Free EC-COUNCIL 312-50v11 Test Practice Test Questions Exam Dumps
Prepare Top EC-COUNCIL 312-50v11 Exam Audio Study Guide Practice Questions Edition
NEW QUESTION 49
Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?
- A. Windows authentication
- B. Single sign-on
- C. Discretionary Access Control (DAC)
- D. Role Based Access Control (RBAC)
Answer: B
NEW QUESTION 50
Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B.
How do you prevent DNS spoofing?
- A. Disable DNS Zone Transfer
- B. Disable DNS timeouts
- C. Install DNS Anti-spoofing
- D. Install DNS logger and track vulnerable packets
Answer: C
NEW QUESTION 51
You are performing a penetration test for a client and have gained shell access to a Windows machine on the internal network. You intend to retrieve all DNS records for the internal domain, if the DNS server is at
192.168.10.2 and the domain name is abccorp.local, what command would you type at the nslookup prompt to attempt a zone transfer?
- A. is-d abccorp.local
- B. Iserver 192.168.10.2-t all
- C. list server=192.168.10.2 type=all
- D. List domain=Abccorp.local type=zone
Answer: A
NEW QUESTION 52
A company's policy requires employees to perform file transfers using protocols which encrypt traffic. You suspect some employees are still performing file transfers using unencrypted protocols because the employees do not like changes. You have positioned a network sniffer to capture traffic from the laptops used by employees in the data ingest department. Using Wireshark to examine the captured traffic, which command can be used as display filter to find unencrypted file transfers?
- A. tcp.port = 23
- B. tcp.port = = 21
- C. tcp.port = = 21 | | tcp.port = =22
- D. tcp.port ! = 21
Answer: B
NEW QUESTION 53
These hackers have limited or no training and know how to use only basic techniques or tools.
What kind of hackers are we talking about?
- A. Black-Hat Hackers A
- B. White-Hat Hackers
- C. Gray-Hat Hacker
- D. Script Kiddies
Answer: D
Explanation:
Explanation
Script Kiddies: These hackers have limited or no training and know how to use only basictechniques or tools.
Even then they may not understand any or all of what they are doing.
NEW QUESTION 54
jane invites her friends Alice and John over for a LAN party. Alice and John access Jane's wireless network without a password. However. Jane has a long, complex password on her router. What attack has likely occurred?
- A. Evil twin
- B. Wardriving
- C. Wireless sniffing
- D. Piggybacking
Answer: A
Explanation:
Explanation
An evil twin may be a fraudulent Wi-Fi access point that appears to be legitimate but is about up to pay attention to wireless communications.[1] The evil twin is that the wireless LAN equivalent of the phishing scam.This type of attack could also be wont to steal the passwords of unsuspecting users, either by monitoring their connections or by phishing, which involves fixing a fraudulent internet site and luring people there.The attacker snoops on Internet traffic employing a bogus wireless access point. Unwitting web users could also be invited to log into the attacker's server, prompting them to enter sensitive information like usernames and passwords. Often, users are unaware they need been duped until well after the incident has occurred.When users log into unsecured (non-HTTPS) bank or e-mail accounts, the attacker intercepts the transaction, since it's sent through their equipment. The attacker is additionally ready to hook up with other networks related to the users' credentials.Fake access points are found out by configuring a wireless card to act as an access point (known as HostAP). they're hard to trace since they will be shut off instantly. The counterfeit access point could also be given an equivalent SSID and BSSID as a close-by Wi-Fi network. The evil twin are often configured to pass Internet traffic through to the legitimate access point while monitoring the victim's connection, or it can simply say the system is temporarily unavailable after obtaining a username and password.
NEW QUESTION 55
in the Common Vulnerability Scoring System (CVSS) v3.1 severity ratings, what range does medium vulnerability fall in?
- A. 4.0-6.9
- B. 40-6.0
- C. 3.9-6.9
- D. 3.0-6.9
Answer: A
Explanation:
NEW QUESTION 56
What type of analysis is performed when an attacker has partial knowledge of inner-workings of the application?
