Updated Nov-2022 Pass 312-50v10 Exam - Real Practice Test Questions [Q229-Q248]

Rate this post

Updated Nov-2022 Pass 312-50v10 Exam – Real Practice Test Questions

Download Free EC-COUNCIL 312-50v10 Real Exam Questions

Related Positions and Possible Paycheck

Your successful completion of the EC-Council 312-50v10 exam leads you to the CEH certification. By adding this certificate to your resume, you can demonstrate to your potential employer that you have the sufficient expertise required to perform a network infrastructure inspection with the owner’s permission to detect possible security vulnerabilities that a hacker could leverage.

More About EC-Council 312-50 Exam

CEH is the baseline exam for the U.S. Department of Defense, which makes it even more credible. It is thorough in all the required phases affecting ethical hacking. This includes reconnaissance, attaining access, enumerating, keeping access, and ensuring that your tracks are well-covered. Commonly, 312-50v10 certification test is available for taking via ECC Exam or Pearson VUE. It is 4 hours long and the candidates will have to answer 125 multiple-choice questions. If you want to get the CEH certificate, you will need to make sure that you get about 60-85% of the answers correctly. Currently, there is a new version of this test, which is 312-50v11. You can check its details on the official website.

NEW QUESTION 229
When you are getting information about a web server, it is very important to know the HTTP Methods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two critical methods (PUT and DELETE). PUT can upload a file to the server and DELETE can delete a file from the server. You can detect all these methods (GET, POST, HEAD, PUT, DELETE, TRACE) using NMAP script engine.
What nmap script will help you with this task?

http-methods

http enum

http-headers

http-git

You can check HTTP method vulnerability using NMAP.
Example: #nmap -script=http-methods.nse 192.168.0.25
References: http://solutionsatexperts.com/http-method-vulnerability-check-using-nmap/

NEW QUESTION 230
When you are getting information about a web server, it is very important to know the HTTP Methods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two critical methods (PUT and DELETE). PUT can upload a file to the server and DELETE can delete a file from the server.
You can detect all these methods (GET, POST, HEAD, DELETE, TRACE) using NMAP script engine.
What Nmap script will help you with this task?

http-methods

http enum

http-headers

http-git

NEW QUESTION 231
Under what conditions does a secondary name server request a zone transfer from a primary name server?

When a primary SOA is higher that a secondary SOA

When a secondary SOA is higher that a primary SOA

When a primary name server has had its service restarted

When a secondary name server has had its service restarted

When the TTL falls to zero

NEW QUESTION 232
Fingerprinting an Operating System helps a cracker because:

It defines exactly what software you have installed

It opens a security-delayed window based on the port being scanned

It doesn’t depend on the patches that have been applied to fix existing security holes

It informs the cracker of which vulnerabilities he may be able to exploit on your system

NEW QUESTION 233
LM hash is a compromised password hashing function. Which of the following parameters describe LM Hash:?
I – The maximum password length is 14 characters.
II – There are no distinctions between uppercase and lowercase.
III – It’s a simple algorithm, so 10,000,000 hashes can be generated per second.

I, II, and III

I and II

NEW QUESTION 234
Which Open Web Application Security Project (OWASP) implements a web application full of known vulnerabilities?

WebBugs

WebGoat

VULN_HTML

WebScarab

NEW QUESTION 235
A tester has been hired to do a web application security test. The tester notices that the site is dynamic and must make use of a back end database.
In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to attempt breaking a valid SQL request?

Semicolon

Single quote

Exclamation mark

Double quote

NEW QUESTION 236
Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?

Role Based Access Control (RBAC)

Discretionary Access Control (DAC)

Windows authentication

Single sign-on

NEW QUESTION 237
In both pharming and phishing attacks an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims.
What is the difference between pharming and phishing attacks?

In a pharming attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name.

Both pharming and phishing attacks are purely technical and are not considered forms of social engineering.

Both pharming and phishing attacks are identical.

In a phishing attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name.

NEW QUESTION 238
Which of the following is the best countermeasure to encrypting ransomwares?

Use multiple antivirus softwares

Keep some generation of off-line backup

Analyze the ransomware to get decryption key of encrypted data

Pay a ransom

NEW QUESTION 239
An attacker with access to the inside network of a small company launches a successful STP manipulation
attack. What will he do next?

He will create a SPAN entry on the spoofed root bridge and redirect traffic to his computer.

He will activate OSPF on the spoofed root bridge.

He will repeat this action so that is escalates to a DoS attack.

