The follows is an email header. What address is that of the true originator of the message?Return-Path: <bgates@microsoft.com>Received: from smtp.com (fw.emumail.com [215.52.220.122].by raq-221-181.ev1.net (8.10.2/8.10.2. with ESMTP id h78NIn404807for <mikeg@thesolutionfirm.com>; Sat, 9 Aug 2003 18:18:50 -0500Received: (qmail 12685 invoked from network.; 8 Aug 2003 23:25:25 -0000Received: from ([19.25.19.10]. by smtp.com with SMTP Received: from unknown (HELO CHRISLAPTOP. (168.150.84.123.by localhost with SMTP; 8 Aug 2003 23:25:01 -0000From: "Bill Gates" <bgates@microsoft.com>To: "mikeg" <mikeg@thesolutionfirm.com>Subject: We need your help!Date: Fri, 8 Aug 2003 19:12:28 -0400Message-ID: <51.32.123.21@CHRISLAPTOP>MIME-Version: 1.0Content-Type: multipart/mixed;boundary="----=_NextPart_000_0052_01C35DE1.03202950"X-Priority: 3 (Normal.X-MSMail-Priority: NormalX-Mailer: Microsoft Outlook, Build 10.0.2627X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165Importance: Normal
Answer(s): C
Spoofing can be easily achieved by manipulating the "from" name field, however, it is much more difficult to hide the true source address. The "received from" IP address 168.150.84.123 is the true source of the
Buffer X is an Accounting application module for company can contain 200 characters. The programmer makes an assumption that 200 characters are more than enough. Because there were no proper boundary checks being conducted. Dave decided to insert 400 characters into the 200-character buffer which overflows the buffer. Below is the code snippet:Void func (void) { int I; char buffer [200]; for (I=0; I<400; I++) buffer (I)= ‘A’; return; }How can you protect/fix the problem of your application as shown above? (Choose two)
Answer(s): A,C
I=199 would be the character number 200. The stack holds exact 200 characters so there is no need to stop before 200.
DRAG DROPA Successfully Attack by a malicious hacker can divide into five phases, Match the order:
Answer(s): A
• Reconnaissance refers to the preparatory phase where an attacker seeks to gather as much information as possible about a target of evaluation prior to launching an attack.• In Second Phase Hacker starts to scan the remote host to gather information about OS using, Opened Ports etc.• After gathering information about the remote hosts starts to gain access to remote host.So, Reconnaissance refers to the preparatory phase where an attacker seeks to gather as much information as possible about a target of evaluation prior to launching an attack.
Which of the following is NOT a valid NetWare access level?
Answer(s): D
Administrator is an account not a access level.
Which of the following is NOT true of cryptography?
Cryptography will protect data in both storage and in transit.
Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members: