Certified Ethical Hacker: 312-50

You have installed antivirus software and you want to be sure that your AV signatures are working correctly. You don't want to risk the deliberate introduction of a live virus to test the AV software. You would like to write a harmless test virus, which is based on the European Institute for Computer Antivirus Research format that can be detected by the AV software.

How should you proceed?

A. Type the following code in notepad and save the file as SAMPLEVIRUS.COM. Your antivirus program springs into action whenever you attempt to open, run or copy it.X5O!P %@AP[4\PZX54(P^)7CC)7}$SAMPLEVIRUS-STANDARDANTIVIRUS-TEST-FILE!$H+H*

B. Type the following code in notepad and save the file as AVFILE.COM. Your antivirus program springs into action whenever you attempt to open, run or copy it.X5O!P %@AP[4\PZX54(P^)7CC)7}$AVFILE-STANDARD-ANTIVIRUS-TESTFILE!$H+H*

C. Type the following code in notepad and save the file as TESTAV.COM. Your antivirus program springs into action whenever you attempt to open, run or copy it.X5O!P %@AP[4\PZX54(P^)7CC)7}$TESTAV-STANDARD-ANTIVIRUSTEST-FILE!$H+H*

D. Type the following code in notepad and save the file as EICAR.COM. Your antivirus program springs into action whenever you attempt to open, run or copy it.X5O!P %@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TESTFILE!$H+H*

An attacker runs netcat tool to transfer a secret file between two hosts.

Machine A: netcat -1 p 1234 < secretfile

Machine B: netcat 192.168.3.4 > 1234

He is worried about information being sniffed on the network.

How would the attacker use netcat to encrypt information before transmitting it on the wire?

A. Machine A: netcat -1 p s password 1234 < testfileMachine B: netcat 1234

B. Machine A: netcat -1 e magickey p 1234 < testfileMachine B: netcat 1234

C. Machine A: netcat -1 p 1234 < testfile pw passwordMachine B: netcat 1234 pw password

D. Use cryptcat instead of netcat.

You are conducting a port scan on a subnet that has ICMP blocked. You have discovered 23 live systems and after scanning each of them you notice that they all show port 21 in closed state. What should be the next logical step that should be performed?

A. Connect to open ports to discover applications.

B. Perform a ping sweep to identify any additional systems that might be up.

C. Perform a SYN scan on port 21 to identify any additional systems that might be up.

D. Rescan every computer to verify the results.