Free EC0-350 Exam Braindumps
Ethical Hacking and Countermeasures Question 23 (page: 82)

Updated On: 10-Feb-2026

Sally is a network admin for a small company. She was asked to install wireless accesspoints in the building. In looking at the specifications for the access-points, she sees that all of them offer WEP. Which of these are true about WEP?
Select the best answer.

  1. Stands for Wireless Encryption Protocol
  2. It makes a WLAN as secure as a LAN
  3. Stands for Wired Equivalent Privacy
  4. It offers end to end security

Answer(s): C

Explanation:

WEP is intended to make a WLAN as secure as a LAN but because a WLAN is not constrained by wired, this makes access much easier. Also, WEP has flaws that make it less secure than was once thought.WEP does not offer end-to-end security. It only attempts to protect the wireless portion of the network.



Darren is the network administrator for Greyson & Associates, a large law firm in Houston. Darren is responsible for all network functions as well as any digital forensics work that is needed. Darren is examining the firewall logs one morning and notices some unusual activity. He traces the activity target to one of the firm's internal file servers and finds that many documents on that server were destroyed. After performing some calculations, Darren finds the damage to be around $75, 000 worth of lost data. Darren decides that this incident should be handled and resolved within the same day of its discovery.
What incident level would this situation be classified as?

  1. This situation would be classified as a mid-level incident
  2. Since there was over $50, 000 worth of loss, this would be considered a high-level incident
  3. Because Darren has determined that this issue needs to be addressed in the same day it was discovered, this would be considered a low-level incident
  4. This specific incident would be labeled as an immediate-level incident

Answer(s): D



Which DNS resource record can indicate how long any "DNS poisoning" could last?

  1. MX
  2. SOA
  3. NS
  4. TIMEOUT

Answer(s): B

Explanation:

The SOA contains information of secondary servers, update intervals and expiration times.



You are footprinting the www.xsecurity.com domain using the Google Search Engine. You would like to determine what sites link to www.xsecurity .com at the first level of revelance.
Which of the following operator in Google search will you use to achieve this?

  1. Link: www.xsecurity.com
  2. serch?l:www.xsecurity.com
  3. level1.www.security.com
  4. pagerank:www.xsecurity.com

Answer(s): A

Explanation:

The query [link:] will list webpages that have links to the specified webpage. For instance, [link:www.google.com] will list webpages that have links pointing to the Google homepage. Note there can be no space between the "link:" and the web page url.



Which of the following systems would not respond correctly to an nmap XMAS scan?

  1. Windows 2000 Server running IIS 5
  2. Any Solaris version running SAMBA Server
  3. Any version of IRIX
  4. RedHat Linux 8.0 running Apache Web Server

Answer(s): A

Explanation:

When running a XMAS Scan, if a RST packet is received, the port is considered closed, while no response means it is open|filtered. The big downside is that not all systems follow RFC 793 to the letter. A number of systems send RST responses to the probes regardless of whether the port is open or not. This causes all of the ports to be labeled closed. Major operating systems that do this are Microsoft Windows, many Cisco devices, BSDI, and IBM OS/400.



Viewing page 82 of 153
Viewing questions 406 - 410 out of 878 questions


Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!