What is the proper response for a NULL scan if the port is closed?
Answer(s): E
Closed ports respond to a NULL scan with a reset.
E-mail scams and mail fraud are regulated by which of the following?
Answer(s): A
http://www.law.cornell.edu/uscode/html/uscode18/usc_sec_18_00001030----000-.html
What type of port scan is shown below?
Answer(s): C
An Xmas port scan is variant of TCP port scan. This type of scan tries to obtain information about the state of a target port by sending a packet which has multiple TCP flags set to 1 - "lit as an Xmas tree". The flags set for Xmas scan are FIN, URG and PSH. The purpose is to confuse and bypass simple firewalls. Some stateless firewalls only check against security policy those packets which have the SYN flag set (that is, packets that initiate connection according to the standards). Since Xmas scan packets are different, they can pass through these simple systems and reach the target host.
Steven works as a security consultant and frequently performs penetration tests for Fortune 500 companies. Steven runs external and internal tests and then creates reports to show the companies where their weak areas are. Steven always signs a non-disclosure agreement before performing his tests. What would Steven be considered?
A white hat hacker, also rendered as ethical hacker, is, in the realm of information technology, a person who is ethically opposed to the abuse of computer systems. Realization that the Internet now represents human voices from around the world has made the defense of its integrity an important pastime for many. A white hat generally focuses on securing IT systems, whereas a black hat (the opposite) would like to break into them.
Snort has been used to capture packets on the network. On studying the packets, the penetration tester finds it to be abnormal. If you were the penetration tester, why would you find this abnormal?(Note: The student is being tested on concept learnt during passive OS fingerprinting, basic TCP/IP connection concepts and the ability to read packet signatures from a sniff dumo.)05/20-17:06:45.061034 192.160.13.4:31337 -> 172.16.1.101:1TCP TTL:44 TOS:0x10 ID:242***FRP** Seq: 0XA1D95 Ack: 0x53 Win: 0x400...05/20-17:06:58.685879 192.160.13.4:31337 -> 172.16.1.101:1024TCP TTL:44 TOS:0x10 ID:242***FRP** Seg: 0XA1D95 Ack: 0x53 Win: 0x400What is odd about this attack? (Choose the most appropriate statement)
Answer(s): B
Port 31337 is normally used by Back Orifice. Note that 31337 is hackers spelling of ‘elite’, meaning ‘elite hackers’.
Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the EC0-350 content, but please register or login to continue.