Free EC-COUNCIL 312-50v8 Exam Dumps Questions & Answers

Exhibit: Given the following extract from the snort log on a honeypot, what do you infer from the attack?

• A.  A new user id was created
• B.  The exploit was successful
• C.  The exploit was not successful
• D.  A new port was opened

Bob has a good understanding of cryptography, having worked with it for many years. Cryptography is used to secure data from specific threats, but it does not secure the application from coding errors. It can provide data privacy; integrity and enable strong authentication but it cannot mitigate programming errors. What is a good example of a programming error that Bob can use to explain to the management how encryption will not address all their security concerns?

• A.  Bob can explain that a buffer overflow is an example of programming error and it is a common mistake associated with poor programming technique
• B.  Bob can explain that using passwords to derive cryptographic keys is a form of a programming error
• C.  Bob can explain that a random number generator can be used to derive cryptographic keys but it uses a weak seed value and this is a form of a programming error
• D.  Bob can explain that using a weak key management technique is a form of programming error

You are trying to hijack a telnet session from a victim machine with IP address 10.0.0.5 to Cisco router at 10.0.0.1. You sniff the traffic and attempt to predict the sequence and acknowledgement numbers to successfully hijack the telnet session.
Here is the captured data in tcpdump.

What are the next sequence and acknowledgement numbers that the router will send to the victim machine?

• A.  Sequence number: 87000070 Acknowledgement number: 85320085
• B.  Sequence number: 17768729 Acknowledgement number: 82980070
• C.  Sequence number: 82980010 Acknowledgement number: 17768885
• D.  Sequence number: 82980070 Acknowledgement number: 17768885

A security engineer has been asked to deploy a secure remote access solution that will allow employees to connect to the company's internal network. Which of the following can be implemented to minimize the opportunity for the man-in-the-middle attack to occur?

• A.  Static IP addresses
• B.  IPSec
• C.  Mutual authentication
• D.  SSL

How many bits encryption does SHA-1 use?

• A.  64 bits
• B.  160 bits
• C.  128 bits
• D.  256 bits