QUESTION: 15

ARP poisoning is achieved in _____ steps

1
2
3
4

Answer(s): B

Explanation:

The hacker begins by sending a malicious ARP "reply" (for which there was no previous request) to your router, associating his computer's MAC address with your IP Address. Now your router thinks the hacker's computer is your computer. Next, the hacker sends a malicious ARP reply to your computer, associating his MAC Address with the routers IP Address. Now your machine thinks the hacker's computer is your router. The hacker has now used ARP poisoning to accomplish a MitM attack.

Reveal Solution Next Question

QUESTION: 15

Erik notices a big increase in UDP packets sent to port 1026 and 1027 occasionally. He enters the following at the command prompt.
$ nc -l -p 1026 -u -v
In response, he sees the following message.
cell(?(c)????STOPALERT77STOP! WINDOWS REQUIRES IMMEDIATE ATTENTION.
Windows has found 47 Critical Errors.
To fix the errors please do the following:
1. Download Registry Repair from: www.reg-patch.com
2. Install Registry Repair
3. Run Registry Repair
4. Reboot your computer
FAILURE TO ACT NOW MAY LEAD TO DATA LOSS AND CORRUPTION!
What would you infer from this alert?

The machine is redirecting traffic to www.reg-patch.com using adware
It is a genuine fault of windows registry and the registry needs to be backed up
An attacker has compromised the machine and backdoored ports 1026 and 1027
It is a messenger spam. Windows creates a listener on one of the low dynamic ports from 1026 to 1029 and the message usually promotes malware disguised as legitimate utilities

Answer(s): D

Explanation:

The "net send" Messenger service can be used by unauthorized users of your computer, without gaining any kind of privileged access, to cause a pop-up window to appear on your computer. Lately, this feature has been used by unsolicited commercial advertisers to inform many campus users about a "university diploma service"...

Reveal Solution Next Question

QUESTION: 16

Richard is a network Administrator working at a student loan company in lowa. This company processes over 20, 000 students loan a year from colleges all over the state. Most communication between the company, schools and lenders is carried out through email. Because of privacy laws that are in the process of being implemented, Richard wants to get ahead of the game and become compliant before any sort of auditing occurs. Much of the email communication used at his company contains sensitive information such as social security numbers. For this reason, Richard wants to utilize email encryption agency-wide. The only problem for Richard is that his department only has couple of servers and they are utilized to their full capacity. Since a server-based PKI is not an option for him, he is looking for a low/no cost solution to encrypt email.
What should Richard use?

PGP
RSA
3DES
OTP

Answer(s): A

Explanation:

PGP (Pretty Good Privacy) is an encryption program being used for secure transmission of files and e-mails. This adapts public-key encryption technology in which pairs of keys are used to maintain secure communication. For PGP-based communication both the sender and receiver should have public and private key pairs. The sender's public key should be distributed to the receiver. Similarly, the receiver's public key should be distributed to the sender. When sending a message or a file, the sender can sign using his private key. Also, the sender's private key is never distributed. All encryption is made on the workstation sending the e-mail.

Reveal Solution Next Question

QUESTION: 16

Buffer X in an Accounting application module for Brownies Inc. can contain 200 characters. The programmer makes an assumption that 200 characters are more than enough. Because there were no proper boundary checks being conducted, Bob decided to insert 400 characters into the 200-character buffer. (Overflows the buffer). Below is the code snippet.

How can you protect/fix the problem of your application as shown above?

Because the counter starts with 0, we would stop when the counter is less than 200
Because the counter starts with 0, we would stop when the counter is more than 200
Add a separate statement to signify that if we have written 200 characters to the buffer, the stack should stop because it can’t hold any more data
Add a separate statement to signify that if we have written less than 200 characters to the buffer, the stack should stop because it can’t hold any more data

Answer(s): A,C

Explanation:

I=199 would be the character number 200. The stack holds exact 200 characters so there is no need to stop before 200.

Reveal Solution Next Question

Free EC0-350 Exam Braindumps (page: 77)

QUESTION: 15

Explanation:

QUESTION: 15

Explanation:

QUESTION: 16

Explanation:

QUESTION: 16

Explanation:

EC0-350 Exam Discussions & Posts