Online Access Free EC0-350 Exam Questions

You want to carry out session hijacking on a remote server. The server and the client are communicating via TCP after a successful TCP three way handshake. The server has just received packet #120 from the client. The client has a receive window of 200 and the server has a receive window of 250.
Within what range of sequence numbers should a packet, sent by the client fall in order to be accepted by the server?

• A.121-231
• B.120-370
• C.120-321
• D.200-250
• E.121-371

A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti-virus and E-mail gateway. This approach can be used to mitigate which kind of attack?

• A.Scanning attack
• B.ARP spoofing attack
• C.Social engineering attack
• D.Forensic attack

You want to hide a secret.txt document inside c:\windows\system32\tcpip.dll kernel library using ADS streams. How will you accomplish this?

• A.copy secret.txt c:\windows\system32\tcpip.dll:secret.txt
• B.copy secret.txt >< c:\windows\system32\tcpip.dll kernel secret.txt
• C.copy secret.txt c:\windows\system32\tcpip.dll kernel>secret.txt
• D.copy secret.txt c:\windows\system32\tcpip.dll |secret.txt

Matthew re-injects a captured wireless packet back onto the network. He does this hundreds of times within a second. The packet is correctly encrypted and Matthew assumes it is an ARP request packet. The wireless host responds with a stream of responses, all individually encrypted with different IVs. What is this attack most appropriately called?

• A.Replay attack
• B.Spoof attack
• C.Injection attack
• D.Rebound attack

The following is part of a log file taken from the machine on the network with the IP address of 192.168.1.106:
Time:Mar 13 17:30:15 Port:20 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:17 Port:21 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:19 Port:22 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:21 Port:23 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:22 Port:25 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:23 Port:80 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:30 Port:443 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP What type of activity has been logged?

• A.Port scan targeting 192.168.1.106
• B.Denial of service attack targeting 192.168.1.103
• C.Teardrop attack targeting 192.168.1.106
• D.Port scan targeting 192.168.1.103