CertBus provides the most up to date and accurate preparing materials of the New Release 312-50V8 certification exam Q and A , testing software, exam PDF and VCE files to help you prepare your New Release 312-50V8 Certified Ethical Hacker v8 exam. What training you are looking for? Come to visit our site and choose CertBus online certification materials, you will get a quick and cost-efficient way to become a EC-COUNCIL New Release certified professional in IT industry.
We CertBus has our own expert team. They selected and published the latest 312-50V8 preparation materials from EC-COUNCIL Official Exam-Center: http://www.certgod.com/312-50v8.html
QUESTION NO:20
The following script shows a simple SQL injection. The script builds an SQL query by
concatenating hard-coded strings together with a string entered by the user:
The user is prompted to enter the name of a city on a Web form. If she enters Chicago, the
query assembled by the script looks similar to the following:
SELECT * FROM OrdersTable WHERE ShipCity = \’Chicago\’
How will you delete the OrdersTable from the database using SQL Injection?
A. Chicago\’; drop table OrdersTable —
B. Delete table\’blah\’; OrdersTable —
C. EXEC; SELECT * OrdersTable > DROP —
D. cmdshell\’; \’del c:\sql\mydb\OrdersTable\’ //
Answer: A
Explanation:
QUESTION NO:16
You are the security administrator of Jaco Banking Systems located in Boston. You are
setting up e-banking website (http://www.ejacobank.com) authentication system. Instead of
issuing banking customer with a single password, you give them a printed list of 100 unique
passwords. Each time the customer needs to log into the e-banking system website, the
customer enters the next password on the list. If someone sees them type the password
using shoulder surfing, MiTM or keyloggers, then no damage is done because the
password will not be accepted a second time. Once the list of 100 passwords is almost
finished, the system automatically sends out a new password list by encrypted e-mail to the
customer.
You are confident that this security implementation will protect the customer from password
abuse.
Two months later, a group of hackers called “HackJihad” found a way to access the onetime
password list issued to customers of Jaco Banking Systems. The hackers set up a
fake website (http://www.e-jacobank.com) and used phishing attacks to direct ignorant
customers to it. The fake website asked users for their e-banking username and password,
and the next unused entry from their one-time password sheet. The hackers collected 200
customer\’s username/passwords this way. They transferred money from the customer\’s
bank account to various offshore accounts.
Your decision of password policy implementation has cost the bank with USD 925, 000 to
hackers. You immediately shut down the e-banking website while figuring out the next best
security solution
What effective security solution will you recommend in this case?
A. Implement Biometrics based password authentication system. Record the customers
face image to the authentication database
B. Configure your firewall to block logon attempts of more than three wrong tries
C. Enable a complex password policy of 20 characters and ask the user to change the
password immediately after they logon and do not store password histories
D. Implement RSA SecureID based authentication system
Answer: D
Explanation:
QUESTION NO:10
How do you defend against ARP Spoofing? Select three.
A. Use ARPWALL system and block ARP spoofing attacks
B. Tune IDS Sensors to look for large amount of ARP traffic on local subnets
C. Use private VLANS
D. Place static ARP entries on servers,workstation and routers
Answer: A,C,D
Explanation:
ARPwall is used in protecting against ARP spoofing.
Incorrect answer:
IDS option may works fine in case of monitoring the traffic from outside the network but not
from internal hosts.
QUESTION NO:5
This type of Port Scanning technique splits TCP header into several packets so that the
packet filters are not able to detect what the packets intends to do.
A. UDP Scanning
B. IP Fragment Scanning
C. Inverse TCP flag scanning
D. ACK flag scanning
Answer: B
Explanation:
QUESTION NO:1
Which of the following countermeasure can specifically protect against both the MAC Flood
and MAC Spoofing attacks?
A. Configure Port Security on the switch
B. Configure Port Recon on the switch
C. Configure Switch Mapping
D. Configure Multiple Recognition on the switch
Answer: A
Explanation:
QUESTION NO:2
Jimmy, an attacker, knows that he can take advantage of poorly designed input validation
routines to create or alter SQL commands to gain access to private data or execute
commands in the database. What technique does Jimmy use to compromise a database?
