Free EC0-350 Exam Braindumps
Ethical Hacking and Countermeasures Question 7 (page: 32)

Updated On: 10-Feb-2026

You want to carry out session hijacking on a remote server. The server and the client are communicating via TCP after a successful TCP three way handshake. The server has just received packet #120 from the client. The client has a receive window of 200 and the server has a receive window of 250.
Within what range of sequence numbers should a packet, sent by the client fall in order to be accepted by the server?

  1. 200-250
  2. 121-371
  3. 120-321
  4. 121-231
  5. 120-370

Answer(s): B

Explanation:

Package number 120 have already been received by the server and the window is 250 packets, so any package number from 121 (next in sequence) to 371 (121+250).



What are the six types of social engineering?(Choose six).

  1. Spoofing
  2. Reciprocation
  3. Social Validation
  4. Commitment
  5. Friendship
  6. Scarcity
  7. Authority
  8. Accountability

Answer(s): B,C,D,E,F,G

Explanation:

All social engineering is performed by taking advantage of human nature. For in-depth information on the subject review, read Robert Cialdini's book, Influence: Science and Practice.



What does black box testing mean?

  1. You have full knowledge of the environment
  2. You have no knowledge of the environment
  3. You have partial knowledge of the environment

Answer(s): B

Explanation:

Black box testing is conducted when you have no knowledge of the environment. It is more time consuming and expensive.



You are gathering competitive intelligence on ABC.com. You notice that they have jobs listed on a few Internet job-hunting sites. There are two job postings for network and system administrators. How can this help you in footprint the organization?

  1. The IP range used by the target network
  2. An understanding of the number of employees in the company
  3. How strong the corporate security policy is
  4. The types of operating systems and applications being used.

Answer(s): D

Explanation:

From job posting descriptions one can see which is the set of skills, technical knowledge, system experience required, hence it is possible to argue what kind of operating systems and applications the target organization is using.



You have hidden a Trojan file virus.exe inside another file readme.txt using NTFS streaming.
Which command would you execute to extract the Trojan to a standalone file?

  1. c:\> type readme.txt:virus.exe > virus.exe
  2. c:\> more readme.txt | virus.exe > virus.exe
  3. c:\> cat readme.txt:virus.exe > virus.exe
  4. c:\> list redme.txt$virus.exe > virus.exe

Answer(s): C

Explanation:

cat will concatenate, or write, the alternate data stream to its own file named virus.exe



Viewing page 32 of 153
Viewing questions 156 - 160 out of 878 questions


Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!