312-50v10 Exam Brain Dumps - Study Notes and Theory [Jan-2022]
100% Guaranteed Results 312-50v10 Unlimited 745 Questions
Module 2: Footprinting & Reconnaissance
Here the applicants need to demonstrate their competency in footprinting principles; footprinting via search engines; footprinting with the help of advanced Google hacking methods; footprinting via social networks; understanding various methods for website footprinting; understanding various methods for email footprinting; understanding various methods of competitive intelligence; understanding various methods for WHO IS footprinting; understanding various methods for network footprinting; understanding various methods of footprinting via social engineering; footprinting tools & countermeasures; footprinting Pen Testing.
The benefit in Obtaining the 312-50v10 Exam Certification
- The CEH will increase candidate salary
- Knowledge of thinking like a hacker
- Candidate can Enhance his knowledge of risks and vulnerabilities
- Develop a security career
- It’s not only helpful for penetration testers
- Learn to utilize actual hacking tools
NEW QUESTION 223
Which of the following is the least-likely physical characteristic to be used in biometric control that supports a large company?
- A. Fingerprints
- B. Height and Weight
- C. Voice
- D. Iris patterns
Answer: B
NEW QUESTION 224
Which protocol is used for setting up secured channels between two devices, typically in VPNs?
- A. IPSEC
- B. PPP
- C. SET
- D. PEM
Answer: A
NEW QUESTION 225
A covert channel is a channel that
- A. transfers information over, within a computer system, or network that is encrypted.
- B. transfers information via a communication path within a computer system, or network for transfer of data.
- C. transfers information over, within a computer system, or network that is within the security policy.
- D. transfers information over, within a computer system, or network that is outside of the security policy.
Answer: D
NEW QUESTION 226
Joseph was the Web site administrator for the Mason Insurance in New York, who's main Web site was located at www.masonins.com. Joseph uses his laptop computer regularly to administer the Web site. One night, Joseph received an urgent phone call from his friend, Smith. According to Smith, the main Mason Insurance web site had been vandalized! All of its normal content was removed and replaced with an attacker's message ''Hacker Message: You are dead! Freaks!" From his office, which was directly connected to Mason Insurance's internal network, Joseph surfed to the Web site using his laptop. In his browser, the Web site looked completely intact.
No changes were apparent. Joseph called a friend of his at his home to help troubleshoot the problem. The Web site appeared defaced when his friend visited using his DSL connection. So, while Smith and his friend could see the defaced page, Joseph saw the intact Mason Insurance web site. To help make sense of this problem, Joseph decided to access the Web site using hisdial-up ISP. He disconnected his laptop from the corporate internal network and used his modem to dial up the same ISP used by Smith. After his modem connected, he quickly typed www.masonins.com in his browser to reveal the following web page:
After seeing the defaced Web site, he disconnected his dial-up line, reconnected to the internal network, and used Secure Shell (SSH) to log in directly to the Web server. He ran Tripwire against the entire Web site, and determined that every system file and all the Web content on the server were intact. How did the attacker accomplish this hack?
- A. SQL injection
- B. DNS poisoning
- C. ARP spoofing
- D. Routing table injection
Answer: B
NEW QUESTION 227
What kind of detection techniques is being used in antivirus softwares that identifies malware by collecting
data from multiple protected systems and instead of analyzing files locally it's made on the provider's
environment.
- A. Cloud based
- B. Honypot based
- C. Heuristics based
- D. Behavioral based
Answer: A
NEW QUESTION 228
Gavin owns a white-hat firm and is performing a website security audit for one of his clients. He begins by running a scan which looks for common misconfigurations and outdated software versions. Which of the following tools is he most likely using?
- A. Armitage
- B. Nmap
- C. Metasploit
- D. Nikto
Answer: B
NEW QUESTION 229
Which of the following statements is TRUE?
- A. Sniffers operate on Layer 3 of the OSI model
- B. Sniffers operate on both Layer 2 & Layer 3 of the OSI model.
- C. Sniffers operate on the Layer 1 of the OSI model.
- D. Sniffers operate on Layer 2 of the OSI model
Answer: D
NEW QUESTION 230
A penetration tester is conducting a port scan on a specific host. The tester found several ports opened
that were confusing in concluding the Operating System (OS) version installed. Considering that NMAP
result below, which of the following is likely to be installed on the target machine by the OS? Starting
NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not
shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/
tcp open netbios-ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:8
- A. The host is likely a Linux machine.
