EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 81:

  Attempting an injection attack on a web server based on responses to True/False

  QUESTION NO:s is called which of the following?

  A. Compound SQLi
  B. Blind SQLi
  C. Classic SQLi
  D. DMS-specific SQLi
  B. Blind SQLi

• Question 82:

  Mason, a professional hacker, targets an organization and spreads Emotet malware through malicious script. After infecting the victim's device. Mason further used Emotet to spread the infection across local networks and beyond to compromise as many machines as possible. In this process, he used a tool, which is a self-extracting RAR file, to retrieve information related to network resources such as writable share drives. What is the tool employed by Mason in the above scenario?

  A. NetPass.exe
  B. Outlook scraper
  C. WebBrowserPassView
  D. Credential enumerator
  D. Credential enumerator

• Question 83:

  This TCP flag instructs the sending system to transmit all buffered data immediately.

  A. SYN
  B. RST
  C. PSH
  D. URG
  E. FIN
  C. PSH

• Question 84:

  The network administrator at Spears Technology, Inc has configured the default gateway Cisco router's access-list as below:

  You are hired to conduct security testing on their network.

  You successfully brute-force the SNMP community string using a SNMP crack tool.

  The access-list configured at the router prevents you from establishing a successful connection.

  You want to retrieve the Cisco configuration from the router. How would you proceed?

  A. Use the Cisco's TFTP default password to connect and download the configuration file
  B. Run a network sniffer and capture the returned traffic with the configuration file from the router
  C. Run Generic Routing Encapsulation (GRE) tunneling protocol from your computer to the router masking your IP address
  D. Send a customized SNMP set request with a spoofed source IP address in the range - 192.168.1.0
  B. Run a network sniffer and capture the returned traffic with the configuration file from the router
  D. Send a customized SNMP set request with a spoofed source IP address in the range - 192.168.1.0

• Question 85:

  Morris, an attacker, wanted to check whether the target AP is in a locked state. He attempted using different utilities to identify WPS-enabled APs in the target wireless network. Ultimately, he succeeded with one special command-line utility. Which of the following command-line utilities allowed Morris to discover the WPS-enabled APs?

  A. wash
  B. ntptrace
  C. macof
  D. net View
  A. wash

• Question 86:

  Password cracking programs reverse the hashing process to recover passwords.(True/False.)

  A. True
  B. False
  B. False

• Question 87:

  Which type of malware spreads from one system to another or from one network to another and causes similar types of damage as viruses do to the infected system?

  A. Rootkit
  B. Trojan
  C. Worm
  D. Adware
  C. Worm

• Question 88:

  Suppose that you test an application for the SQL injection vulnerability. You know that the backend database is based on Microsoft SQL Server. In the login/password form, you enter the following credentials: Username: attack' or 1=1 Password: 123456 Based on the above credentials, which of the following SQL commands are you expecting to be executed by the server, if there is indeed an SQL injection vulnerability?

  A. select * from Users where UserName = `attack' ' or 1=1 -- and UserPassword = `123456'
  B. select * from Users where UserName = `attack' or 1=1 -- and UserPassword = `123456'
  C. select * from Users where UserName = `attack or 1=1 -- and UserPassword = `123456'
  D. select * from Users where UserName = `attack' or 1=1 --' and UserPassword = `123456'
  A. select * from Users where UserName = `attack' ' or 1=1 -- and UserPassword = `123456'

• Question 89:

  Bob wants to ensure that Alice can check whether his message has been tampered with. He creates a checksum of the message and encrypts it using asymmetric cryptography. What key does Bob use to encrypt the checksum for accomplishing this goal?

  A. Alice's private key
  B. Alice's public key
  C. His own private key
  D. His own public key
  B. Alice's public key

• Question 90:

  Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a

  secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B.

  How do you prevent DNS spoofing?

  A. Install DNS logger and track vulnerable packets
  B. Disable DNS timeouts
  C. Install DNS Anti-spoofing
  D. Disable DNS Zone Transfer
  C. Install DNS Anti-spoofing