Pass the ECCouncil Certified Ethical Hacker EC0-350 Questions and answers with ExamsMirror

The precaution of prohibiting employees from bringing personal computing devices into a facility is what type of security control?

A botnet can be managed through which of the following?

If an e-commerce site was put into a live environment and the programmers failed to remove the secret entry point that was used during the application development, what is this secret entry point known as?

A certified ethical hacker (CEH) is approached by a friend who believes her husband is cheating. She offers to pay to break into her husband's email account in order to find proof so she can take him to court.  What is the ethical response?

During a penetration test, a tester finds that the web application being analyzed is vulnerable to Cross Site Scripting (XSS). Which of the following conditions must be met to exploit this vulnerability?

Which of the following descriptions is true about a static NAT?

When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true?

A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the corporate network. What tool should the analyst use to perform a Blackjacking attack?

A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While it is effective, the tester finds it tedious to perform extended functions.

On further research, the tester come across a perl script that runs the following msadc functions:system("perl msadc.pl -h $host -C \"echo open $your >testfile\""); 

Which exploit is indicated by this script?

Which statement is TRUE regarding network firewalls preventing Web Application attacks?

What is the main advantage that a network-based IDS/IPS system has over a host-based solution?

WPA2 uses AES for wireless data encryption at which of the following encryption levels?

Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?

A newly discovered flaw in a software application would be considered which kind of security vulnerability?

Which of the following is a symmetric cryptographic standard? 

Which of the following levels of algorithms does Public Key Infrastructure (PKI) use?

A security engineer has been asked to deploy a secure remote access solution that will allow employees to connect to the company’s internal network. Which of the following can be implemented to minimize the opportunity for the man-in-the-middle attack to occur?

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 – no response  TCP port 22 – no response TCP port 23 – Time-to-live exceeded

Which property ensures that a hash function will not produce the same hashed value for two different messages?

How can a policy help improve an employee's security awareness?