Authentic ECCouncil 312-50v12 Exam Dumps PDF - 2024 Updated
Get Prepared for Your 312-50v12 Exam With Actual 573 Questions
NEW QUESTION # 110
Sophia is a shopping enthusiast who spends significant time searching for trendy outfits online. Clark, an attacker, noticed her activities several times and sent a fake email containing a deceptive page link to her social media page displaying all-new and trendy outfits. In excitement, Sophia clicked on the malicious link and logged in to that page using her valid credentials. Which of the following tools is employed by Clark to create the spoofed email?
- A. PyLoris
- B. PLCinject
- C. Evilginx
- D. Slowloris
Answer: C
Explanation:
Evilginx Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes proxy_pass and sub_filter to proxy and modify HTTP content, while intercepting traffic between client and server.
NEW QUESTION # 111
Mirai malware targets loT devices. After infiltration, it uses them to propagate and create botnets that then used to launch which types of attack?
- A. Birthday attack
- B. MITM attack
- C. DDoS attack
- D. Password attack
Answer: C
NEW QUESTION # 112
Attacker Rony installed a rogue access point within an organization's perimeter and attempted to intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by johnson in the above scenario?
- A. Distributed assessment
- B. Host-based assessment
- C. Application assessment
- D. Wireless network assessment
Answer: D
Explanation:
Wireless network assessment determines the vulnerabilities in an organization's wireless networks. In the past, wireless networks used weak and defective data encryption mechanisms. Now, wireless network standards have evolved, but many networks still use weak and outdated security mechanisms and are open to attack. Wireless network assessments try to attack wireless authentication mechanisms and gain unauthorized access. This type of assessment tests wireless networks and identifies rogue networks that may exist within an organization's perimeter. These assessments audit client-specified sites with a wireless network. They sniff wireless network traffic and try to crack encryption keys. Auditors test other network access if they gain access to the wireless network.
NEW QUESTION # 113
What is the role of test automation in security testing?
- A. It can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.
- B. It should be used exclusively. Manual testing is outdated because of low speed and possible test setup inconsistencies.
- C. It is an option but it tends to be very expensive.
- D. Test automation is not usable in security due to the complexity of the tests.
Answer: A
NEW QUESTION # 114
What useful information is gathered during a successful Simple Mail Transfer Protocol (SMTP) enumeration?
- A. Reveals the daily outgoing message limits before mailboxes are locked
- B. The two internal commands VRFY and EXPN provide a confirmation of valid users, email addresses, aliases, and mailing lists.
- C. A list of all mail proxy server addresses used by the targeted host
- D. The internal command RCPT provides a list of ports open to message traffic.
Answer: B
NEW QUESTION # 115
Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company.
The phishing message will often use the name of the company CEO, President, or Managers. The time a hacker spends performing research to locate this information about a company is known as?
- A. Investigation
- B. Reconnaissance
- C. Enumeration
- D. Exploration
Answer: B
Explanation:
Cyber Kill Chain Methodology 1. Reconnaissance - Gathering information about the target.
NEW QUESTION # 116
Suppose that you test an application for the SQL injection vulnerability. You know that the backend database is based on Microsoft SQL Server. In the login/password form, you enter the following credentials:
Username: attack' or 1=1 -
Password: 123456
Based on the above credentials, which of the following SQL commands are you expecting to be executed by the server, if there is indeed an SQL injection vulnerability?
- A. select * from Users where UserName = 'attack or 1=1 -- and UserPassword = '123456'
- B. select * from Users where UserName = 'attack'' or 1=1 -- and UserPassword = '123456'
- C. select * from Users where UserName = 'attack' or 1=1 --' and UserPassword = '123456'
- D. select * from Users where UserName = 'attack' or 1=1 -- and UserPassword = '123456'
Answer: C
NEW QUESTION # 117
Annie, a cloud security engineer, uses the Docker architecture to employ a client/server model in the application she is working on. She utilizes a component that can process API requests and handle various Docker objects, such as containers, volumes. Images, and networks. What is the component of the Docker architecture used by Annie in the above scenario?