- B. The host is likely a printer.
- C. The host is likely a Windows machine.
- D. The host is likely a router.
Answer: B
NEW QUESTION 231
The Open Web Application Security Project (OWASP) is the worldwide not-for-profit charitable organization focused on improving the security of software. What item is the primary concern on OWASP's Top Ten Project Most Critical Web Application Security Risks?
- A. Path disclosure
- B. Cross Site Scripting
- C. Injection
- D. Cross Site Request Forgery
Answer: C
NEW QUESTION 232
Which of the following is considered an acceptable option when managing a risk?
- A. Reject the risk.
- B. Mitigate the risk.
- C. Deny the risk.
- D. Initiate the risk.
Answer: B
NEW QUESTION 233
What are the three types of authentication?
- A. Something you: have, know, are
- B. Something you: show, have, prove
- C. Something you: know, remember, prove
- D. Something you: show, prove, are
Answer: A
NEW QUESTION 234
Eve stole a file named secret.txt, transferred it to her computer and she just entered these commands:
What is she trying to achieve?
- A. She is encrypting the file.
- B. She is using John the Ripper to view the contents of the file.
- C. She is using ftp to transfer the file to another hacker named John.
- D. She is using John the Ripper to crack the passwords in the secret.txt file
Answer: D
NEW QUESTION 235
The configuration allows a wired or wireless network interface controller to pass all traffic it receives to the central processing unit (CPU), rather than passing only the frames that the controller is intended to receive.
Which of the following is being described?
- A. port forwarding
- B. WEM
- C. multi-cast mode
- D. promiscuous mode
Answer: D
Explanation:
Explanation
Promiscuous mode refers to the special mode of Ethernet hardware, in particular network interface cards (NICs), that allows a NIC to receive all traffic on the network, even if it is not addressed to this NIC. By default, a NIC ignores all traffic that is not addressed to it, which is done by comparing the destination address of the Ethernet packet with the hardware address (a.k.a. MAC) of the device. While this makes perfect sense for networking, non-promiscuous mode makes it difficult to use network monitoring and analysis software for diagnosing connectivity issues or traffic accounting.
References: https://www.tamos.com/htmlhelp/monitoring/
NEW QUESTION 236
Which of the following will perform an Xmas scan using NMAP?
- A. nmap -sV 192.168.1.254
- B. nmap -sP 192.168.1.254
- C. nmap -sA 192.168.1.254
- D. nmap -sX 192.168.1.254
Answer: D
NEW QUESTION 237
Which access control mechanism allows for multiple systems to use a central authentication server (CAS)
that permits users to authenticate once and gain access to multiple systems?
- A. Windows authentication
- B. Single sign-on
- C. Discretionary Access Control (DAC)
- D. Role Based Access Control (RBAC)
Answer: B
NEW QUESTION 238
Which of these options is the most secure procedure for storing backup tapes?
- A. On a different floor in the same building
- B. Inside the data center for faster retrieval in a fireproof safe
- C. In a cool dry environment
- D. In a climate controlled facility offsite
Answer: D
Explanation:
Explanation
An effective disaster data recovery strategy should consist of producing backup tapes and housing them in an offsite storage facility. This way the data isn't compromised if a natural disaster affects the business' office. It is highly recommended that the backup tapes be handled properly and stored in a secure, climate controlled facility. This provides peace of mind, and gives the business almost immediate stability after a disaster.
References:
http://www.entrustrm.com/blog/1132/why-is-offsite-tape-storage-the-best-disaster-recovery-strategy
NEW QUESTION 239
Which of the following tools can be used for passive OS fingerprinting?
- A. nmap
- B. tracert
- C. ping
- D. tcpdump
Answer: D
Explanation:
The passive operating system fingerprinting is a feature built into both the pf and tcpdump tools.
References: http://geek00l.blogspot.se/2007/04/tcpdump-privilege-dropping-passive- os.html
NEW QUESTION 240
......
Module 7: Malware Threats
To tackle the questions associated with this subject, the applicants must be conversant with the basic malware and malware propagation methods; Trojans, their kinds, and how to infect systems; viruses, their kinds, and how they infect files; computer worms; malware analysis processes; various techniques to identify malware; malware countermeasures; malware penetration testing.
312-50v10 Dumps PDF - Want To Pass 312-50v10 Fast: https://www.prepawayexam.com/EC-COUNCIL/braindumps.312-50v10.ete.file.html