Latest EC0-350 Exam Questions

A.   

Linux passwords can be encrypted with MD5

C.   

Linux passwords can be encrypted with DES

D.   

Linux passwords can be encrypted with Blowfish

Linux passwords are enrcypted using MD5, DES, and the NEW addition
Blowfish. The default on most linux systems is dependant on the distribution, RedHat uses
MD5, while slackware uses DES. The blowfish option is there for those who wish to use it.
The encryption algorithm in use can be determined by authconfig on RedHat-based
systems, or by reviewing one of two locations, on PAM-based systems (Pluggable
Authentication Module) it can be found in /etc/pam.d/, the system-auth file or authconfig
files. In other systems it can be found in /etc/security/ directory.

D.   

Using unpredictable sequence numbers secures sessions against hijacking

Protection of a session needs to focus on the unique session identifier
because it is the only thing that distinguishes users. If the session ID is compromised,
attackers can impersonate other users on the system. The first thing is to ensure that the
sequence of identification numbers issued by the session management system is
unpredictable; otherwise, it's trivial to hijack another user's session. Having a large number
of possible session IDs (meaning that they should be very long) means that there are a lot
more permutations for an attacker to try.

B.   

Henry is using a denial of service attack which is a valid threat used by an attacker

Henry’s intention is to perform a DoS attack against his target, possibly a
DDoS attack. He uses systems other than his own to perform the attack in order to cover
the tracks back to him and to get more “punch” in the DoS attack if he uses multiple
systems.

D.   

The exploit was not successful

The attacker submits a PASS to the honeypot and receives a login incorrect
before disconnecting.

D.   

alert tcp any any -> any any 21 (content:"user root";)

The snort rule header is built by defining action (alert), protocol (tcp), from IP
subnet port (any any), to IP subnet port (any any 21), Payload Detection Rule Options
(content:”user root”;)

B.   

Using the manual method of telnet to each of the open ports of XYZ.

B.   

121-371

Package number 120 have already been received by the server and the
window is 250 packets, so any package number from 121 (next in sequence) to 371 (121+250).

D.   

Bad quality assurance on software produced.

Technically, a buffer overflow is a problem with the program's internal
implementation.

C.   

shared key authentication

A.   

Fragmentation of packets

If the default fragmentation reassembly timeout is set to higher on the client
than on the IDS then the it is possible to send an attack in fragments that will never be
reassembled in the IDS but they will be reassembled and read on the client computer
acting victim.