Which of the following keyloggers cannot be detected by anti-virus or anti-spyware products?
Answer(s): D
As the hardware keylogger never interacts with the Operating System it is undetectable by anti-virus or anti-spyware products.
_______ is the process of converting something from one representation to the simplest form. It deals with the way in which systems convert data from one form to another.
Answer(s): A
Canonicalization (abbreviated c14n) is the process of converting data that has more than one possible representation into a "standard" canonical representation. This can be done to compare different representations for equivalence, to count the number of distinct data structures (e.g., in combinatorics), to improve the efficiency of various algorithms by eliminating repeated calculations, or to make it possible to impose a meaningful sorting order.
Drag the term to match with its description Exhibit:
Answer(s): B
You are a Administrator of Windows server. You want to find the port number for POP3. What file would you find the information in and where?Select the best answer.
Answer(s): C
Explanations: %windir%\\system32\\drivers\\etc\\services is the correct place to look for this information.
One of your junior administrator is concerned with Windows LM hashes and password cracking. In your discussion with them, which of the following are true statements that you would point out?Select the best answers.
Answer(s): A,C,E
John the Ripper can be used to crack a variety of passwords, but one limitation is that the output doesn't show if the password is upper or lower case. John the Ripper is a very effective password cracker. It can crack passwords for many different types of operating systems. However, one limitation is that the output doesn't show if the password is upper or lower case. BY using NTLMV1, you have implemented an effective countermeasure to password cracking. NTLM Version 2 (NTLMV2) is a good countermeasure to LM password cracking (and therefore a correct answer). To do this, set Windows 9x and NT systems to "send NTLMv2 responses only". SYSKEY is an effective countermeasure. It uses 128 bit encryption on the local copy of the Windows SAM. If a Windows LM password is 7 characters or less, the has will be passed with the following characters:0xAAD3B435B51404EEEnforcing Windows complex passwords is an effective countermeasure to password cracking. Complex passwords are- greater than 6 characters and have any 3 of the following 4 items: upper case, lower case, special characters, and numbers.
Post your Comments and Discuss EC-Council 312-50 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 312-50 content, but please register or login to continue.