Authentic Best resources for 312-50v11 Test Engine Practice Exam
[2022] 312-50v11 PDF Questions - Perfect Prospect To Go With Pass4Leader Practice Exam
NEW QUESTION 39
Infecting a system with malware and using phishing to gain credentials to a system or web application are examples of which phase of the ethical hacking methodology?
- A. Gaining access
- B. Maintaining access
- C. Reconnaissance
- D. Scanning
Answer: A
NEW QUESTION 40
which of the following Bluetooth hacking techniques refers to the theft of information from a wireless device through Bluetooth?
- A. Bluesmacking
- B. Bluejacking
- C. Bluesnarfing
- D. Bluebugging
Answer: C
Explanation:
Bluesnarfing is the unauthorized access of information from a wireless device through a Bluetooth connection, often between phones, desktops, laptops, and PDAs (personal digital assistant).
NEW QUESTION 41
_________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.
- A. RootKit
- B. Trojan
- C. Scanner
- D. Backdoor
- E. DoS tool
Answer: A
NEW QUESTION 42
A company's policy requires employees to perform file transfers using protocols which encrypt traffic. You suspect some employees are still performing file transfers using unencrypted protocols because the employees do not like changes. You have positioned a network sniffer to capture traffic from the laptops used by employees in the data ingest department. Using Wire shark to examine the captured traffic, which command can be used as a display filter to find unencrypted file transfers?
- A. tcp.port != 21
- B. tcp.port ==21 || tcp.port ==22
- C. tcp.port ==21
- D. tcp.port = 23
Answer: B
NEW QUESTION 43
Which service in a PKI will vouch for the identity of an individual or company?
- A. CBC
- B. CA
- C. KDC
- D. CR
Answer: B
NEW QUESTION 44
Which file is a rich target to discover the structure of a website during web-server footprinting?
- A. domain.oct
- B. Robots.txt
- C. index.html
- D. Document root
Answer: D
Explanation:
Explanation
The document root is a directory (a folder) that is stored on your host's servers and that is designated for holding web pages. When someone else looks at your web site, this is the location they will be accessing.
In order for a website to be accessible to visitors, it must be published to the correct directory, the "document root." You might think that there would only be one directory in your space on your host's servers, but often hosts provide services beyond just publishing a website. In this case, they are likely to set up every account with several directories, since each service would require its own.
NEW QUESTION 45
The company ABC recently contracts a new accountant. The accountant will be working with the financial statements. Those financial statements need to be approved by the CFO and then they will be sent to the accountant but the CFO is worried because he wants to be sure that the information sent to the accountant was not modified once he approved it. Which of the following options can be useful to ensure the integrity of the data?
- A. The document can be sent to the accountant using an exclusive USB for that document
- B. The CFO can use a hash algorithm in the document once he approved the financial statements
- C. The CFO can use an excel file with a password
- D. The financial statements can be sent twice, one by email and the other delivered in USB and the accountant can compare both to be sure is the same document
Answer: B
NEW QUESTION 46
Some clients of TPNQM SA were redirected to a malicious site when they tried to access the TPNQM main site. Bob, a system administrator at TPNQM SA, found that they were victims of DNS Cache Poisoning. What should Bob recommend to deal with such a threat?
- A. The use of security agents in clients' computers
- B. The use of DNSSEC
- C. The use of double-factor authentication
- D. Client awareness
Answer: B
NEW QUESTION 47
A DDOS attack is performed at layer 7 to take down web infrastructure. Partial HTTP requests are sent to the web infrastructure or applications. Upon receiving a partial request, the target servers opens multiple connections and keeps waiting for the requests to complete.
Which attack is being described here?
