EC-COUNCIL Ethical hacking and countermeasures 認定 EC0-350 試験問題:

1. When a malicious hacker identifies a target and wants to eventually compromise this target, what would be among the first steps that he would perform? (Choose the best answer)

A) Gain access to the remote computer in order to conceal the venue of attacks.
B) Cover his tracks by eradicating the log files and audit trails.
C) Perform a reconnaissance of the remote target for identical of venue of attacks.
D) Always begin with a scan in order to quickly identify venue of attacks.

2. Syslog is a standard for logging program messages. It allows separation of the software that generates messages from the system that stores them and the software that reports and analyzes them. It also provides devices, which would otherwise be unable to communicate a means to notify administrators of problems or performance.

What default port Syslog daemon listens on?

A) 312
B) 416
C) 514
D) 242

3. During a penetration test, the tester conducts an ACK scan using NMAP against the external interface of the DMZ firewall. NMAP reports that port 80 is unfiltered. Based on this response, which type of packet inspection is the firewall conducting?

A) Stateless
B) Stateful
C) Host
D) Application

4. Jason works in the sales and marketing department for a very large advertising agency located in Atlanta. Jason is working on a very important marketing campaign for his company's largest client. Before the project could be completed and implemented, a competing advertising company comes out with the exact same marketing materials and advertising, thus rendering all the work done for Jason's client unusable. Jason is questioned about this and says he has no idea how all the material ended up in the hands of a competitor.
Without any proof, Jason's company cannot do anything except move on. After working on another high profile client for about a month, all the marketing and sales material again ends up in the hands of another competitor and is released to the public before Jason's company can finish the project. Once again, Jason says that he had nothing to do with it and does not know how this could have happened. Jason is given leave with pay until they can figure out what is going on.
Jason's supervisor decides to go through his email and finds a number of emails that were sent to the competitors that ended up with the marketing material. The only items in the emails were attached jpg files, but nothing else. Jason's supervisor opens the picture files, but cannot find anything out of the ordinary with them.
What technique has Jason most likely used?

A) Stealth Rootkit Technique
B) Image Steganography Technique
C) ADS Streams Technique
D) Snow Hiding Technique

5. What port number is used by LDAP protocol?

A) 389
B) 110
C) 464
D) 445

質問と回答：