Exhibit:ettercap –NCLzs --quietWhat does the command in the exhibit do in “Ettercap”?
Answer(s): C
-N = NON interactive mode (without ncurses)-C = collect all users and passwords-L = if used with -C (collector) it creates a file with all the password sniffed in the session in the form "YYYYMMDD-collected-pass.log"-z = start in silent mode (no arp storm on start up)-s = IP BASED sniffing--quiet = "demonize" ettercap. Useful if you want to log all data in background.
A remote user tries to login to a secure network using Telnet, but accidently types in an invalid user name or password. Which responses would NOT be preferred by an experienced Security Manager? (Multiple answer)
Answer(s): A,B
As little information as possible should be given about a failed login attempt. Invalid username or password is not desirable.
A POP3 client contacts the POP3 server:
Answer(s): B
POP is used to receive e-mail.SMTP is used to send e-mail.
Samantha was hired to perform an internal security test of company. She quickly realized that all networks are making use of switches instead of traditional hubs. This greatly limits her ability to gather information through network sniffing.Which of the following techniques can she use to gather information from the switched network or to disable some of the traffic isolation features of the switch? (Choose two)
Answer(s): B,D
In a typical MAC flooding attack, a switch is flooded with packets, each containing different source MAC addresses. The intention is to consume the limited memory set aside in the switch to store the MAC address-to-physical port translation table.The result of this attack causes the switch to enter a state called failopen mode, in which all incoming packets are broadcast out on all ports (as with a hub), instead of just down the correct port as per normal operation. The principle of ARP spoofing is to send fake, or 'spoofed', ARP messages to an Ethernet LAN. These frames contain false MAC addresses, confusing network devices, such as network switches. As a result frames intended for one machine can be mistakenly sent to another (allowing the packets to be sniffed) or an unreachable host (a denial of service attack).
Ethereal works best on .
Ethereal is used for sniffing traffic. It will return the best results when used on an unswitched (i.e. hub. network.
Post your Comments and Discuss EC-Council 312-50 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 312-50 content, but please register or login to continue.