Free EC0-350 Exam Braindumps
Ethical Hacking and Countermeasures Question 14 (page: 56)

Updated On: 10-Feb-2026

When writing shellcodes, you must avoid _________________ because these will end the string.

  1. Null Bytes
  2. Root Bytes
  3. Char Bytes
  4. Unicode Bytes

Answer(s): A

Explanation:

The null character (also null terminator) is a character with the value zero, present in the ASCII and Unicode character sets, and available in nearly all mainstream programming languages. The original meaning of this character was like NOP — when sent to a printer or a terminal, it does nothing (some terminals, however, incorrectly display it as space). Strings ending in a null character are said to be null-terminated.



On wireless networks, SSID is used to identify the network. Why are SSID not considered to be a good security mechanism to protect a wireless networks?

  1. The SSID is only 32 bits in length.
  2. The SSID is transmitted in clear text.
  3. The SSID is the same as the MAC address for all vendors.
  4. The SSID is to identify a station, not a network.

Answer(s): B

Explanation:

The SSID IS constructed to identify a network, it IS NOT the same as the MAC address and SSID’s consists of a maximum of 32 alphanumeric characters.



What is the problem with this ASP script (login.asp)?
<%
Set objConn = CreateObject("ADODB.Connection")
objConn.Open Application("WebUsersConnection")
sSQL="SELECT * FROM Users where Username=? & Request("user") & _
"?and Password=? & Request("pwd") & "?
Set RS = objConn.Execute(sSQL)
If RS.EOF then
Response.Redirect("login.asp?msg=Invalid Login")
Else
Session.Authorized = True
Set RS = nothing
Set objConn = nothing Response.Redirect("mainpage.asp")
End If
%>

  1. The ASP script is vulnerable to XSS attack
  2. The ASP script is vulnerable to SQL Injection attack
  3. The ASP script is vulnerable to Session Splice attack
  4. The ASP script is vulnerable to Cross Site Scripting attack

Answer(s): B



Network Intrusion Detection systems can monitor traffic in real time on networks.
Which one of the following techniques can be very effective at avoiding proper detection?

  1. Fragmentation of packets.
  2. Use of only TCP based protocols.
  3. Use of only UDP based protocols.
  4. Use of fragmented ICMP traffic only.

Answer(s): A

Explanation:

If the default fragmentation reassembly timeout is set to higher on the client than on the IDS then the it is possible to send an attack in fragments that will never be reassembled in the IDS but they will be reassembled and read on the client computer acting victim.



What is Cygwin?

  1. Cygwin is a free C++ compiler that runs on Windows
  2. Cygwin is a free Unix subsystem that runs on top of Windows
  3. Cygwin is a free Windows subsystem that runs on top of Linux
  4. Cygwin is a X Windows GUI subsytem that runs on top of Linux GNOME environment

Answer(s): B

Explanation:

Cygwin is a Linux-like environment for Windows. It consists of two parts:
A DLL (cygwin1.dll) which acts as a Linux API emulation layer providing substantial Linux API functionality.
A collection of tools which provide Linux look and feel.
The Cygwin DLL works with all non-beta, non "release candidate", ix86 32 bit versions of Windows since Windows 95, with the exception of Windows CE.



Viewing page 56 of 153
Viewing questions 276 - 280 out of 878 questions


Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!