Changed EC0-350 Exam Questions

Ethical Hacking and Countermeasures V8 Questions and Answers

Question 129

When comparing the testing methodologies of Open Web Application Security Project (OWASP) and Open Source Security Testing Methodology Manual (OSSTMM) the main difference is

Options:

OWASP is for web applications and OSSTMM does not include web applications.

OSSTMM is gray box testing and OWASP is black box testing.

OWASP addresses controls and OSSTMM does not.

OSSTMM addresses controls and OWASP does not.

Question 130

There is a WEP encrypted wireless access point (AP) with no clients connected. In order to crack the WEP key, a fake authentication needs to be performed. What information is needed when performing fake authentication to an AP? (Choose two.)

Options:

The IP address of the AP

The MAC address of the AP

The SSID of the wireless network

A failed authentication packet

Question 131

The intrusion detection system at a software development company suddenly generates multiple alerts regarding attacks against the company's external webserver, VPN concentrator, and DNS servers. What should the security team do to determine which alerts to check first?

Options:

Investigate based on the maintenance schedule of the affected systems.

Investigate based on the service level agreements of the systems.

Investigate based on the potential effect of the incident.

Investigate based on the order that the alerts arrived in.

Question 132

Wayne is the senior security analyst for his company. Wayne is examining some traffic logs on a server and came across some inconsistencies. Wayne finds some IP packets from a computer purporting to be on the internal network. The packets originate from 192.168.12.35 with a TTL of 15. The server replied to this computer and received a response from 192.168.12.35 with a TTL of 21. What can Wayne infer from this traffic log?

Options:

The initial traffic from 192.168.12.35 was being spoofed.

The traffic from 192.168.12.25 is from a Linux computer.

The TTL of 21 means that the client computer is on wireless.

The client computer at 192.168.12.35 is a zombie computer.

Black Friday Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Ethical Hacking and Countermeasures V8 Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce