Free EC0-350 Exam Braindumps
Ethical Hacking and Countermeasures Question 22 (page: 80)

Updated On: 10-Feb-2026

You are trying to compromise a Linux Machine and steal the password hashes for cracking with password brute forcing program. Where is the password file kept is Linux?

  1. /etc/shadow
  2. /etc/passwd
  3. /bin/password
  4. /bin/shadow

Answer(s): A

Explanation:

/etc/shadow file stores actual password in encrypted format for user’s account with additional properties related to user password i.e. it stores secure user account information. All fields are separated by a colon (:) symbol. It contains one entry per line for each user listed in /etc/passwd file.



This is an authentication method in which is used to prove that a party knows a password without transmitting the password in any recoverable form over a network. This authentication is secure because the password is never transmitted over the network, even in hashed form; only a random number and an encrypted random number are sent.

  1. Realm Authentication
  2. SSL Authentication
  3. Basic Form Authentication
  4. Cryptographic Authentication
  5. Challenge/Response Authentication

Answer(s): E

Explanation:

Challenge-Response Authentication The secure Challenge-Response Authentication Mechanism (CRAM-MD5) avoids passing a cleartext password
over the network when you access your email account, ensuring that your login details cannot be captured and used by anyone in transit.
http://www.neomailbox.com/component/content/article/212-hardware-token-authentication



Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B. How do you prevent DNS spoofing? (Select the Best Answer.)

  1. Install DNS logger and track vulnerable packets
  2. Disable DNS timeouts
  3. Install DNS Anti-spoofing
  4. Disable DNS Zone Transfer

Answer(s): C

Explanation:

Implement DNS Anit-Spoofing measures to prevent DNS Cache Pollution to occur.



Which of the following activities would not be considered passive footprinting?

  1. Search on financial site such as Yahoo Financial
  2. Perform multiple queries through a search engine
  3. Scan the range of IP address found in their DNS database
  4. Go through the rubbish to find out any information that might have been discarded

Answer(s): C

Explanation:

Passive footprinting is a method in which the attacker never makes contact with the target. Scanning the targets IP addresses can be logged at the target and therefore contact has been made.



What ICMP message types are used by the ping command?

  1. Timestamp request (13) and timestamp reply (14)
  2. Echo request (8) and Echo reply (0)
  3. Echo request (0) and Echo reply (1)
  4. Ping request (1) and Ping reply (2)

Answer(s): B

Explanation:

ICMP Type 0 = Echo Reply, ICMP Type 8 = Echo



Viewing page 80 of 153
Viewing questions 396 - 400 out of 878 questions


Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!