312-50 PDF Training Guides

Test Information:

Total Questions: 760

Test Number: 312-50

Vendor Name: Eccouncil

Cert Name:  CEH

Test Name: ECCOUNCIL Ethical Hacking and Countermeasures(CEHv6)

Official Site:http://www.examsboost.com

Version:8.3

Question:1

Bill has started to notice some slowness onhis network when trying to update his company’s website while trying to accessthe website from the Internet. Bill asks the help desk manager if he hasreceived any calls about slowness from the end users, but the help desk managersays that he has not. Bill receives a number of calls from customers that can’taccess the company website and can’t purchase anything online. Bill logs on toa couple of this routers and notices that the logs shows network traffic is atall time high. He also notices that almost all the traffic is originating froma specific address.

Bill decides to use Geotrace to find out wherethe suspect IP is originates from. The Geotrace utility runs a traceroute andfinds that IP is coming from Panama. Bill knows that none of his customers arein Panama so he immediately thinks that his company is under a Denial ofService attack. Now Bill needs to find out more about the originating IPAddress.

What Internet registry should Bill look in tofind the IP Address?

A.LACNIC

B.ARIN

C.RIPELACNIC

D.APNIC

Answer:A

Explanation:

Reference: LACNIC is theLatin American and Caribbean InternetAddresses Registry that administers IP addresses, autonomous system numbers,reverse DNS, and other network resources for that region.

Question:2

System Administrators sometimes post questionsto newsgroups when they run into technical challenges. As an ethical hacker,you could use the information in newsgroup posting to glean insight into the makeupof a target network. How would you search for these posting using Googlesearch?

A.Search in Google using the key strings“the target company” and “newsgroups”

B.Search for the target company name athttp://groups.google.com

C.Use NNTP websites to search for thesepostings

D.Search in Google using the key searchstrings “the target company” and “forums”

Answer:B

Explanation:

Reference: Using http://groups.google.com isthe easiest way to access various newsgroups today. Beforehttp://groups.google.com you had to use special NNTP clients or subscribe tosome nntp to web services.

Question:3

Which of the following activities would not beconsidered passive footprinting?

A.Search on financial site such as YahooFinancial

B.Perform multiple queries through asearch engine

C.Scan the range of IP address found in their DNS database

D.Go through the rubbish to find out anyinformation that might have been discarded

Answer:C

Explanation:

Reference:Passive footprintingis a method in which the attacker never makes contact with the target. Scanningthe targets IP addresses can be logged at the target and therefore contact hasbeen made.

Question:4

You are footprinting thewww.xsecurity.comdomain using the Google Search Engine. Youwould like to determine what sites link to www.xsecurity .com at the firstlevel of revelance.

Which of the following operator in Googlesearch will you use to achieve this?

A.Link:www.xsecurity.com

B.serch?l:www.xsecurity.com

C.level1.www.security.com

D.pagerank:www.xsecurity.com

Answer:A

Explanation:

Reference:The query [link:] will list webpages that havelinks to the specified webpage. For instance, [link:www.google.com] will listwebpages that have links pointing to the Google homepage. Note there can be nospace between the "link:" and the web page url.

Question:5

Doug isconducting a port scan of a target network. He knows that his client targetnetwork has a web server and that there is a mail server also which is up andrunning. Doug has been sweeping the network but has not been able to elicit anyresponse from the remote target. Which of the following could be the mostlikely cause behind this lack of response? Select 4.

A.UDP is filtered by a gateway

B.The packet TTL value is too low and cannot reach the target

C.The host might be down

D.The destination network might be down