- A. Docker registries
- B. Docker objects
- C. Docker client
- D. Docker daemon
Answer: D
Explanation:
Docker uses a client-server design. The docker client talks to the docker daemon, that will the work of building, running, and distributing your docker containers. The docker client and daemon will run on the same system, otherwise you will connect a docker consumer to a remote docker daemon. The docker consumer and daemon communicate using a REST API, over OS sockets or a network interface.
The docker daemon (dockerd) listens for docker API requests and manages docker objects like pictures, containers, networks, and volumes. A daemon may communicate with other daemons to manage docker services.
NEW QUESTION # 118
An attacker identified that a user and an access point are both compatible with WPA2 and WPA3 encryption. The attacker installed a rogue access point with only WPA2 compatibility in the vicinity and forced the victim to go through the WPA2 four-way handshake to get connected. After the connection was established, the attacker used automated tools to crack WPA2-encrypted messages. What is the attack performed in the above scenario?
- A. Downgrade security attack
- B. Side-channel attack
- C. Cache-based attack
- D. Timing-based attack
Answer: B
NEW QUESTION # 119
Eric, a cloud security engineer, implements a technique for securing the cloud resources used by his organization. This technique assumes by default that a user attempting to access the network is not an authentic entity and verifies every incoming connection before allowing access to the network. Using this technique, he also imposed conditions such that employees can access only the resources required for their role.
What is the technique employed by Eric to secure cloud resources?
- A. Demilitarized zone
- B. Serverless computing
- C. Container technology
- D. Zero trust network
Answer: D
NEW QUESTION # 120
Andrew is an Ethical Hacker who was assigned the task of discovering all the active devices hidden by a restrictive firewall in the IPv4 range in a given target network.
Which of the following host discovery techniques must he use to perform the given task?
- A. UDP scan
- B. TCP Maimon scan
- C. arp ping scan
- D. ACK flag probe scan
Answer: C
Explanation:
One of the most common Nmap usage scenarios is scanning an Ethernet LAN. Most LANs, especially those that use the private address range granted by RFC 1918, do not always use the overwhelming majority of IP addresses. When Nmap attempts to send a raw IP packet, such as an ICMP echo request, the OS must determine a destination hardware (ARP) address, such as the target IP, so that the Ethernet frame can be properly addressed. .. This is required to issue a series of ARP requests. This is best illustrated by an example where a ping scan is attempted against an Area Ethernet host. The -send-ip option tells Nmap to send IP-level packets (rather than raw Ethernet), even on area networks. The Wireshark output of the three ARP requests and their timing have been pasted into the session.
Raw IP ping scan example for offline targets
This example took quite a couple of seconds to finish because the (Linux) OS sent three ARP requests at 1 second intervals before abandoning the host. Waiting for a few seconds is excessive, as long as the ARP response usually arrives within a few milliseconds. Reducing this timeout period is not a priority for OS vendors, as the overwhelming majority of packets are sent to the host that actually exists. Nmap, on the other hand, needs to send packets to 16 million IP s given a target like 10.0.0.0/8. Many targets are pinged in parallel, but waiting 2 seconds each is very delayed.
There is another problem with raw IP ping scans on the LAN. If the destination host turns out to be unresponsive, as in the previous example, the source host usually adds an incomplete entry for that destination IP to the kernel ARP table. ARP tablespaces are finite and some operating systems become unresponsive when full. If Nmap is used in rawIP mode (-send-ip), Nmap may have to wait a few minutes for the ARP cache entry to expire before continuing host discovery.
ARP scans solve both problems by giving Nmap the highest priority. Nmap issues raw ARP requests and handles retransmissions and timeout periods in its sole discretion. The system ARP cache is bypassed. The example shows the difference. This ARP scan takes just over a tenth of the time it takes for an equivalent IP.
Example b ARP ping scan of offline target
In example b, neither the -PR option nor the -send-eth option has any effect. This is often because ARP has a default scan type on the Area Ethernet network when scanning Ethernet hosts that Nmap discovers. This includes traditional wired Ethernet as 802.11 wireless networks. As mentioned above, ARP scanning is not only more efficient, but also more accurate. Hosts frequently block IP-based ping packets, but usually cannot block ARP requests or responses and communicate over the network.Nmap uses ARP instead of all targets on equivalent targets, even if different ping types (such as -PE and -PS) are specified. LAN.. If you do not need to attempt an ARP scan at all, specify -send-ip as shown in Example a "Raw IP Ping Scan for Offline Targets".
