312-50v10 Updated Exam Dumps [2022] Practice Valid Exam Dumps Question
312-50v10 Sample with Accurate & Updated Questions
Exam Profile
EC-Council 312-50v10 is an extensive exam that contains 125 questions provided in the multiple-choice type, which should be answered within 4 hours. It is delivered by Pearson VUE and ECC testing centers.
There is no exact information about the minimum passing mark. Grading system follows the cut score, so the grades are directly dependant on the difficulty level of each particular test. Upon analysis of the past exam trends, we can easily conclude that one has to score about 60-85% to come up with flying colours.
The exam cost varies from region to region but applicants must comprehend that paying a fee of $100 is essential for all self-study students. Such students will also submit proof of related work experience of about 2 years.
NEW QUESTION 307
Seth is starting a penetration test from inside the network. He hasn't been given any information about the network. What type of test is he conducting?
- A. External, Blackbox
- B. Internal Whitebox
- C. Internal, Blackbox
- D. External, Whitebox
Answer: C
NEW QUESTION 308
Fred is the network administrator for his company. Fred is testing an internal switch.
From an external IP address, Fred wants to try and trick this switch into thinking it already has established a session with his computer. How can Fred accomplish this?
- A. He can send an IP packet with the SYN bit and the source address of his computer.
- B. Fred can send an IP packet with the ACK bit set to zero and the source address of the switch.
- C. Fred can send an IP packet to the switch with the ACK bit and the source address of his machine.
- D. Fred can accomplish this by sending an IP packet with the RST/SIN bit and the source address of his computer.
Answer: C
NEW QUESTION 309
You are looking for SQL injection vulnerability by sending a special character to web applications. Which of the following is the most useful for quick validation?
- A. Double quotation
- B. Single quotation
- C. Semicolon
- D. Backslash
Answer: B
NEW QUESTION 310
The establishment of a TCP connection involves a negotiation called 3 way handshake.
What type of message sends the client to the server in order to begin this negotiation?
- A. ACK
- B. SYN
- C. SYN-ACK
- D. RST
Answer: B
NEW QUESTION 311
A person approaches a network administrator and wants advice on how to send encrypted email from home.
The end user does not want to have to pay for any license fees or manage server services. Which of the following is the most secure encryption protocol that the network administrator should recommend?
- A. Multipurpose Internet Mail Extensions (MIME)
- B. Hyper Text Transfer Protocol with Secure Socket Layer (HTTPS)
- C. IP Security (IPSEC)
- D. Pretty Good Privacy (PGP)
Answer: D
NEW QUESTION 312
Risks = Threats x Vulnerabilities is referred to as the:
- A. BIA equation
- B. Threat assessment
- C. Disaster recovery formula
- D. Risk equation
Answer: D
Explanation:
Explanation
The most effective way to define risk is with this simple equation:
Risk = Threat x Vulnerability x Cost
This equation is fundamental to all information security.
References:
http://www.icharter.org/articles/risk_equation.html
NEW QUESTION 313
What are two things that are possible when scanning UDP ports? (Choose two.)
- A. The four-way handshake will not be completed
- B. An RFC 1294 message will be returned
- C. A reset will be returned
- D. Nothing
- E. An ICMP message will be returned
Answer: D,E
NEW QUESTION 314
How does the Address Resolution Protocol (ARP) work?
- A. It sends a request packet to all the network elements, asking for the domain name from a specific IP.
- B. It sends a reply packet to all the network elements, asking for the MAC address from a specific IP.
- C. It sends a reply packet for a specific IP, asking for the MAC address.
- D. It sends a request packet to all the network elements, asking for the MAC address from a specific IP.
Answer: D
NEW QUESTION 315
Which type of Nmap scan is the most reliable, but also the most visible, and likely to be picked up by and IDS?
- A. Connect scan
- B. ACK scan
- C. SYN scan
- D. RST scan
- E. FIN scan
Answer: A
NEW QUESTION 316
What is the most common method to exploit the "Bash Bug" or "ShellShock" vulnerability?
- A. SSH
- B. Through Web servers utilizing CGI (Common Gateway Interface) to send a malformed environment variable to a vulnerable Web server
- C. SYN Flood
- D. Manipulate format strings in text fields
Answer: B
Explanation:
Shellshock, also known as Bashdoor, is a family of security bugs in the widely used Unix Bash shell.
One specific exploitation vector of the Shellshock bug is CGI-based web servers.
Note: When a web server uses the Common Gateway Interface (CGI) to handle a document request, it passes various details of the request to a handler program in the environment variable list. For example, the variable HTTP_USER_AGENT has a value that, in normal usage, identifies the program sending the request. If the request handler is a Bash script, or if it executes one for example using the system call, Bash will receive the environment variables passed by the server and will process them. This provides a means for an attacker to trigger the Shellshock vulnerability with a specially crafted server request.
