EC-COUNCIL Ethical hacking and countermeasures 認定 EC0-350 試験問題:

1. Derek has stumbled upon a wireless network and wants to assess its security. However, he does not find enough traffic for a good capture. He intends to use AirSnort on the captured traffic to crack the WEP key and does not know the IP address range or the AP. How can he generate traffic on the network so that he can capture enough packets to crack the WEP key?

A) Derek can use a session replay on the packets captured
B) Use any ARP requests found in the capture
C) Derek can use KisMAC as it needs two USB devices to generate traffic
D) Use Ettercap to discover the gateway and ICMP ping flood tool to generate traffic

2. While performing ping scans into a target network you get a frantic call from the organization's security team. They report that they are under a denial of service attack. When you stop your scan, the smurf attack event stops showing up on the organization's IDS monitor. How can you modify your scan to prevent triggering this event in the IDS?

A) Scan more slowly.
B) Spoof the source IP address.
C) Only scan the Windows systems.
D) Do not scan the broadcast IP.

3. What is a successful method for protecting a router from potential smurf attacks?

A) Disabling the router from accepting broadcast ping messages
B) Enabling port forwarding on the router
C) Installing the router outside of the network's firewall
D) Placing the router in broadcast mode

4. When working with Windows systems, what is the RID of the true administrator account?

A) 1000
B) 500
C) 501
D) 512
E) 1001
F) 1024

5. XSS attacks occur on Web pages that do not perform appropriate bounds checking on data entered by users. Characters like < > that mark the beginning/end of a tag should be converted into HTML entities.


What is the correct code when converted to html entities?

A) Option B

B) Option C

C) Option A

D) Option D

質問と回答：