Eccouncil 312-50v12 Exam Dumps

Eccouncil 312-50v12 Sample Question Answers

Question # 1

Mike, a security engineer, was recently hired by BigFox Ltd. The company recently experienced disastrous DoS attacks. The management had instructed Mike to build defensive strategies for the company's IT infrastructure to thwart DoS/DDoS attacks. Mike deployed some countermeasures to handle jamming and scrambling attacks. What is the countermeasure Mike applied to defend against jamming and scrambling attacks?

A. Allow the usage of functions such as gets and strcpy 
B. Allow the transmission of all types of addressed packets at the ISP level 
C. Implement cognitive radios in the physical layer 
D. A Disable TCP SYN cookie protection 

Show Answer

Question # 2

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 no response TCP port 22 no response TCP port 23 Time-to-live exceeded

A. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server 
B. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error 
C. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall 
D. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host 

Show Answer

Question # 3

Which of the following statements is TRUE?

A. Packet Sniffers operate on the Layer 1 of the OSI model. 
B. Packet Sniffers operate on Layer 2 of the OSI model.
 C. Packet Sniffers operate on both Layer 2 & Layer 3 of the OSI model. 
D. Packet Sniffers operate on Layer 3 of the OSI model. 

Show Answer

Question # 4

An organization has automated the operation of critical infrastructure from a remote location. For this purpose, all the industrial control systems are connected to the Internet. To empower the manufacturing process, ensure the reliability of industrial networks, and reduce downtime and service disruption, the organization deckled to install an OT security tool that further protects against security incidents such as cyber espionage, zero-day attacks, and malware. Which of the following tools must the organization employ to protect its critical infrastructure?

A. Robotium 
B. BalenaCloud 
C. Flowmon 
D. IntentFuzzer

Show Answer

Question # 5

Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections. Which of the following attack techniques is used by Stella to compromise the web services?

A. XML injection 
B. WS-Address spoofing 
C. SOAPAction spoofing
D. Web services parsing attacks

Show Answer

Question # 6

What type of a vulnerability/attack is it when the malicious person forces the user’s browser to send an authenticated request to a server?

A. Session hijacking 
B. Server side request forgery 
C. Cross-site request forgery 
D. Cross-site scripting

Show Answer

Question # 7

Which of the following provides a security professional with most information about the system’s security posture?

A. Phishing, spamming, sending trojans 
B. Social engineering, company site browsing tailgating 
C. Wardriving, warchalking, social engineering 
D. Port scanning, banner grabbing service identification 

Show Answer

Question # 8

Attempting an injection attack on a web server based on responses to True/False QUESTION NO:s is called which of the following?

A. Compound SQLi 
B. Blind SQLi 
C. Classic SQLi 
D. DMS-specific SQLi 

Show Answer

Question # 9

John, a professional hacker, performs a network attack on a renowned organization and gains unauthorized access to the target network. He remains in the network without being detected for a long time and obtains sensitive information without sabotaging the organization. Which of the following attack techniques is used by John?

A. Advanced persistent theft 
B. threat Diversion theft 
C. Spear-phishing sites 
D. insider threat

Show Answer

Question # 10

The security team of Debry Inc. decided to upgrade Wi-Fi security to thwart attacks such as dictionary attacks and key recovery attacks. For this purpose, the security team started implementing cutting-edge technology that uses a modern key establishment protocol called the simultaneous authentication of equals (SAE), also known as dragonfly key exchange, which replaces the PSK concept. What is the Wi-Fi encryption technology implemented by Debry Inc.?

A. WEP 
B. WPA 
C. WPA2 
D. WPA3 

Show Answer

Question # 11

You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line. Which command would you use? 

A. c:\compmgmt.msc 
B. c:\services.msc
 C. c:\ncpa.cp 
D. c:\gpedit

Show Answer

Question # 12

On performing a risk assessment, you need to determine the potential impacts when some of the critical business processes of the company interrupt its service. What is the name of the process by which you can determine those critical businesses?

A. Emergency Plan Response (EPR) 
B. Business Impact Analysis (BIA) 
C. Risk Mitigation 
D. Disaster Recovery Planning (DRP) 

Show Answer

Question # 13

Which of the following Google advanced search operators helps an attacker in gathering information about websites that are similar to a specified target URL? 

