EC-COUNCIL 312-50V12 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V12 Online Questions & Answers

• Question 1:

  Which of the following is not a Bluetooth attack?

  A. Bluedriving
  B. Bluesmacking
  C. Bluejacking
  D. Bluesnarfing
  A. Bluedriving

  ---

  Explanation/Reference:

  https://github.com/verovaleros/bluedriving Bluedriving is a bluetooth wardriving utility. It can capture bluetooth devices, lookup their services, get GPS information and present everything in a nice web page. It can search for and show a lot of information about the device, the GPS address and the historic location of devices on a map. The main motivation of this tool is to research about the targeted surveillance of people by means of its cellular phone or car. With this tool you can capture information about bluetooth devices and show, on a map, the points where you have seen the same device in the past.

• Question 2:

  _________ is a type of phishing that targets high-profile executives such as CEOs, CFOs, politicians, and celebrities who have access to confidential and highly valuable information.

  A. Spear phishing
  B. Whaling
  C. Vishing
  D. Phishing
  B. Whaling

• Question 3:

  Which of the following tools can be used to perform a zone transfer?

  A. NSLookup
  B. Finger
  C. Dig
  D. Sam Spade
  E. Host
  F. Netcat
  G. Neotrace
  A. NSLookup
  C. Dig
  D. Sam Spade
  E. Host

• Question 4:

  Your company was hired by a small healthcare provider to perform a technical assessment on the network. What is the best approach for discovering vulnerabilities on a Windows-based computer?

  A. Use the built-in Windows Update tool
  B. Use a scan tool like Nessus
  C. Check MITRE.org for the latest list of CVE findings
  D. Create a disk image of a clean Windows installation
  B. Use a scan tool like Nessus

• Question 5:

  What would you enter if you wanted to perform a stealth scan using Nmap?

  A. nmap -sM
  B. nmap -sU
  C. nmap -sS
  D. nmap -sT
  C. nmap -sS

• Question 6:

  A hacker is an intelligent individual with excellent computer skills and the ability to explore a computer's software and hardware without the owner's permission. Their intention can either be to simply gain knowledge or to illegally make

  changes.

  Which of the following class of hacker refers to an individual who works both offensively and defensively at various times?

  A. White Hat
  B. Suicide Hacker
  C. Gray Hat
  D. Black Hat
  C. Gray Hat

• Question 7:

  What is the file that determines the basic configuration (specifically activities, services, broadcast receivers, etc.) in an Android application?

  A. AndroidManifest.xml
  B. APK.info
  C. resources.asrc
  D. classes.dex
  A. AndroidManifest.xml

  ---

  Explanation/Reference:

  The AndroidManifest.xml file contains information of your package, including components of the appliance like activities, services, broadcast receivers, content providers etc.It performs another tasks also:?it's responsible to guard the

  appliance to access any protected parts by providing the permissions.

  It also declares the android api that the appliance goes to use.

  It lists the instrumentation classes.

  The instrumentation classes provides profiling and other informations. These informations are removed just before the appliance is published etc.This is the specified xml file for all the android application and located inside the basis directory.

• Question 8:

  An attacker redirects the victim to malicious websites by sending them a malicious link by email. The link appears authentic but redirects the victim to a malicious web page, which allows the attacker to steal the victim's data. What type of attack is this?

  A. Phishing
  B. Vlishing
  C. Spoofing
  D. DDoS
  A. Phishing

  ---

  Explanation/Reference:

  https://en.wikipedia.org/wiki/Phishing Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers. It occurs when an attacker, masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message. The recipient is then tricked into clicking a malicious link, which can lead to the installation of malware, the freezing of the system as part of a ransomware attack, or the revealing of sensitive information. An attack can have devastating results. For individuals, this includes unauthorized purchases, the stealing of funds, or identify theft. Moreover, phishing is often used to gain a foothold in corporate or governmental networks as a part of a larger attack, such as an advanced persistent threat (APT) event. In this latter scenario, employees are compromised in order to bypass security perimeters, distribute malware inside a closed environment, or gain privileged access to secured data. An organization succumbing to such an attack typically sustains severe financial losses in addition to declining market share, reputation, and consumer trust. Depending on the scope, a phishing attempt might escalate into a security incident from which a business will have a difficult time recovering.

• Question 9:

  Bob wants to ensure that Alice can check whether his message has been tampered with. He creates a checksum of the message and encrypts it using asymmetric cryptography. What key does Bob use to encrypt the checksum for accomplishing this goal?

  A. Alice's private key
  B. Alice's public key
  C. His own private key
  D. His own public key
  B. Alice's public key

• Question 10:

  Which rootkit is characterized by its function of adding code and/or replacing some of the operating-system kernel code to obscure a backdoor on a system?

  A. User-mode rootkit
  B. Library-level rootkit
  C. Kernel-level rootkit
  D. Hypervisor-level rootkit
  C. Kernel-level rootkit