talk between a client and server. He will use authentication, but in his application the server does not have to know the RPC c...

What two encryption methods are used by the Secure Electronic Transaction system?

Kevin is developing a webpage using html and javascript code. The webpage will have a lot of important content and will have a number of functions that Kevin does not want revealed...

EC-Council 312-92 Exam Clay is a SQL dba working for Integrated Solutions Inc., a graphics design company in Miami. Clay administers 10 SQL servers at the company's headquarters. C...

Simon is going through some of Heather's code and notices an issue. What issue did Simon find in the following code? void f4(void * arg, size_t len) { char *buff = new char[100]; C...

Which of the following plans is documented and organized for emergency response, backup operations, and recovery maintained by an activity as part of its security program that will...

What function can be used with SQL to encrypt user suppliedpasswords so that they can be compared with the encrypted passwords stored on the SQL server?

Carl just purchased an expensive smart phone to use for personal and business use. Carl wants to protect his investment so he decides to register the unique GSM number of the phone...

Paul wants to capture audit information on PLSQL so he executes the following command: sqlplus "sys / as sysdba" Enter password: password123!!!! SQL> ALTER SYSTEM SET AUDIT_TRAIL =...

George is writing an application in Java and is using DES in the code to implement the encryption and decryption of data that will be passed. In the following code snippet, what wi...

Charles is writing a script in PERL for a website he is working on. The only problem he is having is that part of his script needs to call a file that a normal user does not have p...

Jacob is the system administrator for his company, managing over 20 Linux-based servers. Jacob wants to ensure that his servers are secure so he decides to add the following line t...

What type of problem or error will result from the following statement? void f2b(void * arg, size_t len) { char buffer[100]; long val = ...; long *ptr = ...; extern void (*f)(); me...

Gloria is the lead operation manager for a movie production company in Las Vegas. She has been asked with ensuring that the new movie created by the company will fit on one side of...

What functionality of the Oracle Identity Management system facilitates real-time integration of multiple directories and user repositories through a single LDAP service?

In the following socket programming code, who will the server allow connections from? int main(void) { int s1, s2; s1 = socket(AF_INET, SOCK_STREAM, 0); sin.sin_port = htons(30); s...

EC-Council 312-92 Exam Which of the following is a 16-bit field that identifies the source port number of the application program in the host that is sending the segment?

Lori is creating a login page using Java on one of her websites with the following code. What vulnerability or issue is the code susceptible to? conn = pool.getConnection(); String...