Free 312-50 Exam Braindumps (page: 49)

Page 48 of 191

What is the BEST alternative if you discover that a rootkit has been installed on one of your computers?

  1. Copy the system files from a known good system
  2. Perform a trap and trace
  3. Delete the files and try to determine the source
  4. Reload from a previous backup
  5. Reload from known good media

Answer(s): E

Explanation:

If a rootkit is discovered, you will need to reload from known good mediA. This typically means performing a complete reinstall.



What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?

  1. All are hacking tools developed by the legion of doom
  2. All are tools that can be used not only by hackers, but also security personnel
  3. All are DDOS tools
  4. All are tools that are only effective against Windows
  5. All are tools that are only effective against Linux

Answer(s): C

Explanation:

All are DDOS tools.



How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?

  1. There is no way to tell because a hash cannot be reversed
  2. The right most portion of the hash is always the same
  3. The hash always starts with AB923D
  4. The left most portion of the hash is always the same
  5. A portion of the hash will be all 0's

Answer(s): B

Explanation:

When looking at an extracted LM hash, you will sometimes observe that the right most portion is always the same. This is padding that has been added to a password that is less than 8 characters long.



When discussing passwords, what is considered a brute force attack?

  1. You attempt every single possibility until you exhaust all possible combinations or discover the password
  2. You threaten to use the rubber hose on someone unless they reveal their password
  3. You load a dictionary of words into your cracking program
  4. You create hashes of a large number of words and compare it with the encrypted passwords
  5. You wait until the password expires

Answer(s): A

Explanation:

Brute force cracking is a time consuming process where you try every possible combination of letters, numbers, and characters until you discover a match.






Post your Comments and Discuss EC-Council 312-50 exam with other Community members:

312-50 Discussions & Posts