EC-COUNCIL EC-COUNCIL Certifications 312-50V12 Questions & Answers

• Question 131:

  You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible Intrusion Detection System. What is the best approach?

  A. Use Alternate Data Streams to hide the outgoing packets from this server.

  B. Use HTTP so that all traffic can be routed vis a browser, thus evading the internal Intrusion Detection Systems.

  C. Install Cryptcat and encrypt outgoing packets from this server.

  D. Install and use Telnet to encrypt all outgoing traffic from this server.

  Correct Answer: C

  https://linuxsecurityblog.com/2018/12/23/create-a-backdoor-with-cryptcat/

  Cryptcat enables us to communicate between two systems and encrypts the communication between them with twofish, one of many excellent encryption algorithms from Bruce Schneier et al. Twofish's encryption is on par with AES encryption, making it nearly bulletproof. In this way, the IDS can't detect the malicious behavior taking place even when its traveling across normal HTTP ports like 80 and 443.

• Question 132:

  Password cracking programs reverse the hashing process to recover passwords.(True/False.)

  A. True

  B. False

  Correct Answer: B

• Question 133:

  While browsing his Facebook feed, Matt sees a picture one of his friends posted with the caption, "Learn more about your friends!" along with a number of personal questions. Matt is suspicious and texts his friend, who confirms that he did indeed post it. With assurance that the post is legitimate, Matt responds to the questions in the post. A few days later, Matt's bank account is accessed, and the password is changed. What most likely happened?

  A. Matt inadvertently provided the answers to his security questions when responding to the post.

  B. Matt's bank-account login information was brute forced.

  C. Matt Inadvertently provided his password when responding to the post.

  D. Matt's computer was infected with a keylogger.

  Correct Answer: A

• Question 134:

  An attacker can employ many methods to perform social engineering against unsuspecting employees, including scareware. What is the best example of a scareware attack?

  A. A pop-up appears to a user stating, "You have won a free cruise! Click here to claim your prize!"

  B. A banner appears to a user stating, "Your account has been locked. Click here to reset your password and unlock your account."

  C. A banner appears to a user stating, "Your Amazon order has been delayed. Click here to find out your new delivery date."

  D. A pop-up appears to a user stating, "Your computer may have been infected with spyware. Click here to install an anti-spyware tool to resolve this issue."

  Correct Answer: D

• Question 135:

  Gilbert, a web developer, uses a centralized web API to reduce complexity and increase the Integrity of updating and changing data. For this purpose, he uses a web service that uses HTTP methods such as PUT. POST. GET. and DELETE and can improve the overall performance, visibility, scalability, reliability, and portability of an application. What is the type of web-service API mentioned in the above scenario?

  A. JSON-RPC

  B. SOAP API

  C. RESTful API

  D. REST API

  Correct Answer: C

  *REST is not a specification, tool, or framework, but instead is an architectural style for web services that serves as a communication medium between various systems on the web. *RESTful APIs, which are also known as RESTful services, are designed using REST principles and HTTP communication protocols RESTful is a collection of resources that use HTTP methods such as PUT, POST, GET, and DELETE

  RESTful API: RESTful API is a RESTful service that is designed using REST principles and HTTP communication protocols. RESTful is a collection of resources that use HTTP methods such as PUT, POST, GET, and DELETE. RESTful API is also designed to make applications independent to improve the overall performance, visibility, scalability, reliability, and portability of an application. APIs with the following features can be referred to as to RESTful APIs: o Stateless: The client end stores the state of the session; the server is restricted to save data during the request processing o Cacheable: The client should save responses (representations) in the cache. This feature can enhance API performance pg. 1920 CEHv11 manual.

  https://cloud.google.com/files/apigee/apigee-web-api-design-the-missing-link-ebook.pdf

  The HTTP methods GET, POST, PUT or PATCH, and DELETE can be used with these templates to read, create, update, and delete description resources for dogs and their owners. This API style has become popular for many reasons. It is straightforward and intuitive, and learning this pattern is similar to learning a programming language API. APIs like this one are commonly called RESTful APIs, although they do not display all of the characteristics that define REST (more on REST later).

• Question 136:

  Why containers are less secure that virtual machines?

  A. Host OS on containers has a larger surface attack.

  B. Containers may full fill disk space of the host.

  C. A compromise container may cause a CPU starvation of the host.

  D. Containers are attached to the same virtual network.

  Correct Answer: A

• Question 137:

  This kind of password cracking method uses word lists in combination with numbers and special characters:

  A. Hybrid

  B. Linear

  C. Symmetric

  D. Brute Force

  Correct Answer: A

• Question 138:

  You are attempting to crack LM Manager hashed from Windows 2000 SAM file. You will be using LM Brute force hacking tool for decryption. What encryption algorithm will you be decrypting?

  A. MD4

  B. DES

  C. SHA

  D. SSL

  Correct Answer: B

• Question 139:

  What is the following command used for?

  sqlmap.py-u ,,http://10.10.1.20/?p=1andforumaction=search" -dbs

  A. Creating backdoors using SQL injection

  B. A Enumerating the databases in the DBMS for the URL

  C. Retrieving SQL statements being executed on the database

  D. Searching database statements at the IP address given

  Correct Answer: A

• Question 140:

  Yancey is a network security administrator for a large electric company. This company provides power for over 100, 000 people in Las Vegas. Yancey has worked for his company for over 15 years and has become very successful. One day,

  Yancey comes in to work and finds out that the company will be downsizing and he will be out of a job in two weeks. Yancey is very angry and decides to place logic bombs, viruses, Trojans, and backdoors all over the network to take down

  the company once he has left. Yancey does not care if his actions land him in jail for 30 or more years, he just wants the company to pay for what they are doing to him.

  What would Yancey be considered?

  A. Yancey would be considered a Suicide Hacker

  B. Since he does not care about going to jail, he would be considered a Black Hat

  C. Because Yancey works for the company currently; he would be a White Hat

  D. Yancey is a Hacktivist Hacker since he is standing up to a company that is downsizing

  Correct Answer: A