QUESTION: 1

Assuring two systems that are using IPSec to protect traffic over the internet, what type of general attack could compromise the data?

Spoof Attack
Smurf Attack
Man in the Middle Attack
Trojan Horse Attack
Back Orifice Attack

Answer(s): D,E

Explanation:

To compromise the data, the attack would need to be executed before the encryption takes place at either end of the tunnel. Trojan Horse and Back Orifice attacks both allow for potential data manipulation on host computers. In both cases, the data would be compromised either before encryption or after decryption, so IPsec is not preventing the attack.

Reveal Solution Next Question

QUESTION: 1

The evil hacker, is purposely sending fragmented ICMP packets to a remote target. The total size of this ICMP packet once reconstructed is over 65, 536 bytes. From the information given, what type of attack is attempting to perform?

Syn flood
Smurf
Ping of death
Fraggle

Answer(s): C

Reference:

http://insecure.org/sploits/ping-o-death.html

Reveal Solution Next Question

QUESTION: 1

Exhibit:
ettercap –NCLzs --quiet
What does the command in the exhibit do in “Ettercap”?

This command will provide you the entire list of hosts in the LAN
This command will check if someone is poisoning you and will report its IP.
This command will detach from console and log all the collected passwords from the network to a file.
This command broadcasts ping to scan the LAN instead of ARP request of all the subnet IPs.

Answer(s): C

Explanation:

-N = NON interactive mode (without ncurses)
-C = collect all users and passwords
-L = if used with -C (collector) it creates a file with all the password sniffed in the session in the form "YYYYMMDD-collected-pass.log"
-z = start in silent mode (no arp storm on start up)
-s = IP BASED sniffing
--quiet = "demonize" ettercap. Useful if you want to log all data in background.

Reveal Solution Next Question

QUESTION: 2

You have been using the msadc.pl attack script to execute arbitrary commands on an NT4 web server. While it is effective, you find it tedious to perform extended functions. On further research you come across a perl script that runs the following msadc functions:

What kind of exploit is indicated by this script?

A buffer overflow exploit.
A SUID exploit.
A SQL injection exploit.
A chained exploit.
A buffer under run exploit.

Answer(s): D

Reveal Solution Next Question

Free EC0-350 Exam Braindumps (page: 6)

QUESTION: 1

Explanation:

QUESTION: 1

Reference:

QUESTION: 1

Explanation:

QUESTION: 2