A. Jimmy can submit user input that executes an operating system command to
compromise a target system
B. Jimmy can gain control of system to flood the target system with requests,preventing
legitimate users from gaining access
C. Jimmy can utilize an incorrect configuration that leads to access with higher-than
expected privilege of the database
D. Jimmy can utilize this particular database threat that is an SQL injection technique to
penetrate a target system
Answer: D
Explanation:
QUESTION NO:21
What are the limitations of Vulnerability scanners? (Select 2 answers)
A. There are often better at detecting well-known vulnerabilities than more esoteric ones
B. The scanning speed of their scanners are extremely high
C. It is impossible for any,one scanning product to incorporate all known vulnerabilities in a
timely manner
D. The more vulnerabilities detected,the more tests required
E. They are highly expensive and require per host scan license
Answer: A,C
Explanation:
QUESTION NO:4
If a competitor wants to cause damage to your organization, steal critical secrets, or put
you out of business, they just have to find a job opening, prepare someone to pass the
interview, have that person hired, and they will be in the organization.
How would you prevent such type of attacks?
A. It is impossible to block these attacks
B. Hire the people through third-party job agencies who will vet them for you
C. Conduct thorough background checks before you engage them
D. Investigate their social networking profiles
Answer: C
Explanation:
QUESTION NO:22
Stephanie works as senior security analyst for a manufacturing company in Detroit.
Stephanie manages network security throughout the organization. Her colleague Jason told
her in confidence that he was able to see confidential corporate information posted on the
external website http://www.jeansclothesman.com. He tries random URLs on the
company\’s website and finds confidential information leaked over the web. Jason says this
happened about a month ago. Stephanie visits the said URLs, but she finds nothing. She is
very concerned about this, since someone should be held accountable if there was
sensitive information posted on the website.
Where can Stephanie go to see past versions and pages of a website?
A. She should go to the web page Samspade.org to see web pages that might no longer
be on the website
B. If Stephanie navigates to Search.com; she will see old versions of the company website
C. Stephanie can go to Archive.org to see past versions of the company website
D. AddressPast.com would have any web pages that are no longer hosted on the
company\’s website
Answer: C
Explanation:
QUESTION NO:18
SYN Flood is a DOS attack in which an attacker deliberately violates the three-way
handshake and opens a large number of half-open TCP connections. The signature of
attack for SYN Flood contains:
A. The source and destination address having the same value
B. A large number of SYN packets appearing on a network without the corresponding reply
packets
C. The source and destination port numbers having the same value
D. A large number of SYN packets appearing on a network with the corresponding reply
packets
Answer: B
Explanation:
CertBus exam braindumps are pass guaranteed. We guarantee your pass for the 312-50V8 exam successfully with our EC-COUNCIL materials. CertBus Certified Ethical Hacker v8 exam PDF and VCE are the latest and most accurate. We have the best EC-COUNCIL in our team to make sure CertBus Certified Ethical Hacker v8 exam questions and answers are the most valid. CertBus exam Certified Ethical Hacker v8 exam dumps will help you to be the EC-COUNCIL specialist, clear your 312-50V8 exam and get the final success.
312-50V8 EC-COUNCIL exam dumps (100% Pass Guaranteed) from CertBus: http://www.certgod.com/312-50v8.html [100% Exam Pass Guaranteed]
Why select/choose CertBus?
Millions of interested professionals can touch the destination of success in exams by certgod.com. products which would be available, affordable, updated and of really best quality to overcome the difficulties of any course outlines. Questions and Answers material is updated in highly outclass manner on regular basis and material is released periodically and is available in testing centers with whom we are maintaining our relationship to get latest material.
 |  |  |  |  | |
|---|---|---|---|---|---|
 |  | | |  | |
| Brand | Certbus | Testking | Pass4sure | Actualtests | Others |
| Price | $45.99 | $124.99 | $125.99 | $189 | $69.99-99.99 |
| Up-to-Date Dumps |  |  | | | |
| Free 365 Days Update | | | | | |
| Real Questions | | | | | |
| Printable PDF | | | | | |
| Test Engine | | | | | |
| One Time Purchase | | | | | |
| Instant Download | | | | | |
| Unlimited Install | | | | | |
| 100% Pass Guarantee | | | | | |
| 100% Money Back | | | | | |
| Secure Payment | | | | | |
| Privacy Protection | | | | | |