If you give Nmap control to send raw Ethernet frames, Nmap can also adjust the source MAC address. If you have the only PowerBook in your security conference room and a large ARP scan is initiated from an Apple-registered MAC address, your head may turn to you. Use the -spoof-mac option to spoof the MAC address as described in the MAC Address Spoofing section.
NEW QUESTION # 121
A penetration tester is performing the footprinting process and is reviewing publicly available information about an organization by using the Google search engine.
Which of the following advanced operators would allow the pen tester to restrict the search to the organization's web domain?
- A. [allinurl:]
- B. [link:]
- C. [location:]
- D. [site:]
Answer: D
Explanation:
Google hacking or Google dorking https://en.wikipedia.org/wiki/Google_hacking It is a hacker technique that uses Google Search and other Google applications to find security holes in the configuration and computer code that websites are using. Google dorking could also be used for OSINT.
Search syntax https://en.wikipedia.org/wiki/Google_Search
Google's search engine has its own built-in query language. The following list of queries can be run to find a list of files, find information about your competition, track people, get information about SEO backlinks, build email lists, and of course, discover web vulnerabilities.
- [site:] - Search within a specific website
Incorrect answers:
- [allinurl:] - it can be used to fetch results whose URL contains all the specified characters
- [link:] - Search for links to pages
- [location:] - A tricky option.
NEW QUESTION # 122
Tony wants to integrate a 128-bit symmetric block cipher with key sizes of 128,192, or 256 bits into a software program, which involves 32 rounds of computational operations that include substitution and permutation operations on four 32-bit word blocks using 8-variable S-boxes with 4-bit entry and 4-bit exit. Which of the following algorithms includes all the above features and can be integrated by Tony into the software program?
- A. RC5
- B. TEA
- C. CAST-128
- D. serpent
Answer: D
NEW QUESTION # 123
Which of the following statements about a zone transfer is correct? (Choose three.)
- A. A zone transfer is accomplished with the nslookup service
- B. A zone transfer can be prevented by blocking all inbound TCP port 53 connections
- C. A zone transfer passes all zone information that a nslookup server maintains
- D. A zone transfer passes all zone information that a DNS server maintains
- E. Zone transfers cannot occur on the Internet
- F. A zone transfer is accomplished with the DNS
Answer: B,D,F
NEW QUESTION # 124
An organization has automated the operation of critical infrastructure from a remote location. For this purpose, all the industrial control systems are connected to the Internet. To empower the manufacturing process, ensure the reliability of industrial networks, and reduce downtime and service disruption, the organization deckled to install an OT security tool that further protects against security incidents such as cyber espionage, zero-day attacks, and malware. Which of the following tools must the organization employ to protect its critical infrastructure?
- A. IntentFuzzer
- B. Robotium
- C. BalenaCloud
- D. Flowmon
Answer: D
Explanation:
Source: https://www.flowmon.com
Flowmon empowers manufacturers and utility companies to ensure the reliability of their industrial networks confidently to avoid downtime and disruption of service continuity. This can be achieved by continuous monitoring and anomaly detection so that malfunctioning devices or security incidents, such as cyber espionage, zero-days, or malware, can be reported and remedied as quickly as possible.
NEW QUESTION # 125
......
ECCouncil 312-50v12 (Certified Ethical Hacker) Certification Exam is an essential certification program for professionals who want to establish themselves as experts in the field of cybersecurity. 312-50v12 exam covers a wide range of topics and is designed to test the candidate's knowledge and skills in ethical hacking and network security. Passing 312-50v12 exam is a significant achievement that demonstrates a professional's commitment to the field of cybersecurity and enhances their career opportunities.
Accurate & Verified New 312-50v12 Answers As Experienced in the Actual Test!: https://pass4sure.examtorrent.com/312-50v12-prep4sure-dumps.html
