Usernames, passwords, e-mail addresses, and the location of CGI scripts may be obtained from which of the following information sources?
Answer(s): A
Whois query would not enable us to find the CGI scripts whereas in the actual website, some of them will have scripts written to make the website more user friendly. The EDGAR database would in fact give us a lot of the information requested but not the location of CGI scripts, as would a simple search engine on the Internet if you have the time needed.
What are the six types of social engineering?(Choose six).
Answer(s): B,C,D,E,F,G
All social engineering is performed by taking advantage of human nature. For indepth information on the subject review, read Robert Cialdini's book, Influence: Science and Practice.
What does the following command achieve? Telnet <IP Address> <Port 80>HEAD /HTTP/1.0<Return><Return>
Answer(s): C
This command is used for banner grabbing. Banner grabbing helps identify the service and version of web server running.
Within the context of Computer Security, which of the following statements best describe Social Engineering?
Answer(s): B
Social engineering is a collection of techniques used to manipulate people into performing actions or divulging confidential information.
Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter. What is the best way to undermine the social engineering activity of tailgating?
Answer(s): D
Tailgating will not work in small company’s where everyone knows everyone, and neither will it work in very large companies where everyone is required to swipe a card to pass, but it’s a very simple and effective social engineering attack against mid-sized companies where it’s common for one employee not to know everyone. There is two ways of stop this attack either by buying expensive perimeter defense in form of gates that only let on employee pass at every swipe of a card or by educating every employee on a recurring basis.
Post your Comments and Discuss EC-Council 312-50 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 312-50 content, but please register or login to continue.