EC0-350 Practice Test

You run nmap port Scan on 10.0.0.5 and attempt to gain banner/server information from
services running on ports 21, 110 and 123.
Here is the output of your scan results:

Which of the following nmap command did you run?

A.

nmap -A -sV -p21, 110, 123 10.0.0.5

B.

nmap -F -sV -p21, 110, 123 10.0.0.5

C.

nmap -O -sV -p21, 110, 123 10.0.0.5

D.

nmap -T -sV -p21, 110, 123 10.0.0.5

What type of Virus is shown here?

A.

Cavity Virus

B.

Macro Virus

C.

Boot Sector Virus

D.

Metamorphic Virus

E.

Sparse Infector Virus

David is a security administrator working in Boston. David has been asked by the office's
manager to block all POP3 traffic at the firewall because he believes employees are
spending too much time reading personal email. How can David block POP3 at the
firewall?

A.

David can block port 125 at the firewall.

B.

David can block all EHLO requests that originate from inside the office.

C.

David can stop POP3 traffic by blocking all HELO requests that originate from inside the
office.

D.

David can block port 110 to block all POP3 traffic.

This attack technique is used when a Web application is vulnerable to an SQL Injection but
the results of the Injection are not visible to the attacker.

A.

Unique SQL Injection

B.

Blind SQL Injection

C.

Generic SQL Injection

D.

Double SQL Injection

TCP SYN Flood attack uses the three-way handshake mechanism.
1. An attacker at system A sends a SYN packet to victim at system B.
2. System B sends a SYN/ACK packet to victim A.
3. As a normal three-way handshake mechanism system A should send an ACK packet to
system B, however, system A does not send an ACK packet to system B. In this case client
B is waiting for an ACK packet from client A.
This status of client B is called _________________

A.

"half-closed"

B.

"half open"

C.

"full-open"

D.

"xmas-open"