[Mar 23, 2022] 312-50v10 Exam Dumps - Try Best 312-50v10 Exam Questions - ExamsLabs
Verified 312-50v10 exam dumps Q&As with Correct 745 Questions and Answers
Module 8: Sniffing
Within this topic area, the test takers should have a good grasp of sniffing concepts; MAC attacks; DHCP attacks; ARP Poisoning; MAC Spoofing attacks; DNS poisoning; sniffing tools; sniffing countermeasures; various methods to identify sniffing; sniffing Pen Testing.
Who should take the 312-50v10 exam
The EC Council Certified Ethical Hacker v10 Exam 312-50v10 Exam certification is an internationally-recognized validation that identifies persons who earn it as possessing skilled as a Certified Ethical Hacker Version 10 (CEH). if a candidate wants significant improvement in career growth needs enhanced knowledge, skills, and talents. The EC Council Certified Ethical Hacker v10 Exam 312-50v10 Exam certification provide proof of this advanced knowledge and skill. If a candidate has knowledge of associated technologies and skills that are required to pass EC Council Certified Ethical Hacker v10 Exam 312-50v10 Exam then he should take this exam.
NEW QUESTION 252
You are a Penetration Tester and are assigned to scan a server. You need to use a scanning technique wherein the TCP Header is split into many packets so that it becomes difficult to detect what the packets are meant for.
Which of the below scanning technique will you use?
- A. ACK flag scanning
- B. TCP Scanning
- C. Inverse TCP flag scanning
- D. IP Fragment Scanning
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 253
>NMAP -sn 192.168.11.200-215 The NMAP command above performs which of the following?
- A. A ping scan
- B. A trace sweep
- C. A port scan
- D. An operating system detect
Answer: C
NEW QUESTION 254
When a normal TCP connection starts, a destination host receives a SYN
(synchronize/start) packet from a source host and sends back a SYN/ACK (synchronize acknowledge). The destination host must then hear an ACK (acknowledge) of the SYN/ACK before the connection is established. This is referred to as the "TCP three-way handshake." While waiting for the ACK to the SYN ACK, a connection queue of finite size on the destination host keeps track of connections waiting to be completed. This queue typically empties quickly since the ACK is expected to arrive a few milliseconds after the SYN ACK.
How would an attacker exploit this design by launching TCP SYN attack?
- A. Attacker generates TCP SYN packets with random destination addresses towards a victim host
- B. Attacker generates TCP ACK packets with random source addresses towards a victim host
- C. Attacker generates TCP RST packets with random source addresses towards a victim host
- D. Attacker floods TCP SYN packets with random source addresses towards a victim host
Answer: D
NEW QUESTION 255
An IT security engineer notices that the company's web server is currently being hacked.
What should the engineer do next?
- A. Record as much information as possible from the attack.
- B. Perform a system restart on the company's web server.
- C. Unplug the network connection on the company's web server.
- D. Determine the origin of the attack and launch a counterattack.
Answer: A
NEW QUESTION 256
env x=`(){ :;};echo exploit` bash -c 'cat /etc/passwd'
What is the Shellshock bash vulnerability attempting to do on a vulnerable Linux host?
- A. Display passwd content to prompt
- B. Add new user to the passwd file
- C. Changes all passwords in passwd
- D. Removes the passwd file
Answer: A
Explanation:
To extract private information, attackers are using a couple of techniques. The simplest extraction attacks are in the form:
() {:;}; /bin/cat /etc/passwd
That reads the password file /etc/passwd, and adds it to the response from the web server.
So an attacker injecting this code through the Shellshock vulnerability would see the password file dumped out onto their screen as part of the web page returned.
References: https://blog.cloudflare.com/inside-shellshock/
NEW QUESTION 257
Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers.
Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?
- A. Software only, they are the most effective.
- B. Passwords are always best obtained using Hardware key loggers.
- C. Hardware and Software Keyloggers.
- D. Hardware, Software, and Sniffing.
Answer: D
NEW QUESTION 258
Using Windows CMD, how would an attacker list all the shares to which the current user context has access?