- A. Grey-box
- B. Announced
- C. White-box
- D. Black-box
Answer: A
NEW QUESTION 57
An attacker has installed a RAT on a host. The attacker wants to ensure that when a user attempts to go to
"www.MyPersonalBank.com", the user is directed to a phishing site.
Which file does the attacker need to modify?
- A. Boot.ini
- B. Hosts
- C. Networks
- D. Sudoers
Answer: B
NEW QUESTION 58
Jane is working as a security professional at CyberSol Inc. She was tasked with ensuring the authentication and integrity of messages being transmitted in the corporate network. To encrypt the messages, she implemented a security model in which every user in the network maintains a ring of public keys. In this model, a user needs to encrypt a message using the receiver's public key, and only the receiver can decrypt the message using their private key. What is the security model implemented by Jane to secure corporate messages?
- A. Zero trust network
- B. Web of trust (WOT)
- C. Secure Socket Layer (SSL)
- D. Transport Layer Security (TLS)
Answer: B
NEW QUESTION 59
Don, a student, came across a gaming app in a third-party app store and Installed it. Subsequently, all the legitimate apps in his smartphone were replaced by deceptive applications that appeared legitimate. He also received many advertisements on his smartphone after Installing the app. What is the attack performed on Don in the above scenario?
- A. SIM card attack
- B. Agent Smith attack
- C. Clickjacking
- D. SMS phishing attack
Answer: C
Explanation:
Clickjacking is an attack that tricks a user into clicking a webpage element which is invisible or disguised as another element. this will cause users to unwittingly download malware, visit malicious sites , provide credentials or sensitive information, transfer money, or purchase products online. Typically, clickjacking is performed by displaying an invisible page or HTML element, inside an iframe, on top of the page the user sees. The user believes they're clicking the visible page but actually they're clicking an invisible element within the additional page transposed on top of it. The invisible page might be a malicious page, or a legitimate page the user didn't shall visit - for instance , a page on the user's banking site that authorizes the transfer of cash . There are several variations of the clickjacking attack, such as: * Likejacking - a way during which the Facebook "Like" button is manipulated, causing users to "like" a page they really didn't shall like. * Cursorjacking - a UI redressing technique that changes the cursor for the position the user perceives to a different position. Cursorjacking relies on vulnerabilities in Flash and therefore the Firefox browser, which have now been fixed.
Clickjacking attack example
1. The attacker creates a beautiful page which promises to offer the user a free trip to Tahiti. 2. within the background the attacker checks if the user is logged into his banking site and if so, loads the screen that permits transfer of funds, using query parameters to insert the attacker's bank details into the shape . 3. The bank transfer page is displayed in an invisible iframe above the free gift page, with the "Confirm Transfer" button exactly aligned over the "Receive Gift" button visible to the user. 4. The user visits the page and clicks the "Book My Free Trip" button. 5. actually the user is clicking on the invisible iframe, and has clicked the "Confirm Transfer" button. Funds are transferred to the attacker. 6. The user is redirected to a page with information about the free gift (not knowing what happened within the background).
This example illustrates that, during a clickjacking attack, the malicious action (on the bank website, during this case) can't be traced back to the attacker because the user performed it while being legitimately signed into their own account.
Clickjacking mitigation
There are two general ways to defend against clickjacking: * Client-side methods - the foremost common is named Frame Busting. Client-side methods are often effective in some cases, but are considered to not be a best practice, because they will be easily bypassed. * Server-side methods - the foremost common is X-Frame-Options. Server-side methods are recommended by security experts as an efficient thanks to defend against clickjacking.
NEW QUESTION 60
A post-breach forensic investigation revealed that a known vulnerability in Apache Struts was to blame for the Equifax data breach that affected 143 million customers. A fix was available from the software vendor for several months prior 10 the Intrusion. This Is likely a failure in which of the following security processes?
- A. Secure deployment lifecycle
- B. Security awareness training
- C. Patch management
- D. vendor risk management
Answer: C
Explanation:
Patch management is that the method that helps acquire, test and install multiple patches (code changes) on existing applications and software tools on a pc, enabling systems to remain updated on existing patches and determining that patches are the suitable ones. Managing patches so becomes simple and simple.