- A. Phlashing
- B. Session splicing
- C. Desynchronization
- D. Slowloris attack
Answer: D
Explanation:
Developed by Robert "RSnake" Hansen, Slowloris is DDoS attack software that permits one computer to require down an internet server. Due the straightforward yet elegant nature of this attack, it requires minimal bandwidth to implement and affects the target server's web server only, with almost no side effects on other services and ports. Slowloris has proven highly-effective against many popular sorts of web server software, including Apache 1.x and 2.x. Over the years, Slowloris has been credited with variety of high-profile server takedowns. Notably, it had been used extensively by Iranian 'hackivists' following the 2009 Iranian presidential election to attack Iranian government internet sites . Slowloris works by opening multiple connections to the targeted web server and keeping them open as long as possible. It does this by continuously sending partial HTTP requests, none of which are ever completed. The attacked servers open more and connections open, expecting each of the attack requests to be completed. Periodically, the Slowloris sends subsequent HTTP headers for every request, but never actually completes the request. Ultimately, the targeted server's maximum concurrent connection pool is filled, and extra (legitimate) connection attempts are denied. By sending partial, as against malformed, packets, Slowloris can easily elapse traditional Intrusion Detection systems. Named after a kind of slow-moving Asian primate, Slowloris really does win the race by moving slowly and steadily. A Slowloris attack must await sockets to be released by legitimate requests before consuming them one by one. For a high-volume internet site , this will take a while . the method are often further slowed if legitimate sessions are reinitiated. But within the end, if the attack is unmitigated, Slowloris-like the tortoise-wins the race. If undetected or unmitigated, Slowloris attacks also can last for long periods of your time . When attacked sockets outing , Slowloris simply reinitiates the connections, continuing to reach the online server until mitigated. Designed for stealth also as efficacy, Slowloris are often modified to send different host headers within the event that a virtual host is targeted, and logs are stored separately for every virtual host. More importantly, within the course of an attack, Slowloris are often set to suppress log file creation. this suggests the attack can catch unmonitored servers off-guard, with none red flags appearing in log file entries. Methods of mitigation Imperva's security services are enabled by reverse proxy technology, used for inspection of all incoming requests on their thanks to the clients' servers. Imperva's secured proxy won't forward any partial connection requests-rendering all Slowloris DDoS attack attempts completely and utterly useless.
NEW QUESTION 48
Ethical hacker jane Smith is attempting to perform an SQL injection attach. She wants to test the response time of a true or false response and wants to use a second command to determine whether the database will return true or false results for user IDs. which two SQL Injection types would give her the results she is looking for?
- A. Time-based and boolean-based
- B. Out of band and boolean-based
- C. union-based and error-based
- D. Time-based and union-based
Answer: D
Explanation:
Explanation
Boolean-based (content-based) Blind SQLi
Boolean-based SQL Injection is an inferential SQL Injection technique that relies on sending an SQL query to the database which forces the application to return a different result depending on whether the query returns a TRUE or FALSE result.
Depending on the result, the content within the HTTP response will change, or remain the same. This allows an attacker to infer if the payload used returned true or false, even though no data from the database is returned. This attack is typically slow (especially on large databases) since an attacker would need to enumerate a database, character by character.
Time-based Blind SQLi
Time-based SQL Injection is an inferential SQL Injection technique that relies on sending an SQL query to the database which forces the database to wait for a specified amount of time (in seconds) before responding. The response time will indicate to the attacker whether the result of the query is TRUE or FALSE.
Depending on the result, an HTTP response will be returned with a delay, or returned immediately.
This allows an attacker to infer if the payload used returned true or false, even though no data from the database is returned. This attack is typically slow (especially on large databases) since an attacker would need to enumerate a database character by character.
https://www.acunetix.com/websitesecurity/sql-injection2/
NEW QUESTION 49
Henry is a penetration tester who works for XYZ organization. While performing enumeration on a client organization, he queries the DNS server for a specific cached DNS record. Further, by using this cached record, he determines the sites recently visited by the organization's user. What is the enumeration technique used by Henry on the organization?
- A. DNS cache poisoning
- B. DNS cache snooping
- C. DNS SEC zone walking
- D. DNS zone walking
Answer: B
NEW QUESTION 50
Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them.
Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B.
How do you prevent DNS spoofing?