- A. NET VIEW
- B. NET CONFIG
- C. NET FILE
- D. NET USE
Answer: D
Explanation:
Connects a computer to or disconnects a computer from a shared resource, or displays information about computer connections. The command also controls persistent net connections. Used without parameters, net use retrieves a list of network connections.
References: https://technet.microsoft.com/en-us/library/bb490717.aspx
NEW QUESTION 259
John is an incident handler at a financial institution. His steps in a recent incident are not up to the standards of the company. John frequently forgets some steps and procedures while handling responses as they are very stressful to perform. Which of the following actions should John take to overcome this problem with the least administrative effort?
- A. Create an incident checklist
- B. Select someone else to check the procedures
- C. Read the incident manual every time it occurs
- D. Increase his technical skills
Answer: A
NEW QUESTION 260
Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored?
- A. integrity algorithms
- B. symmetric algorithms
- C. hashing algorithms
- D. asymmetric algorithms
Answer: C
NEW QUESTION 261
Which of the following is a command line packet analyzer similar to GUI-based Wireshark?
- A. etherea
- B. Jack the ripper
- C. tcpdump
- D. nessus
Answer: C
Explanation:
Explanation
tcpdump is a common packet analyzer that runs under the command line. It allows the user to display TCP/IP and other packets being transmitted or received over a network to which the computer is attached.
References: https://en.wikipedia.org/wiki/Tcpdump
NEW QUESTION 262
Cryptography is the practice and study of techniques for secure communication in the presence of third parties (called adversaries.) More generally, it is about constructing and analyzing protocols that overcome the influence of adversaries and that are related to various aspects in information security such as data confidentiality, data integrity, authentication, and non-repudiation. Modern cryptography intersects the disciplines of mathematics, computer science, and electrical engineering. Applications of cryptography include ATM cards, computer passwords, and electronic commerce.
Basic example to understand how cryptography works is given below:
Which of the following choices is true about cryptography?
- A. Secure Sockets Layer (SSL) use the asymmetric encryption both (public/private key pair) to deliver the shared session key and to achieve a communication way.
- B. Symmetric-key algorithms are a class of algorithms for cryptography that use the different cryptographic keys for both encryption of plaintext and decryption of ciphertext.
- C. Public-key cryptography, also known as asymmetric cryptography, public key is for decrypt, private key is for encrypt.
- D. Algorithm is not the secret, key is the secret.
Answer: A
NEW QUESTION 263
Which of the following items is unique to the N-tier architecture method of designing software applications?
- A. Application layers can be separated, allowing each layer to be upgraded independently from other layers.
- B. It is compatible with various databases including Access, Oracle, and SQL.
- C. Data security is tied into each layer and must be updated for all layers when any upgrade is performed.
- D. Application layers can be written in C, ASP.NET, or Delphi without any performance loss.
Answer: A
NEW QUESTION 264
Eve stole a file named secret.txt, transferred it to her computer and she just entered these commands:
What is she trying to achieve?
- A. She is using ftp to transfer the file to another hacker named John.
- B. She is using John the Ripper to view the contents of the file.
- C. She is using John the Ripper to crack the passwords in the secret.txt file.
- D. She is encrypting the file.
Answer: C
NEW QUESTION 265
You are performing a penetration test for a client and have gained shell access to a Windows machine on
the internal network. You intend to retrieve all DNS records for the internal domain. If the DNS server is at
192.168.10.2 and the domain name is abccorp.local, what command would you type at the nslookup
prompt to attempt a zone transfer?
- A. Iserver 192.168.10.2 -t all
- B. Is -d accorp.local
- C. list domain=abccorp.local type=zone
- D. list server=192.168.10.2 type=all
Answer: B
NEW QUESTION 266
What does a type 3 code 13 represent? (Choose two.)
- A. Network unreachable
- B. Echo request
- C. Time exceeded
- D. Destination unreachable
- E. Administratively prohibited
- F. Port unreachable
Answer: D,E
NEW QUESTION 267
The purpose of a _______is to deny network access to local area networks and other information assets
by unauthorized wireless devices.
- A. Wireless Access Point
- B. Wireless Access Control List
- C. Wireless Jammer
- D. Wireless Analyzer
Answer: B
NEW QUESTION 268
What type of analysis is performed when an attacker has partial knowledge of inner-workings of the application?
