While probing an organization you discover that they have a wireless network. From your attempts to connect to the WLAN you determine that they have deployed MAC filtering by using ACL on the access points. What would be the easiest way to circumvent and communicate on the WLAN?
Answer(s): D
The easiest way to gain access to the WLAN would be to spoof your MAC address to one that already exists on the network.
While scanning a network you observe that all of the web servers in the DMZ are responding to ACK packets on port 80.What can you infer from this observation?
If they used a stateful inspection firewall this firewall would know if there has been a SYN-ACK before the ACK.
Which of the following snort rules look for FTP root login attempts?
The snort rule header is built by defining action (alert), protocol (tcp), from IP subnet port (any any), to IP subnet port (any any 21), Payload Detection Rule Options (content:”user root”;)
Marshall is the information security manager for his company. Marshall was just hired on two months ago after the last information security manager retired. Since the last manager did not implement or even write IT policies, Marshall has begun writing IT security policies to cover every conceivable aspect. Marshall's supervisor has informed him that while most employees will be under one set of policies, ten other employees will be under another since they work on computers in publicly-accessible areas. Per his supervisor, Marshall has written two sets of policies. For the users working on publicly-accessible computers, their policies state that everything is forbidden. They are not allowed to browse the Internet or even use email. The only thing they can use is their work related applications like Word and Excel.What types of policies has Marshall written for the users working on computers in the publicly-accessible areas?
Answer(s): C
It says that everything is forbidden, this means that there is a Paranoid Policy implemented
One of your team members has asked you to analyze the following SOA record. What is the version?Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.
Answer(s): A
The SOA starts with the format of YYYYMMDDVV where VV is the version.
Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the EC0-350 content, but please register or login to continue.