Bill is attempting a series of SQL queries in order to map out the tables within the database that he is trying to exploit.Choose the attack type from the choices given below.
Answer(s): A
He is trying to create a view of the characteristics of the target database, he is taking it’s fingerprints.
John is a keen administrator, and has followed all of the best practices as he could find on securing his Windows Server. He has renamed the Administrator account to a new name that he is sure cannot be easily guessed. However, there are people who already attempt to compromise his newly renamed administrator account.How is it possible for a remote attacker to decipher the name of the administrator account if it has been renamed?
Answer(s): B
User2sid.exe can retrieve a SID from the SAM (Security Accounts Manager) from the local or a remote machine Sid2user.exe can then be used to retrieve the names of all the user accounts and more. These utilities do not exploit a bug but call the functions LookupAccountName and LookupAccountSid respectively. What is more these can be called against a remote machine without providing logon credentials save those needed for a null session connection.
Study the snort rule given below:From the options below, choose the exploit against which this rule applies.
Answer(s): C
MS Blaster scans the Internet for computers that are vulnerable to its attack. Once found, it tries to enter the system through the port 135 to create a buffer overflow. TCP ports 139 and 445 may also provide attack vectors.
While performing a ping sweep of a subnet you receive an ICMP reply of Code 3/Type 13 for all the pings sent out.What is the most likely cause behind this response?
Type 3 message = Destination Unreachable [RFC792], Code 13 (cause) = Communication Administratively Prohibited [RFC1812]
Who is an Ethical Hacker?
The Ethical hacker is a security professional who applies his hacking skills for defensive purposes.
Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members: