EC-COUNCIL 312-50V12 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V12 Online Questions & Answers

• Question 171:

  Dorian is sending a digitally signed email to Polly, with which key is Dorian signing this message and how is Poly validating It?

  A. Dorian is signing the message with his public key. and Poly will verify that the message came from Dorian by using Dorian's private key.
  B. Dorian Is signing the message with Polys public key. and Poly will verify that the message came from Dorian by using Dorian's public key.
  C. Dorian is signing the message with his private key. and Poly will verify that the message came from Dorian by using Dorian's public key.
  D. Dorian is signing the message with Polys private key. and Poly will verify mat the message came from Dorian by using Dorian's public key.
  C. Dorian is signing the message with his private key. and Poly will verify that the message came from Dorian by using Dorian's public key.

  ---

  Explanation/Reference:

  https://blog.mailfence.com/how-do-digital-signatures-work/

  https://en.wikipedia.org/wiki/Digital_signature A digital signature is a mathematical technique used to validate the authenticity and integrity of a message, software, or digital document. It's the digital equivalent of a handwritten signature or stamped seal, but it offers far more inherent security. A digital signature is intended to solve the problem of tampering and impersonation in digital communications. Digital signatures can provide evidence of origin, identity, and status of electronic documents, transactions, or digital messages. Signers can also use them to acknowledge informed consent. Digital signatures are based on public-key cryptography, also known as asymmetric cryptography. Two keys are generated using a public key algorithm, such as RSA (Rivest- Shamir-Adleman), creating a mathematically linked pair of keys, one private and one public. Digital signatures work through public-key cryptography's two mutually authenticating cryptographic keys. The individual who creates the digital signature uses a private key to encrypt signature-related data, while the only way to decrypt that data is with the signer's public key.

• Question 172:

  Sophia is a shopping enthusiast who spends significant time searching for trendy outfits online. Clark, an attacker, noticed her activities several times and sent a fake email containing a deceptive page link to her social media page displaying all-new and trendy outfits. In excitement, Sophia clicked on the malicious link and logged in to that page using her valid credentials. Which of the following tools is employed by Clark to create the spoofed email?

  A. PyLoris
  B. Slowloris
  C. Evilginx
  D. PLCinject
  C. Evilginx

• Question 173:

  Which of the following scanning method splits the TCP header into several packets and makes it difficult for packet filters to detect the purpose of the packet?

  A. ACK flag probe scanning
  B. ICMP Echo scanning
  C. SYN/FIN scanning using IP fragments
  D. IPID scanning
  C. SYN/FIN scanning using IP fragments

  ---

  Explanation/Reference:

  SYN/FIN scanning using IP fragments is a process of scanning that was developed to avoid false positives generated by other scans because of a packet filtering device on the target system. The TCP header splits into several packets to evade the packet filter. For any transmission, every TCP header must have the source and destination port for the initial packet (8-octet, 64-bit). The initialized flags in the next packet allow the remote host to reassemble the packets upon receipt via an Internet protocol module that detects the fragmented data packets using field-equivalent values of the source, destination, protocol, and identification.

• Question 174:

  Which of the following is considered an exploit framework and has the ability to perform automated attacks on services, ports, applications and unpatched security flaws in a computer system?

  A. Wireshark
  B. Maltego
  C. Metasploit
  D. Nessus
  C. Metasploit

  ---

  Explanation/Reference:

  https://en.wikipedia.org/wiki/Metasploit_Project

  The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development. It is owned by Boston, Massachusetts-based security company Rapid7. Its best-known sub-project is the open-source Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research. The Metasploit Project includes anti-forensic and evasion tools, some of which are built into the Metasploit Framework. Metasploit is pre-installed in the Kali Linux operating system.

  The basic steps for exploiting a system using the Framework include.

  1.

  Optionally checking whether the intended target system is vulnerable to an exploit.

  2.

  Choosing and configuring an exploit (code that enters a target system by taking advantage of one of its bugs; about 900 different exploits for Windows, Unix/Linux and macOS systems are included).

  3.

  Choosing and configuring a payload (code that will be executed on the target system upon successful entry; for instance, a remote shell or a VNC server). Metasploit often recommends a payload that should work.

  4.

  Choosing the encoding technique so that hexadecimal opcodes known as "bad characters" are removed from the payload, these characters will cause the exploit to fail.

  5.

  Executing the exploit.

  This modular approach

  allowing the combination of any exploit with any payload

  is the major advantage of the Framework.

  It facilitates the tasks of attackers, exploit writers and payload writers.

• Question 175:

  This kind of password cracking method uses word lists in combination with numbers and special characters:

  A. Hybrid
  B. Linear
  C. Symmetric
  D. Brute Force
  A. Hybrid

• Question 176:

  Which among the following is the best example of the third step (delivery) in the cyber kill chain?

  A. An intruder sends a malicious attachment via email to a target.
  B. An intruder creates malware to be used as a malicious attachment to an email.
  C. An intruder's malware is triggered when a target opens a malicious email attachment.
  D. An intruder's malware is installed on a target's machine.
  A. An intruder sends a malicious attachment via email to a target.

• Question 177:

  Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two. What would you call this attack?

  A. Interceptor
  B. Man-in-the-middle
  C. ARP Proxy
  D. Poisoning Attack
  B. Man-in-the-middle

• Question 178:

  Ron, a security professional, was pen testing web applications and SaaS platforms used by his company. While testing, he found a vulnerability that allows hackers to gain unauthorized access to API objects and perform actions such as view, update, and delete sensitive data of the company. What is the API vulnerability revealed in the above scenario?

  A. Code injections
  B. Improper use of CORS
  C. No ABAC validation
  D. Business logic flaws
  B. Improper use of CORS

• Question 179:

  BitLocker encryption has been implemented for all the Windows-based computers in an organization. You are concerned that someone might lose their cryptographic key. Therefore, a mechanism was implemented to recover the keys from

  Active Directory.

  What is this mechanism called in cryptography?

  A. Key archival
  B. Key escrow.
  C. Certificate rollover
  D. Key renewal
  B. Key escrow.

• Question 180:

  An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their job. The attacker gain access to the DNS server and redirect the direction www.google.com to his own IP address. Now when the employees of the office want to go to Google they are being redirected to the attacker machine. What is the name of this kind of attack?

  A. MAC Flooding
  B. Smurf Attack
  C. DNS spoofing
  D. ARP Poisoning
  C. DNS spoofing