Free EC0-350 Exam Braindumps (page: 19)

Page 18 of 191

A POP3 client contacts the POP3 server:

  1. To send mail
  2. To receive mail
  3. to send and receive mail
  4. to get the address to send mail to
  5. initiate a UDP SMTP connection to read mail

Answer(s): B

Explanation:

POP is used to receive e-mail.
SMTP is used to send e-mail.



Bob has a good understanding of cryptography, having worked with it for many years. Cryptography is used to secure data from specific threat, but it does not secure the application from coding errors. It can provide data privacy, integrity and enable strong authentication but it cannot mitigate programming errors.
What is a good example of a programming error that Bob can use to illustrate to the management that encryption will not address all of their security concerns?

  1. Bob can explain that a random generator can be used to derive cryptographic keys but it uses a weak seed value and it is a form of programming error.
  2. Bob can explain that by using passwords to derive cryptographic keys it is a form of a programming error.
  3. Bob can explain that a buffer overflow is an example of programming error and it is a common mistake associated with poor programming technique.
  4. Bob can explain that by using a weak key management technique it is a form of programming error.

Answer(s): C

Explanation:

A buffer overflow occurs when you write a set of values (usually a string of characters) into a fixed length buffer and write at least one value outside that buffer's boundaries (usually past its end). A buffer overflow can occur when reading input from the user into a buffer, but it can also occur during other kinds of processing in a program. Technically, a buffer overflow is a problem with the program's internal implementation.



Vulnerability mapping occurs after which phase of a penetration test?

  1. Host scanning
  2. Passive information gathering
  3. Analysis of host scanning
  4. Network level discovery

Answer(s): C

Explanation:

The order should be Passive information gathering, Network level discovery, Host scanning and Analysis of host scanning.



If you perform a port scan with a TCP ACK packet, what should an OPEN port return?

  1. RST
  2. No Reply
  3. SYN/ACK
  4. FIN

Answer(s): A

Explanation:

Open ports return RST to an ACK scan.






Post your Comments and Discuss EC-Council EC0-350 exam with other Community members:

EC0-350 Discussions & Posts