- A. Disable DNS Zone Transfer
- B. Disable DNS timeouts
- C. Install DNS Anti-spoofing
- D. Install DNS logger and track vulnerable packets
Answer: C
NEW QUESTION 51
Widespread fraud ac Enron. WorldCom, and Tyco led to the creation of a law that was designed to improve the accuracy and accountability of corporate disclosures. It covers accounting firms and third parties that provide financial services to some organizations and came into effect in 2002. This law is known by what acronym?
- A. HIPAA
- B. SOX
- C. Fed RAMP
- D. PCIDSS
Answer: B
Explanation:
The Sarbanes-Oxley Act of 2002 could be a law the U.S. Congress passed on July thirty of that year to assist defend investors from fallacious money coverage by companies.Also called the SOX Act of 2002 and also the company Responsibility Act of 2002, it mandated strict reforms to existing securities rules and obligatory powerful new penalties on law breakers.
The Sarbanes-Oxley law Act of 2002 came in response to money scandals within the early 2000s involving in public listed corporations like Enron Corporation, Tyco International plc, and WorldCom. The high-profile frauds cask capitalist confidence within the trustiness of company money statements Associate in Nursingd light-emitting diode several to demand an overhaul of decades-old restrictive standards.
NEW QUESTION 52
Null sessions are un-authenticated connections (not using a username or password.) to an NT or 2000 system.
Which TCP and UDP ports must you filter to check null sessions on your network?
- A. 139 and 445
- B. 139 and 443
- C. 137 and 139
- D. 137 and 443
Answer: A
NEW QUESTION 53
Due to a slowdown of normal network operations, the IT department decided to monitor internet traffic for all of the employees. From a legal standpoint, what would be troublesome to take this kind of measure?
- A. IT department would be telling employees who the boss is
- B. The network could still experience traffic slow down.
- C. Not informing the employees that they are going to be monitored could be an invasion of privacy.
- D. All of the employees would stop normal work activities
Answer: C
NEW QUESTION 54
Which type of attack attempts to overflow the content-addressable memory (CAM) table in an Ethernet switch?
- A. DNS cache flooding
- B. DDoS attack
- C. MAC flooding
- D. Evil twin attack
Answer: C
NEW QUESTION 55
The security team of Debry Inc. decided to upgrade Wi-Fi security to thwart attacks such as dictionary attacks and key recovery attacks. For this purpose, the security team started implementing cutting-edge technology that uses a modern key establishment protocol called the simultaneous authentication of equals (SAE), also known as dragonfly key exchange, which replaces the PSK concept. What is the Wi-Fi encryption technology implemented by Debry Inc.?
- A. WPA2
- B. WEP
- C. WPA3
- D. WPA
Answer: A
NEW QUESTION 56
David is a security professional working in an organization, and he is implementing a vulnerability management program in the organization to evaluate and control the risks and vulnerabilities in its IT infrastructure. He is currently executing the process of applying fixes on vulnerable systems to reduce the impact and severity of vulnerabilities. Which phase of the vulnerability-management life cycle is David currently in?
- A. Remediation
- B. Vulnerability scan
- C. verification
- D. Risk assessment
Answer: A
NEW QUESTION 57
jane invites her friends Alice and John over for a LAN party. Alice and John access Jane's wireless network without a password. However. Jane has a long, complex password on her router. What attack has likely occurred?
- A. Evil twin
- B. Wardriving
- C. Wireless sniffing
- D. Piggybacking
Answer: C
Explanation:
Explanation
A wireless sniffer may be a sort of packet analyzer. A packet analyzer (also referred to as a packet sniffer) may be a piece of software or hardware designed to intercept data because it is transmitted over a network and decode the info into a format that's readable for humans. Wireless sniffers are packet analyzers specifically created for capturing data on wireless networks. Wireless sniffers also are commonly mentioned as wireless packet sniffers or wireless network sniffers.Wireless sniffer tools have many uses in commercial IT environments. Their ability to watch , intercept, and decode data because it is in transit makes them useful for:* Diagnosing and investigating network problems* Monitoring network usage, activity, and security* Discovering network misuse, vulnerabilities, malware, and attack attempts* Filtering network traffic* Identifying configuration issues and network bottlenecks* Wireless Packet Sniffer AttacksWhile wireless packet sniffers are valuable tools for maintaining wireless networks, their capabilities make them popular tools for malicious actors also . Hackers can use wireless sniffer software to steal data, spy on network activity, and gather information to use in attacking the network. Logins (usernames and passwords) are quite common targets for attackers using wireless sniffer tools. Wireless network sniffing attacks usually target unsecure networks, like free WiFi publicly places (coffee shops, hotels, airports, etc).Wireless sniffer tools also are commonly utilized in "spoofing" attacks. Spoofing may be a sort of attack where a malicious party uses information obtained by a wireless sniffer to impersonate another machine on the network. Spoofing attacks often target business' networks and may be wont to steal sensitive information or run man-in-the-middle attacks against network hosts.There are two modes of wireless sniffing: monitor mode and promiscuous mode.