Patch Management is usually done by software system firms as a part of their internal efforts to mend problems with the various versions of software system programs and also to assist analyze existing software system programs and discover any potential lack of security features or different upgrades.
Software patches help fix those problems that exist and are detected solely once the software's initial unharness. Patches mostly concern security while there are some patches that concern the particular practicality of programs as well.
NEW QUESTION 61
What port number is used by LDAP protocol?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 62
What piece of hardware on a computer's motherboard generates encryption keys and only releases a part of the key so that decrypting a disk on a new piece of hardware is not possible?
- A. CPU
- B. UEFI
- C. GPU
- D. TPM
Answer: D
Explanation:
Explanation
The TPM is a chip that's part of your - if you bought an off-the-shelf PC, it's soldered onto the motherboard. If you built your own , you can buy one as an add-on module if your motherboard supports it. The , keeping part of the key to itself
NEW QUESTION 63
In Trojan terminology, what is a covert channel?
- A. It is Reverse tunneling technique that uses HTTPS protocol instead of HTTP protocol to establish connections
- B. A channel that transfers information within a computer system or network in a way that violates the security policy
- C. A legitimate communication path within a computer system or network for transfer of data
- D. It is a kernel operation that hides boot processes and services to mask detection
Answer: B
NEW QUESTION 64
Alex, a cloud security engineer working in Eyecloud Inc. is tasked with isolating applications from the underlying infrastructure and stimulating communication via well-defined channels. For this purpose, he used an open-source technology that helped him in developing, packaging, and running applications; further, the technology provides PaaS through OS-level visualization, delivers containerized software packages, and promotes fast software delivery. What is the cloud technology employed by Alex in the above scenario?
- A. Zero trust network
- B. Virtual machine
- C. Docker
- D. Serverless computing
Answer: C
NEW QUESTION 65
Clark, a professional hacker, attempted to perform a Btlejacking attack using an automated tool, Btlejack, and hardware tool, micro:bit. This attack allowed Clark to hijack, read, and export sensitive information shared between connected devices. To perform this attack, Clark executed various btlejack commands. Which of the following commands was used by Clark to hijack the connections?
- A. btlejack -d /dev/ttyACM0 -d /dev/ttyACM2 -s
- B. btlejack-f 0x129f3244-j
- C. btlejack -c any
- D. btlejack -f 0x9c68fd30 -t -m 0x1 fffffffff
Answer: D
NEW QUESTION 66
......
Books for Better 312-50v11 Understanding
Who can imagine exam success without reliable books? As a rule, they are the best self-study materials. Thus, here’s a look at the most top-notch options available on Amazon:
- Learn Ethical Hacking from Scratch - The basics of ethical hacking are covered completely in this manual. Thus, learners will be able to set up a penetration test lab, wherein they can practice the affiliated concepts as well as legal hacking methods. Zaid Sabih is the author of this wonderful guide, which is available on Amazon at a mere cost of slightly more than $22 for the Kindle version. The paper book option is also available and costs $44.99.
- Ethical Hacking Bible - Hugo Hoffman deserves a pat on his back for providing such an extensive source of information on ethical hacking. Try it and you’ll be able to master every exam domain. In all, it is a bundle featuring seven different books. With them, test-takers can hone the subject matter easily as manuals use detailed and elaborate scenarios. Notably, its current edition was published in 2020. Hence, you will acquire only an updated understanding and skills.
- CEH Certified Ethical Hacker All-in-One Exam Guide - This material has been penned down by Matt Walker and is famed for featuring up-to-date information about the EC-Council 312-50v11 exam. The learning objectives at the beginning of each chapter give a detailed insight into what one might acquire at the end. Plus, the book includes two practice tests for you to experience the real setting of the official evaluation.
Go to 312-50v11 Questions - Try 312-50v11 dumps pdf : https://www.dumpsreview.com/312-50v11-exam-dumps-review.html
Dumps Practice Exam Questions Study Guide for the 312-50v11 Exam: https://drive.google.com/open?id=10UsZv-r8sZTTcts3UsovmpPZtm0KXrj1
