EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 181:

  Gerard, a disgruntled ex-employee of Sunglass IT Solutions, targets this organization to perform sophisticated attacks and bring down its reputation in the market. To launch the attacks process, he performed DNS footprinting to gather information about ONS servers and to identify the hosts connected in the target network. He used an automated tool that can retrieve information about DNS zone data including DNS domain names, computer names. IP addresses. DNS records, and network Who is records. He further exploited this information to launch other sophisticated attacks. What is the tool employed by Gerard in the above scenario?

  A. Knative
  B. zANTI
  C. Towelroot
  D. Bluto
  D. Bluto

• Question 182:

  ping-* 6 192.168.0.101 Output: Pinging 192.168.0.101 with 32 bytes of data: Reply from 192.168.0.101: bytes=32 time<1ms TTL=128 Reply from 192.168.0.101: bytes=32 time<1ms TTL=128 Reply from 192.168.0.101: bytes=32 time<1ms TTL=128 Reply from 192.168.0.101: bytes=32 time<1ms TTL=128 Reply from 192.168.0.101: bytes=32 time<1ms TTL=128 Reply from 192.168.0.101: Ping statistics for 192.168.0101 Packets: Sent = 6, Received = 6, Lost = 0 (0% loss). Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms What does the option * indicate?

  A. t
  B. s
  C. a
  D. n
  D. n

• Question 183:

  Under what conditions does a secondary name server request a zone transfer from a primary name server?

  A. When a primary SOA is higher that a secondary SOA
  B. When a secondary SOA is higher that a primary SOA
  C. When a primary name server has had its service restarted
  D. When a secondary name server has had its service restarted
  E. When the TTL falls to zero
  A. When a primary SOA is higher that a secondary SOA

• Question 184:

  "........is an attack type for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. It is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hot-spot by posing as a legitimate provider. This type of attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there."

  Fill in the blank with appropriate choice.

  A. Evil Twin Attack
  B. Sinkhole Attack
  C. Collision Attack
  D. Signal Jamming Attack
  A. Evil Twin Attack

• Question 185:

  What type of a vulnerability/attack is it when the malicious person forces the user's browser to send an authenticated request to a server?

  A. Session hijacking
  B. Server side request forgery
  C. Cross-site request forgery
  D. Cross-site scripting
  C. Cross-site request forgery

• Question 186:

  A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering that NMAP result below, which of the following is likely to be installed on the target machine by the OS? Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/tcp open netbios- ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:8

  A. The host is likely a Linux machine.
  B. The host is likely a printer.
  C. The host is likely a router.
  D. The host is likely a Windows machine.
  B. The host is likely a printer.

• Question 187:

  You are tasked to configure the DHCP server to lease the last 100 usable IP addresses in subnet to. 1.4.0/23. Which of the following IP addresses could be teased as a result of the new configuration?

  A. 210.1.55.200
  B. 10.1.4.254
  C. 10.1.5.200
  D. 10.1.4.156
  C. 10.1.5.200

• Question 188:

  Although FTP traffic is not encrypted by default, which layer 3 protocol would allow for end- to-end encryption of the connection?

  A. SFTP
  B. Ipsec
  C. SSL
  D. FTPS
  B. Ipsec

• Question 189:

  What is correct about digital signatures?

  A. A digital signature cannot be moved from one signed document to another because it is the hash of the original document encrypted with the private key of the signing party.
  B. Digital signatures may be used in different documents of the same type.
  C. A digital signature cannot be moved from one signed document to another because it is a plain hash of the document content.
  D. Digital signatures are issued once for each user and can be used everywhere until they expire.
  A. A digital signature cannot be moved from one signed document to another because it is the hash of the original document encrypted with the private key of the signing party.

• Question 190:

  Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. Identify the behavior of the adversary In the above scenario.

  A. use of command-line interface
  B. Data staging
  C. Unspecified proxy activities
  D. Use of DNS tunneling
  C. Unspecified proxy activities