Free Certified Ethical Hacker v10 312-50 Exam Practice Test

Which of the following is a command line packet analyzer similar to GUI-based Wireshark?

• tcpdump
• nessus
• etherea
• Jack the ripper

What does the -oX flag do in an Nmap scan?

• Perform an express scan
• Output the results in truncated format to the screen
• Perform an Xmas scan
• Output the results in XML format to a file

First thing you do every office day is to check your email inbox. One morning, you received an email from your best friend and the subject line is quite strange. What should you do?

• Delete the email and pretend nothing happened.
• Forward the message to your supervisor and ask for her opinion on how to handle the situation.
• Forward the message to your company's security response team and permanently delete the messagefrom your computer.
• Reply to the sender and ask them for more information about the message contents.

During a penetration test, the tester conducts an ACK scan using NMAP against the external interface of the DMZ firewall. NMAP reports that port 80 is unfiltered. Based on this response, which type of packet inspection is the firewall conducting?

• Host
• Stateful
• Stateless
• Application

Which NMAP command combination would let a tester scan every TCP port from a class C network that is blocking ICMP with fingerprinting and service detection?

• NMAP -PN -A -O -sS 192.168.2.0/24
• NMAP -P0 -A -O -p1-65535 192.168.0/24
• NMAP -P0 -A -sT -p0-65535 192.168.0/16
• NMAP -PN -O -sS -p 1-1024 192.168.0/8

An NMAP scan of a server shows port 69 is open. What risk could this pose?

• Unauthenticated access
• Weak SSL version
• Cleartext login
• Web portal data leak

To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program.What term is commonly used when referring to this type of testing?

• Fuzzing
• Randomizing
• Mutating
• Bounding

env x=`(){ :;};echo exploit` bash -c 'cat /etc/passwd'What is the Shellshock bash vulnerability attempting to do on a vulnerable Linux host?

• Display passwd content to prompt
• Removes the passwd file
• Changes all passwords in passwd
• Add new user to the passwd file

Supposed you are the Chief Network Engineer of a certain Telco. Your company is planning for a big business expansion and it requires that your network authenticate users connecting using analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network. Which AAA protocol would you implement?

• TACACS+
• DIAMETER
• Kerberos
• RADIUS

You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions.Which command-line utility are you most likely to use?

• Grep
• Notepad
• MS Excel
• Relational Database