EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 191:

  Clark, a professional hacker, was hired by an organization lo gather sensitive Information about its competitors surreptitiously. Clark gathers the server IP address of the target organization using Whole footprinting. Further, he entered the server IP address as an input to an online tool to retrieve information such as the network range of the target organization and to identify the network topology and operating system used in the network. What is the online tool employed by Clark in the above scenario?

  A. AOL
  B. ARIN
  C. DuckDuckGo
  D. Baidu
  B. ARIN

• Question 192:

  Which of the following represents the initial two commands that an IRC client sends to join an IRC network?

  A. USER, NICK
  B. LOGIN, NICK
  C. USER, PASS
  D. LOGIN, USER
  A. USER, NICK

• Question 193:

  Annie, a cloud security engineer, uses the Docker architecture to employ a client/server model in the application she is working on. She utilizes a component that can process API requests and handle various Docker objects, such as containers, volumes. Images, and networks. What is the component of the Docker architecture used by Annie in the above scenario?

  A. Docker client
  B. Docker objects
  C. Docker daemon
  D. Docker registries
  C. Docker daemon

• Question 194:

  An LDAP directory can be used to store information similar to a SQL database. LDAP uses a _____ database structure instead of SQL's _____ structure. Because of this, LDAP has difficulty representing many-to-one relationships.

  A. Relational, Hierarchical
  B. Strict, Abstract
  C. Hierarchical, Relational
  D. Simple, Complex
  C. Hierarchical, Relational

• Question 195:

  Daniel Is a professional hacker who Is attempting to perform an SQL injection attack on a target website. www.movlescope.com. During this process, he encountered an IDS that detects SQL Injection attempts based on predefined signatures. To evade any comparison statement, he attempted placing characters such as `'or '1'='1" In any bask injection statement such as "or 1=1." Identify the evasion technique used by Daniel in the above scenario.

  A. Null byte
  B. IP fragmentation
  C. Char encoding
  D. Variation
  D. Variation

• Question 196:

  Rebecca, a security professional, wants to authenticate employees who use web services for safe and secure communication. In this process, she employs a component of the Web Service Architecture, which is an extension of SOAP, and it can maintain the integrity and confidentiality of SOAP messages.

  Which of the following components of the Web Service Architecture is used by Rebecca for securing the communication?

  A. WSDL
  B. WS Work Processes
  C. WS-Policy
  D. WS-Security
  D. WS-Security

• Question 197:

  Kate dropped her phone and subsequently encountered an issue with the phone's internal speaker. Thus, she is using the phone's loudspeaker for phone calls and other activities. Bob, an attacker, takes advantage of this vulnerability and secretly exploits the hardware of Kate's phone so that he can monitor the loudspeaker's output from data sources such as voice assistants, multimedia messages, and audio files by using a malicious app to breach speech privacy. What is the type of attack Bob performed on Kate in the above scenario?

  A. Man-in-the-disk attack
  B. aLTEr attack
  C. SIM card attack
  D. Spearphone attack
  D. Spearphone attack

• Question 198:

  Study the following log extract and identify the attack.

  

  A. Hexcode Attack
  B. Cross Site Scripting
  C. Multiple Domain Traversal Attack
  D. Unicode Directory Traversal Attack
  D. Unicode Directory Traversal Attack

• Question 199:

  Which of the following is the structure designed to verify and authenticate the identity of individuals within the enterprise taking part in a data exchange?

  A. SOA
  B. biometrics
  C. single sign on
  D. PKI
  D. PKI

• Question 200:

  Samuel a security administrator, is assessing the configuration of a web server. He noticed that the server permits SSlv2 connections, and the same private key certificate is used on a different server that allows SSLv2 connections. This vulnerability makes the web server vulnerable to attacks as the SSLv2 server can leak key information.

  Which of the following attacks can be performed by exploiting the above vulnerability?

  A. DROWN attack
  B. Padding oracle attack
  C. Side-channel attack
  D. DUHK attack
  A. DROWN attack