References:
https://en.wikipedia.org/wiki/Shellshock_(software_bug)#Specific_exploitation_vectors
NEW QUESTION 317
Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results?
- A. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.
- B. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.
- C. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.
- D. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.
Answer: D
NEW QUESTION 318
Which of the following is the best countermeasure to encrypting ransomwares?
- A. Analyze the ransomware to get decryption key of encrypted data
- B. Pay a ransom
- C. Keep some generation of off-line backup
- D. Use multiple antivirus softwares
Answer: C
NEW QUESTION 319
A newly discovered flaw in a software application would be considered which kind of security vulnerability?
- A. Input validation flaw
- B. HTTP header injection vulnerability
- C. Time-to-check to time-to-use flaw
- D. 0-day vulnerability
Answer: D
NEW QUESTION 320
What is the correct PCAP filter to capture all TCP traffic going to or from host 192.168.0.125 on port 25?
- A. tcp.port == 25 and ip.host == 192.168.0.125
- B. host 192.168.0.125:25
- C. tcp.src == 25 and ip.host == 192.168.0.125
- D. port 25 and host 192.168.0.125
Answer: A
NEW QUESTION 321
Which of the following is a low-tech way of gaining unauthorized access to systems?
- A. Sniffing
- B. Scanning
- C. Social Engineering
- D. Eavesdropping
Answer: C
Explanation:
Explanation
Social engineering, in the context of information security, refers to psychological manipulation of people into performing actions or divulging confidential information. A type of confidence trick for the purpose of information gathering, fraud, or system access.
References: https://en.wikipedia.org/wiki/Social_engineering_(security)
NEW QUESTION 322
Knowing the nature of backup tapes, which of the following is the MOST RECOMMENDED way of storing backup tapes?
- A. On a different floor in the same building
- B. Inside the data center for faster retrieval in a fireproof safe
- C. In a cool dry environment
- D. In a climate controlled facility offsite
Answer: D
NEW QUESTION 323
An attacker is using nmap to do a ping sweep and a port scanning in a subnet of 254 addresses.
In which order should he perform these steps?
- A. First the port scan to identify interesting services and then the ping sweep to find hosts responding to
icmp echo requests. - B. First the ping sweep to identify live hosts and then the port scan on the live hosts. This way he saves
time. - C. The sequence does not matter. Both steps have to be performed against all hosts.
- D. The port scan alone is adequate. This way he saves time.
Answer: B
NEW QUESTION 324
To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program.
What term is commonly used when referring to this type of testing?
- A. Mutating
- B. Randomizing
- C. Fuzzing
- D. Bounding
Answer: C
NEW QUESTION 325
A possibly malicious sequence of packets that were sent to a web server has been captured by an Intrusion Detection System (IDS) and was saved to a PCAP file. As a network administrator, you need to determine whether this packets are indeed malicious.
What tool are you going to use?
- A. Vulnerability scanner
- B. Intrusion Prevention System (IPS)
- C. Network sniffer
- D. Protocol analyzer
Answer: D
NEW QUESTION 326
A common cryptographical tool is the use of XOR. XOR the following binary values: 10110001 00111010
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 327
Which technical characteristic do Ethereal/Wireshark, TCPDump, and Snort have in common?
- A. They use the same packet capture utility.
- B. They use the same packet analysis engine.
- C. They send alerts to security monitors.
- D. They are written in Java.
Answer: A
NEW QUESTION 328
Which method of password cracking takes the most time and effort?
- A. Rainbow tables
- B. Brute force
- C. Dictionary attack
- D. Shoulder surfing
Answer: B
Explanation:
Explanation
Brute-force cracking, in which a computer tries every possible key or password until it succeeds, is typically very time consuming. More common methods of password cracking, such as dictionary attacks, pattern checking, word list substitution, etc. attempt to reduce the number of trials required and will usually be attempted before brute force.
References: https://en.wikipedia.org/wiki/Password_cracking
NEW QUESTION 329
......
Module 13: Hacking Web Servers
The objective includes your understanding of webserver concepts, attacks, attack tools, attack methodology; countermeasures contrary to webserver attacks; Patch Management; webserver security tools; webserver penetration testing.
Test 312-50v10 is one of the most popular exams offered by EC-Council as far as ethical hacking is concerned. Its intention is to develop candidates in the area of assessing systems for security compromises, suggesting and executing mitigation measures for the same.
Pass EC-COUNCIL 312-50v10 Premium Files Test Engine pdf - Free Dumps Collection: https://www.testkingpass.com/312-50v10-testking-dumps.html