He will repeat the same attack against all L2 switches of the network.

NEW QUESTION 240
A hacker has successfully infected an internet-facing server which he will then use to send junk mail, take
part in coordinated attacks, or host junk email content.
Which sort of trojan infects this server?

Botnet Trojan

Turtle Trojans

Banking Trojans

Ransomware Trojans

NEW QUESTION 241
Switches maintain a CAM Table that maps individual MAC addresses on the network to physical ports on the switch.

In MAC flooding attack, a switch is fed with many Ethernet frames, each containing different source MAC addresses, by the attacker. Switches have a limited memory for mapping various MAC addresses to physical ports. What happens when the CAM table becomes full?

Switch then acts as hub by broadcasting packets to all machines on the network

The CAM overflow table will cause the switch to crash causing Denial of Service

The switch replaces outgoing frame switch factory default MAC address of FF:FF:FF:FF:FF:FF

Every packet is dropped and the switch sends out SNMP alerts to the IDS port

NEW QUESTION 242
Your team has won a contract to infiltrate an organization. The company wants to have the attack be as realistic as possible; therefore, they did not provide any information besides the company name. What should be the first step in security testing the client?

Reconnaissance

Escalation

Scanning

Enumeration

Explanation

NEW QUESTION 243
A hacker was able to sniff packets on a company’s wireless network. The following information was discovered:

Using the Exlcusive OR, what was the original message?

00101000 11101110

11010111 00010001

00001101 10100100

11110010 01011011

NEW QUESTION 244
(Note: the student is being tested on concepts learnt during passive OS fingerprinting, basic TCP/IP connection concepts and the ability to read packet signatures from a sniff dump.). Snort has been used to capture packets on the network. On studying the packets, the penetration tester finds it to be abnormal. If you were the penetration tester, why would you find this abnormal?
What is odd about this attack? Choose the best answer.

This is not a spoofed packet as the IP stack has increasing numbers for the three flags.

This is back orifice activity as the scan comes from port 31337.

The attacker wants to avoid creating a sub-carries connection that is not normally valid.

These packets were crafted by a tool, they were not created by a standard IP stack.

NEW QUESTION 245
John is an incident handler at a financial institution. His steps in a recent incident are not up to the standards of the company. John frequently forgets some steps and procedures while handling responses as they are very stressful to perform. Which of the following actions should John take to overcome this problem with the least administrative effort?

Create an incident checklist.

Select someone else to check the procedures.

Increase his technical skills.

Read the incident manual every time it occurs.

NEW QUESTION 246
Which of the following DoS tools is used to attack target web applications by starvation of available sessions on the web server?
The tool keeps sessions at halt using never-ending POST transmissions and sending an arbitrarily large content-length header value.

My Doom

Astacheldraht

R-U-Dead-Yet?(RUDY)

LOIC

NEW QUESTION 247
The network administrator contacts you and tells you that she noticed the temperature on the internal wireless router increases by more than 20% during weekend hours when the office was closed. She asks you to investigate the issue because she is busy dealing with a big conference and she doesn’t have time to perform the task.
What tool can you use to view the network traffic being sent and received by the wireless router?

Wireshark

Nessus

Netcat

Netstat

Explanation
Wireshark is a Free and open source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education.

NEW QUESTION 248
The Heartbleed bug was discovered in 2014 and is widely referred to under MITRE’s Common Vulnerabilities and Exposures (CVE) as CVE-2014-0160. This bug affects the OpenSSL implementation of the transport layer security (TLS) protocols defined in RFC6520.
What type of key does this bug leave exposed to the Internet making exploitation of any compromised system very easy?

Private

Public

Shared

Root

Explanation
The data obtained by a Heartbleed attack may include unencrypted exchanges between TLS parties likely to be confidential, including any form post data in users’ requests. Moreover, the confidential data exposed could include authentication secrets such as session cookies and passwords, which might allow attackers to impersonate a user of the service.
An attack may also reveal private keys of compromised parties.
References: https://en.wikipedia.org/wiki/Heartbleed

Loading …

Certification Path

The EC Council Certified Ethical Hacker v10 Exam 312-50v10 Exam certification include only one 312-50v10 certification exam.

312-50v10 Dumps 100 Pass Guarantee With Latest Demo: https://www.trainingdump.com/EC-COUNCIL/312-50v10-practice-exam-dumps.html

Updated Nov-2022 Pass 312-50v10 Exam – Real Practice Test Questions [Q229-Q248]