A. [inurl:] 
B. [related:] 
C. [info:] 
D. [site:] 

Show Answer

Question # 14

A post-breach forensic investigation revealed that a known vulnerability in Apache Struts was to blame for the Equifax data breach that affected 143 million customers. A fix was available from the software vendor for several months prior 10 the Intrusion. This Is likely a failure in which of the following security processes? 

A. vendor risk management 
B. Security awareness training
 C. Secure deployment lifecycle 
D. Patch management

Show Answer

Question # 15

Which of the following is a passive wireless packet analyzer that works on Linux-based systems? 

A. Burp Suite 
B. OpenVAS 
C. tshark 
D. Kismet 

Show Answer

Question # 16

Ben purchased a new smartphone and received some updates on it through the OTA method. He received two messages: one with a PIN from the network operator and another asking him to enter the PIN received from the operator. As soon as he entered the PIN, the smartphone started functioning in an abnormal manner. What is the type of attack performed on Ben in the above scenario?

A. Advanced SMS phishing 
B. Bypass SSL pinning 
C. Phishing 
D. Tap 'n ghost attack 

Show Answer

Question # 17

Dorian Is sending a digitally signed email to Polly, with which key is Dorian signing this message and how is Poly validating It? 

A. Dorian is signing the message with his public key. and Poly will verify that the message came from Dorian by using Dorian's private key. 
B. Dorian Is signing the message with Polys public key. and Poly will verify that the message came from Dorian by using Dorian's public key. 
C. Dorian is signing the message with his private key. and Poly will verify that the message came from Dorian by using Dorian's public key. 
D. Dorian is signing the message with Polys private key. and Poly will verify mat the message came from Dorian by using Dorian's public key. 

Show Answer

Question # 18

Harper, a software engineer, is developing an email application. To ensure the confidentiality of email messages. Harper uses a symmetric-key block cipher having a classical 12- or 16-round Feistel network with a block size of 64 bits for encryption, which includes large 8 x 32-bit S-boxes (S1, S2, S3, S4) based on bent functions, modular addition and subtraction, key-dependent rotation, and XOR operations. This cipher also uses a masking key(Km1)and a rotation key (Kr1) for performing its functions. What is the algorithm employed by Harper to secure the email messages?

A. CAST-128 
B. AES 
C. GOST block cipher 
D. DES 

Show Answer

Question # 19

Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?

A. Role Based Access Control (RBAC) 
B. Discretionary Access Control (DAC) 
C. Single sign-on 
D. Windows authentication 

Show Answer

Question # 20

Miley, a professional hacker, decided to attack a target organization's network. To perform the attack, she used a tool to send fake ARP messages over the target network to link her MAC address with the target system's IP address. By performing this, Miley received messages directed to the victim's MAC address and further used the tool to intercept, steal, modify, and block sensitive communication to the target system. What is the tool employed by Miley to perform the above attack?

A. Gobbler 
B. KDerpNSpoof 
C. BetterCAP 
D. Wireshark 

Show Answer

Question # 21

Which of the following scanning method splits the TCP header into several packets and makes it difficult for packet filters to detect the purpose of the packet?

A. ACK flag probe scanning 
B. ICMP Echo scanning 
C. SYN/FIN scanning using IP fragments 
D. IPID scanning

Show Answer

Question # 22

What useful information is gathered during a successful Simple Mail Transfer Protocol (SMTP) enumeration? 

A. The two internal commands VRFY and EXPN provide a confirmation of valid users, email addresses, aliases, and mailing lists. 
B. Reveals the daily outgoing message limits before mailboxes are locked 
C. The internal command RCPT provides a list of ports open to message traffic. 
D. A list of all mail proxy server addresses used by the targeted host 

Show Answer

Question # 23

Insecure direct object reference is a type of vulnerability where the application does not verify if the user is authorized to access the internal object via its name or key. Suppose a malicious user Rob tries to get access to the account of a benign user Ned. Which of the following requests best illustrates an attempt to exploit an insecure direct object reference vulnerability?

A. “GET /restricted/goldtransfer?to=Rob&from=1 or 1=1’ HTTP/1.1Host: westbank.com”
B. “GET /restricted/\r\n\%00account%00Ned%00access HTTP/1.1 Host: westbank.com” 
C. “GET /restricted/accounts/?name=Ned HTTP/1.1 Host westbank.com” 
D. “GET /restricted/ HTTP/1.1 Host: westbank.com

Show Answer

Question # 24

Heather’s company has decided to use a new customer relationship management tool. After performing the appropriate research, they decided to purchase a subscription to a cloud-hosted solution. The only administrative task that Heather will need to perform is the management of user accounts. The provider will take care of the hardware, operating system, and software administration including patching and monitoring. Which of the following is this type of solution?

