What is the proper response for a NULL scan if the port is open?
Answer(s): F
A NULL scan will have no response if the port is open.
Your lab partner is trying to find out more information about a competitors web site. The site has a .com extension. She has decided to use some online whois tools and look in one of the regional Internet registrys. Which one would you suggest she looks in first?
Answer(s): B
Regional registries maintain records from the areas from which they govern. ARIN is responsible for domains served within North and South America and therefore, would be a good starting point for a .com domain.
What port scanning method involves sending spoofed packets to a target system and then looking for adjustments to the IPID on a zombie system?
from NMAP:-sI <zombie host[:probeport]> Idlescan: This advanced scan method allows fora truly blind TCP port scan of the target (meaning no packets are sent tothe tar- get from your real IP address). Instead, a unique side-channelattack exploits predictable "IP fragmentation ID" sequence generation onthe zombie host to glean information about the open ports on the target.
How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?
When looking at an extracted LM hash, you will sometimes observe that the right most portion is always the same. This is padding that has been added to a password that is less than 8 characters long.
Which of these are phases of a reverse social engineering attack?Select the best answers.
Answer(s): A,B,D
According to "Methods of Hacking: SocialEngineering", by Rick Nelson, the three phases of reverse social engineering attacks are sabotage, advertising, and assisting.
Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the EC0-350 content, but please register or login to continue.