In monitor mode, a wireless sniffer is in a position to gather and skim incoming data without sending any data of its own. A wireless sniffing attack in monitor mode are often very difficult to detect due to this. In promiscuous mode, a sniffer is in a position to read all data flowing into and out of a wireless access point.
Since a wireless sniffer in promiscuous mode also sniffs outgoing data, the sniffer itself actually transmits data across the network. This makes wireless sniffing attacks in promiscuous mode easier to detect. it's more common for attackers to use promiscuous mode in sniffing attacks because promiscuous mode allows attackers to intercept the complete range of knowledge flowing through an access point.
Preventing Wireless Sniffer AttacksThere are several measures that organizations should fancy mitigate wireless packet sniffer attacks. First off, organizations (and individual users) should refrain from using insecure protocols. Commonly used insecure protocols include basic HTTP authentication, File Transfer Protocol (FTP), and Telnet. Secure protocols like HTTPS, Secure File Transfer Protocol (SFTP), and Secure Shell (SSH) should be utilized in place of their insecure alternatives when possible. Secure protocols make sure that any information transmitted will automatically be encrypted. If an insecure protocol must be used, organizations themselves got to encrypt any data which will be sent using that protocol. Virtual Private Networks (VPNs) are often wont to encrypt internet traffic and are a well-liked tool for organizations today.Additionally to encrypting information and using secure protocols, companies can prevent attacks by using wireless sniffer software to smell their own networks. this enables security teams to look at their networks from an attacker's perspective and find out sniffing vulnerabilities and attacks ongoing . While this method won't be effective in discovering wireless network sniffers in monitor mode, it's possible to detect sniffers in promiscuous mode (the preferred mode for attackers) by sniffing your own network.
Tools for Detecting Packet SniffersWireless sniffer software programs frequently include features like intrusion and hidden network detection for helping organizations discover malicious sniffers on their networks. additionally to using features that are built into wireless sniffer tools, there are many aftermarket tools available that are designed specifically for detecting sniffing attacks. These tools typically perform functions like monitoring network traffic or scanning network cards in promiscuous mode to detect wireless network sniffers. There are dozens of options (both paid and open source) for sniffer detection tools, so organizational security teams will got to do some research before selecting the proper tool for his or her needs.
NEW QUESTION 58
......
Essential Exam Traits
The EC-Council 312-50v11 evaluation is an extensive one and covers multiple skill domains. To accomplish the aim, the test uses a strict exam structure that includes 125 questions based on the MCQ format. To add more, the exam is 4 hours long and is delivered globally via Pearson VUE and ECC testing centers. If a passing score is concerned, there is no fixed number as the grading system follows the cut-score pattern. As per this pattern, the final passing rate depends upon the exam difficulty level. However, the vendor has analyzed the past exam trends and figured out that usually, the test score varies from 60% to 85%. Speaking of cost, the CEH VUE test voucher will cost you $1,199. Plus, you will need to pay an additional $100 for the exam application process.
Best updated resource for 312-50v11 Online Practice Exam: https://www.pass4leader.com/EC-COUNCIL/312-50v11-exam.html
Realistic Practice 312-50v11 Certified Ethical Hacker Exam (CEH v11) Exam Braindumps: https://drive.google.com/open?id=1S9xfUgoU6QVKSTdMYLfAAnS9MaaqJeKC