A. SaaS 
B. IaaS 
C. CaaS 
D. PasS 

Show Answer

Question # 25

After an audit, the auditors Inform you that there is a critical finding that you must tackle Immediately. You read the audit report, and the problem is the service running on port 389. Which service Is this and how can you tackle the problem?

A. The service is LDAP. and you must change it to 636. which is LDPAPS. 
B. The service is NTP. and you have to change It from UDP to TCP in order to encrypt it 
C. The findings do not require immediate actions and are only suggestions. 
D. The service is SMTP, and you must change it to SMIME. which is an encrypted way to send emails. 

Show Answer

Question # 26

You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible Intrusion Detection System. What is the best approach? 

A. Use Alternate Data Streams to hide the outgoing packets from this server. 
B. Use HTTP so that all traffic can be routed vis a browser, thus evading the internal Intrusion Detection Systems.
 C. Install Cryptcat and encrypt outgoing packets from this server. 
D. Install and use Telnet to encrypt all outgoing traffic from this server. 

Show Answer

Question # 27

Mr. Omkar performed tool-based vulnerability assessment and found two vulnerabilities. During analysis, he found that these issues are not true vulnerabilities. What will you call these issues?

A. False positives 
B. True negatives 
C. True positives 
D. False negatives

Show Answer

Question # 28

in this form of encryption algorithm, every Individual block contains 64-bit data, and three keys are used, where each key consists of 56 bits. Which is this encryption algorithm?

A. IDEA 
B. Triple Data Encryption standard 
C. MDS encryption algorithm 
D. AES

Show Answer

Question # 29

Roma is a member of a security team. She was tasked with protecting the internal network of an organization from imminent threats. To accomplish this task, Roma fed threat intelligence into the security devices in a digital format to block and identify inbound and outbound malicious traffic entering the organization's network. Which type of threat intelligence is used by Roma to secure the internal network?

A. Technical threat intelligence 
B. Operational threat intelligence 
C. Tactical threat intelligence 
D. Strategic threat intelligence 

Show Answer

Question # 30

A "Server-Side Includes" attack refers to the exploitation of a web application by injecting scripts in HTML pages or executing arbitrary code remotely. Which web-page file type, if it exists on the web server, is a strong indication that the server is vulnerable to this kind of attack?

A. .stm 
B. .html 
C. .rss 
D. .cms 

Show Answer

Question # 31

Calvin, a grey-hat hacker, targets a web application that has design flaws in its authentication mechanism. He enumerates usernames from the login form of the web application, which requests users to feed data and specifies the incorrect field in case of invalid credentials. Later, Calvin uses this information to perform social engineering. Which of the following design flaws in the authentication mechanism is exploited by Calvin?

A. Insecure transmission of credentials 
B. Verbose failure messages 
C. User impersonation 
D. Password reset mechanism 

Show Answer

Question # 32

Calvin, a software developer, uses a feature that helps him auto-generate the content of a web page without manual involvement and is integrated with SSI directives. This leads to a vulnerability in the developed web application as this feature accepts remote user inputs and uses them on the page. Hackers can exploit this feature and pass malicious SSI directives as input values to perform malicious activities such as modifying and erasing server files. What is the type of injection attack Calvin's web application is susceptible to?

A. Server-side template injection 
B. Server-side JS injection 
C. CRLF injection 
D. Server-side includes injection 

Show Answer

Question # 33

Henry is a penetration tester who works for XYZ organization. While performing enumeration on a client organization, he queries the DNS server for a specific cached DNS record. Further, by using this cached record, he determines the sites recently visited by the organization's user. What is the enumeration technique used by Henry on the organization?

A. DNS zone walking 
B. DNS cache snooping 
C. DNS SEC zone walking 
D. DNS cache poisoning 

Show Answer

Question # 34

Given below are different steps involved in the vulnerability-management life cycle. 1) Remediation 2) Identify assets and create a baseline 3) Verification 4) Monitor 5) Vulnerability scan 6) Risk assessment Identify the correct sequence of steps involved in vulnerability management. 

