EC0-350試験無料問題集「EC-COUNCIL Ethical hacking and countermeasures 認定」

In the context of Windows Security, what is a 'null' user?

解説: (GoShiken メンバーにのみ表示されます)
Hayden is the network security administrator for her company, a large finance firm based in Miami. Hayden just returned from a security conference in Las Vegas where they talked about all kinds of old and new security threats; many of which she did not know of. Hayden is worried about the current security state of her company's network so she decides to start scanning the network from an external IP address. To see how some of the hosts on her network react, she sends out SYN packets to an IP range. A number of IPs responds with a SYN/ACK response. Before the connection is established she sends RST packets to those hosts to stop the session. She does this to see how her intrusion detection system will log the traffic. What type of scan is Hayden attempting here?

Bob reads an article about how insecure wireless networks can be. He gets approval from his management to implement a policy of not allowing any wireless devices on the network. What other steps does Bob have to take in order to successfully implement this? (Select 2 answer.)

解説: (GoShiken メンバーにのみ表示されます)
Why would an ethical hacker use the technique of firewalking?

解説: (GoShiken メンバーにのみ表示されます)
A company has hired a security administrator to maintain and administer Linux and Windows-based systems. Written in the nightly report file is the followinG.
Firewall log files are at the expected value of 4 MB. The current time is 12am. Exactly two hours later the size has decreased considerably. Another hour goes by and the log files have shrunk in size again.
Which of the following actions should the security administrator take?

An engineer is learning to write exploits in C++ and is using the exploit tool Backtrack. The engineer wants to compile the newest C++ exploit and name it calc.exe. Which command would the engineer use to accomplish this?

Which of the following activities will NOT be considered as passive footprinting?

解説: (GoShiken メンバーにのみ表示されます)
John has scanned the web server with NMAP. However, he could not gather enough information to help him identify the operating system running on the remote host accurately.
What would you suggest to John to help identify the OS that is being used on the remote web server?

解説: (GoShiken メンバーにのみ表示されます)
One advantage of an application-level firewall is the ability to

You work as security technician at XYZ.com. While doing web application testing, you might be required to look through multiple web pages online which can take a long time. Which of the processes listed below would be a more efficient way of doing this type of validation?

解説: (GoShiken メンバーにのみ表示されます)
In order to show improvement of security over time, what must be developed?

A file integrity program such as Tripwire protects against Trojan horse attacks by:

解説: (GoShiken メンバーにのみ表示されます)
Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network. Which of these tools would do the SNMP enumeration he is looking for?
Select the best answers.

正解:B,D,E 解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
Jess the hacker runs L0phtCrack's built-in sniffer utility that grabs SMB password hashes and stores them for offline cracking. Once cracked, these passwords can provide easy access to whatever network resources the user account has access to. But Jess is not picking up hashes from the network. Why?