- A. Grey-box
- B. White-box
- C. Black-box
- D. Announced
Answer: A
NEW QUESTION 269
Which initial procedure should an ethical hacker perform after being brought into an organization?
- A. Turn over deliverables.
- B. Sign a formal contract with non-disclosure.
- C. Assess what the organization is trying to protect.
- D. Begin security testing.
Answer: B
NEW QUESTION 270
Switches maintain a CAM Table that maps individual MAC addresses on the network to physical ports on the switch.
In MAC flooding attack, a switch is fed with many Ethernet frames, each containing different source MAC addresses, by the attacker. Switches have a limited memory for mapping various MAC addresses to physical ports. What happens when the CAM table becomes full?
- A. Switch then acts as hub by broadcasting packets to all machines on the network
- B. The switch replaces outgoing frame switch factory default MAC address of FF:FF:FF:FF:FF:FF
- C. The CAM overflow table will cause the switch to crash causing Denial of Service
- D. Every packet is dropped and the switch sends out SNMP alerts to the IDS port
Answer: A
NEW QUESTION 271
An attacker changes the profile information of a particular user (victim) on the target website. The attacker uses this string to update the victim's profile to a text file and then submit the data to the attacker's database.
<iframe src=""http://www.vulnweb.com/updateif.php"" style=""display:none""></iframe> What is this type of attack (that can use either HTTP GET or HTTP POST) called?
- A. Browser Hacking
- B. SQL Injection
- C. Cross-Site Request Forgery
- D. Cross-Site Scripting
Answer: C
NEW QUESTION 272
Bob, your senior colleague, has sent you a mail regarding aa deal with one of the clients.
You are requested to accept the offer and you oblige.
After 2 days, Bob denies that he had ever sent a mail.
What do you want to "know" to prove yourself that it was Bob who had send a mail?
- A. Authentication
- B. Confidentiality
- C. Non-Repudiation
- D. Integrity
Answer: C
NEW QUESTION 273
Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil
Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397-1872883824-861252104-501.
What needs to happen before Matthew has full administrator access?
- A. He must perform privilege escalation.
- B. He needs to disable antivirus protection.
- C. He needs to gain physical access.
- D. He already has admin privileges, as shown by the "501" at the end of the SID.
Answer: A
NEW QUESTION 274
Which tool allows analysts and pen testers to examine links between data using graphs and link analysis?
- A. Cain & Abel
- B. Wireshark
- C. Maltego
- D. Metasploit
Answer: C
NEW QUESTION 275
The network team has well-established procedures to follow for creating new rules on the firewall. This includes having approval from a manager prior to implementing any new rules. While reviewing the firewall configuration, you notice a recently implemented rule but cannot locate manager approval for it. What would be a good step to have in the procedures for a situation like this?
- A. Do not roll back the firewall rule as the business may be relying upon it, but try to get manager approval as soon as possible.
- B. Immediately roll back the firewall rule until a manager can approve it
- C. Monitor all traffic using the firewall rule until a manager can approve it.
- D. Have the network team document the reason why the rule was implemented without prior manager approval.
Answer: B
NEW QUESTION 276
You are manually conducting Idle Scanning using Hping2. During your scanning you notice that almost every query increments the IPID regardless of the port being queried. One or two of the queries cause the IPID to increment by more than one value. Why do you think this occurs?
- A. Hping2 cannot be used for idle scanning.
- B. These ports are actually open on the target system.
- C. The zombie you are using is not truly idle.
- D. A stateful inspection firewall is resetting your queries.
Answer: C
NEW QUESTION 277
......
How to study the 312-50v10 Exam
ExamsLabs expert team recommends you to prepare some notes on these topics along with it don't forget to practice EC Council Certified Ethical Hacker v10 Exam 312-50v10 Exam which been written by our expert team, Both these will help you a lot to clear this exam with good marks.
EC-COUNCIL 312-50v10 Test Engine PDF - All Free Dumps: https://certificationsdesk.examslabs.com/EC-COUNCIL/CertifiedEthicalHacker/best-312-50v10-exam-dumps.html