A. 2-->5-->6-->1-->3-->4 
B. 2-->1-->5-->6-->4-->3 
C. 2-->4-->5-->3-->6--> 1 
D. 1-->2-->3-->4-->5-->6 

Show Answer

Question # 35

Upon establishing his new startup, Tom hired a cloud service provider (CSP) but was dissatisfied with their service and wanted to move to another CSP. What part of the contract might prevent him from doing so? 

A. Virtualization 
B. Lock-in 
C. Lock-down 
D. Lock-up 

Show Answer

Question # 36

Jane is working as a security professional at CyberSol Inc. She was tasked with ensuring the authentication and integrity of messages being transmitted in the corporate network. To encrypt the messages, she implemented a security model in which every user in the network maintains a ring of public keys. In this model, a user needs to encrypt a message using the receiver's public key, and only the receiver can decrypt the message using their private key. What is the security model implemented by Jane to secure corporate messages?

A. Zero trust network 
B. Transport Layer Security (TLS) 
C. Secure Socket Layer (SSL) 
D. Web of trust (WOT) 

Show Answer

Question # 37

Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities. Which type of virus detection method did Chandler use in this context?

A. Heuristic Analysis 
B. Code Emulation 
C. Scanning 
D. Integrity checking 

Show Answer

Question # 38

How can rainbow tables be defeated?

A. Use of non-dictionary words 
B. All uppercase character passwords 
C. Password salting 
D. Lockout accounts under brute force password cracking attempts

Show Answer

Question # 39

Louis, a professional hacker, had used specialized tools or search engines to encrypt all his browsing activity and navigate anonymously to obtain sensitive/hidden information about official government or federal databases. After gathering the Information, he successfully performed an attack on the target government organization without being traced. Which of the following techniques is described in the above scenario?

A. Dark web footprinting 
B. VoIP footpnnting 
C. VPN footprinting 
D. website footprinting 

Show Answer

Question # 40

Dayn, an attacker, wanted to detect if any honeypots are installed in a target network. For this purpose, he used a time-based TCP fingerprinting method to validate the response to a normal computer and the response of a honeypot to a manual SYN request. Which of the following techniques is employed by Dayn to detect honeypots?

A. Detecting honeypots running on VMware 
B. Detecting the presence of Honeyd honeypots 
C. Detecting the presence of Snort_inline honeypots
 D. Detecting the presence of Sebek-based honeypots 

Show Answer

Question # 41

Kevin, an encryption specialist, implemented a technique that enhances the security of keys used for encryption and authentication. Using this technique, Kevin input an initial key to an algorithm that generated an enhanced key that is resistant to brute-force attacks. What is the technique employed by Kevin to improve the security of encryption keys?

A. Key derivation function 
B. Key reinstallation 
C. A Public key infrastructure 
D. Key stretching

Show Answer

Question # 42

Which of the following is considered an exploit framework and has the ability to perform automated attacks on services, ports, applications and unpatched security flaws in a computer system?

A. Wireshark
 B. Maltego 
C. Metasploit 
D. Nessus 

Show Answer

Question # 43

To hide the file on a Linux system, you have to start the filename with a specific character. What is the character? 

A. Exclamation mark (!) 
B. Underscore (_) 
C. Tilde H 
D. Period (.) 

Show Answer

Question # 44

Attacker Rony installed a rogue access point within an organization's perimeter and attempted to intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by johnson in the above scenario?

A. Host-based assessment 
B. Wireless network assessment 
C. Application assessment 
D. Distributed assessment

Show Answer

Question # 45

Which of the following web vulnerabilities would an attacker be attempting to exploit if they delivered the following input?  <!DOCTYPE blah [ < IENTITY trustme SYSTEM "file:///etc/passwd" > ] >

A. XXE 
B. SQLi 
C. IDOR
D. XXS 

Show Answer

Question # 46

Joel, a professional hacker, targeted a company and identified the types of websites frequently visited by its employees. Using this information, he searched for possible loopholes in these websites and injected a malicious script that can redirect users from the web page and download malware onto a victim's machine. Joel waits for the victim to access the infected web application so as to compromise the victim's machine. Which of the following techniques is used by Joel in the above scenario?

A. DNS rebinding attack 
B. Clickjacking attack 
C. MarioNet attack 
D. Watering hole attack

Show Answer

Question # 47

You have compromised a server on a network and successfully opened a shell. You aimed to identify all operating systems running on the network. However, as you attempt to fingerprint all machines in the network using the nmap syntax below, it is not going through. invictus@victim_server.~$ nmap -T4 -O 10.10.0.0/24 TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxx. QUITTING! What seems to be wrong?

