EC-COUNCIL EC0-350 問題集

質問 1：
_________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.
A. Backdoor
B. Trojan
C. RootKit
D. Scanner
E. DoS tool
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
When working with Windows systems, what is the RID of the true administrator account?
A. 1000
B. 1024
C. 501
D. 1001
E. 500
F. 512
正解：E
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A corporation hired an ethical hacker to test if it is possible to obtain users' login credentials using methods other than social engineering. Access to offices and to a network node is granted. Results from server scanning indicate all are adequately patched and physical access is denied, thus, administrators have access only through Remote Desktop. Which technique could be used to obtain login credentials?
A. Guess passwords using Medusa or Hydra against a network service.
B. Capture every users' traffic with Ettercap.
C. Capture LANMAN Hashes and crack them with LC6.
D. Capture administrators RDP traffic and decode it with Cain and Abel.
正解：D

質問 4：
A security consultant is trying to bid on a large contract that involves penetration testing and reporting. The company accepting bids wants proof of work so the consultant prints out several audits that have been performed. Which of the following is likely to occur as a result?
A. The consultant may expose vulnerabilities of other companies.
B. The company accepting bids will hire the consultant because of the great work performed.
C. The company accepting bids will want the same type of format of testing.
D. The consultant will ask for money on the bid because of great work.
正解：A

質問 5：
You want to use netcat to generate huge amount of useless network data continuously for various performance testing between 2 hosts.
Which of the following commands accomplish this?
A. Machine A
#yes AAAAAAAAAAAAAAAAAAAAAA | nc -v -v -l -p 2222 > /dev/null
Machine B
#yes BBBBBBBBBBBBBBBBBBBBBB | nc machinea 2222 > /dev/null
B. Machine A
while true : do
nc -v -l -s -p 6000 machineb 2
Machine B
while true ; do
nc -v -l -s -p 6000 machinea 2
done
C. Machine A
nc -l -p 1234 | uncompress -c | tar xvfp
Machine B
tar cfp - /some/dir | compress -c | nc -w 3 machinea 1234
D. Machine A
cat somefile | nc -v -v -l -p 2222
Machine B
cat somefile | nc othermachine 2222
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following programming languages is most vulnerable to buffer overflow attacks?
A. Python
B. Perl
C. C++
D. Java
正解：C

質問 7：
You run nmap port Scan on 10.0.0.5 and attempt to gain banner/server information from services running on ports 21, 110 and 123.
Here is the output of your scan results:

Which of the following nmap command did you run?
A. nmap -T -sV -p21, 110, 123 10.0.0.5
B. nmap -F -sV -p21, 110, 123 10.0.0.5
C. nmap -O -sV -p21, 110, 123 10.0.0.5
D. nmap -A -sV -p21, 110, 123 10.0.0.5
正解：C

質問 8：
Stephanie works as senior security analyst for a manufacturing company in Detroit. Stephanie manages network security throughout the organization. Her colleague Jason told her in confidence that he was able to see confidential corporate information posted on the external website http://www.jeansclothesman.com. He tries random URLs on the company's website and finds confidential information leaked over the web. Jason says this happened about a month ago. Stephanie visits the said URLs, but she finds nothing. She is very concerned about this, since someone should be held accountable if there was sensitive information posted on the website.
Where can Stephanie go to see past versions and pages of a website?
A. Stephanie can go to Archive.org to see past versions of the company website
B. If Stephanie navigates to Search.com; she will see old versions of the company website
C. AddressPast.com would have any web pages that are no longer hosted on the company's website
D. She should go to the web page Samspade.org to see web pages that might no longer be on the website
正解：A

質問 9：
Your company has blocked all the ports via external firewall and only allows port 80/443 to connect to the Internet. You want to use FTP to connect to some remote server on the Internet. How would you accomplish this?
A. Use TOR Network
B. Use Reverse Chaining
C. Use HTTP Tunneling
D. Use Proxy Chaining
正解：C