A. The nmap syntax is wrong. 
B. This is a common behavior for a corrupted nmap application. 
C. The outgoing TCP/IP fingerprinting is blocked by the host firewall. 
D. OS Scan requires root privileges. 

Show Answer

Question # 48

Richard, an attacker, targets an MNC In this process, he uses a footprinting technique to gather as much information as possible. Using this technique, he gathers domain information such as the target domain name, contact details of its owner, expiry date, and creation date. With this information, he creates a map of the organization's network and misleads domain owners with social engineering to obtain internal details of its network. What type of footprinting technique is employed by Richard?

A. VPN footprinting 
B. Email footprinting 
C. VoIP footprinting 
D. Whois footprinting 

Show Answer

Question # 49

Stephen, an attacker, targeted the industrial control systems of an organization. He generated a fraudulent email with a malicious attachment and sent it to employees of the target organization. An employee who manages the sales software of the operational plant opened the fraudulent email and clicked on the malicious attachment. This resulted in the malicious attachment being downloaded and malware being injected into the sales software maintained in the victim's system. Further, the malware propagated itself to other networked systems, finally damaging the industrial automation components. What is the attack technique used by Stephen to damage the industrial systems?

A. Spear-phishing attack 
B. SMishing attack 
C. Reconnaissance attack 
D. HMI-based attack 

Show Answer

Question # 50

What would you enter if you wanted to perform a stealth scan using Nmap?

A. nmap -sM 
B. nmap -sU 
C. nmap -sS
 D. nmap -sT 

Show Answer

Question # 51

When considering how an attacker may exploit a web server, what is web server footprinting?

A. When an attacker implements a vulnerability scanner to identify weaknesses 
B. When an attacker creates a complete profile of the site's external links and file structures 
C. When an attacker gathers system-level data, including account details and server names 
D. When an attacker uses a brute-force attack to crack a web-server password 

Show Answer

Question # 52

Which type of malware spreads from one system to another or from one network to another and causes similar types of damage as viruses do to the infected system?

A. Rootkit 
B. Trojan 
C. Worm 
D. Adware 

Show Answer

Question # 53

You want to analyze packets on your wireless network. Which program would you use?

A. Wireshark with Airpcap 
B. Airsnort with Airpcap 
C. Wireshark with Winpcap 
D. Ethereal with Winpcap 

Show Answer

Question # 54

Peter, a system administrator working at a reputed IT firm, decided to work from his home and login remotely. Later, he anticipated that the remote connection could be exposed to session hijacking. To curb this possibility, he implemented a technique that creates a safe and encrypted tunnel over a public network to securely send and receive sensitive information and prevent hackers from decrypting the data flow between the endpoints. What is the technique followed by Peter to send files securely through a remote connection?

A. DMZ 
B. SMB signing 
C. VPN 
D. Switch network 

Show Answer

Question # 55

Josh has finished scanning a network and has discovered multiple vulnerable services. He knows that several of these usually have protections against external sources but are frequently susceptible to internal users. He decides to draft an email, spoof the sender as the internal IT team, and attach a malicious file disguised as a financial spreadsheet. Before Josh sends the email, he decides to investigate other methods of getting the file onto the system. For this particular attempt, what was the last stage of the cyber kill chain that Josh performed?

A. Exploitation 
B. Weaponization 
C. Delivery 
D. Reconnaissance 

Show Answer

Question # 56

An attacker decided to crack the passwords used by industrial control systems. In this process, he employed a loop strategy to recover these passwords. He used one character at a time to check whether the first character entered is correct; if so, he continued the loop for consecutive characters. If not, he terminated the loop. Furthermore, the attacker checked how much time the device took to finish one complete password authentication process, through which he deduced how many characters entered are correct. What is the attack technique employed by the attacker to crack the passwords of the industrial control systems?

A. Side-channel attack 
B. Denial-of-service attack 
C. HMI-based attack 
D. Buffer overflow attack 

Show Answer

Question # 57

CyberTech Inc. recently experienced SQL injection attacks on its official website. The company appointed Bob, a security professional, to build and incorporate defensive strategies against such attacks. Bob adopted a practice whereby only a list of entities such as the data type, range, size, and value, which have been approved for secured access, is accepted. What is the defensive technique employed by Bob in the above scenario?

A. Output encoding 
B. Enforce least privileges 
C. Whitelist validation 
D. Blacklist validation

Show Answer