EC-COUNCIL EC-COUNCIL Certifications 312-50V12 Questions & Answers

• Question 191:

  Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two. What would you call this attack?

  A. Interceptor

  B. Man-in-the-middle

  C. ARP Proxy

  D. Poisoning Attack

  Correct Answer: B

• Question 192:

  Clark, a professional hacker, was hired by an organization lo gather sensitive Information about its competitors surreptitiously. Clark gathers the server IP address of the target organization using Whole footprinting. Further, he entered the server IP address as an input to an online tool to retrieve information such as the network range of the target organization and to identify the network topology and operating system used in the network. What is the online tool employed by Clark in the above scenario?

  A. AOL

  B. ARIN

  C. DuckDuckGo

  D. Baidu

  Correct Answer: B

  https://search.arin.net/rdap/?query=199.43.0.43

• Question 193:

  The Payment Card Industry Data Security Standard (PCI DSS) contains six different categories of control objectives. Each objective contains one or more requirements, which must be followed in order to achieve compliance. Which of the following requirements would best fit under the objective, "Implement strong access control measures"?

  A. Regularly test security systems and processes.

  B. Encrypt transmission of cardholder data across open, public networks.

  C. Assign a unique ID to each person with computer access.

  D. Use and regularly update anti-virus software on all systems commonly affected by malware.

  Correct Answer: C

• Question 194:

  George is a security professional working for iTech Solutions. He was tasked with securely transferring sensitive data of the organization between industrial systems. In this process, he used a short-range communication protocol based on the IEEE 203.15.4 standard. This protocol is used in devices that transfer data infrequently at a low rate in a restricted area, within a range of 10-100 m. What is the short-range wireless communication technology George employed in the above scenario?

  A. MQTT

  B. LPWAN

  C. Zigbee

  D. NB-IoT

  Correct Answer: C

  Zigbee could be a wireless technology developed as associate open international normal to deal with the unique desires of affordable, low-power wireless IoT networks. The Zigbee normal operates on the IEEE 802.15.4 physical radio specification and operates in unauthorised bands as well as a pair of.4 GHz, 900 MHz and 868 MHz.

  The 802.15.4 specification upon that the Zigbee stack operates gained confirmation by the Institute of Electrical and physical science Engineers (IEEE) in 2003. The specification could be a packet-based radio protocol supposed for affordable, battery-operated devices. The protocol permits devices to speak in an exceedingly kind of network topologies and may have battery life lasting many years.

  The Zigbee three.0 Protocol The Zigbee protocol has been created and ratified by member corporations of the Zigbee Alliance.Over three hundred leading semiconductor makers, technology corporations, OEMs and repair corporations comprise the Zigbee Alliance membership. The Zigbee protocol was designed to supply associate easy-to-use wireless information answer characterised by secure, reliable wireless network architectures.

  THE ZIGBEE ADVANTAGE The Zigbee 3.0 protocol is intended to speak information through rip-roaring RF environments that area unit common in business and industrial applications. Version 3.0 builds on the prevailing Zigbee normal however unifies the market-specific application profiles to permit all devices to be wirelessly connected within the same network, no matter their market designation and performance. what is more, a Zigbee 3.0 certification theme ensures the ability of product from completely different makers. Connecting Zigbee three.0 networks to the information science domain unveil observance and management from devices like smartphones and tablets on a local area network or WAN, as well as the web, and brings verity net of Things to fruition.

  Zigbee protocol options include: Support for multiple network topologies like point-to-point, point-to-multipoint and mesh networks Low duty cycle provides long battery life Low latency Direct Sequence unfold Spectrum (DSSS) Up to 65,000 nodes per network 128-bit AES encryption for secure information connections Collision avoidance, retries and acknowledgements

• Question 195:

  Which of the following steps for risk assessment methodology refers to vulnerability identification?

  A. Determines if any flaws exist in systems, policies, or procedures

  B. Assigns values to risk probabilities; Impact values.

  C. Determines risk probability that vulnerability will be exploited (High. Medium, Low)

  D. Identifies sources of harm to an IT system. (Natural, Human. Environmental)

  Correct Answer: C

• Question 196:

  Mike, a security engineer, was recently hired by BigFox Ltd. The company recently experienced disastrous DoS attacks. The management had instructed Mike to build defensive strategies for the company's IT infrastructure to thwart DoS/ DDoS attacks. Mike deployed some countermeasures to handle jamming and scrambling attacks. What is the countermeasure Mike applied to defend against jamming and scrambling attacks?

  A. Allow the usage of functions such as gets and strcpy

  B. Allow the transmission of all types of addressed packets at the ISP level

  C. Implement cognitive radios in the physical layer

  D. A Disable TCP SYN cookie protection

  Correct Answer: D

• Question 197:

  Which type of attack attempts to overflow the content-addressable memory (CAM) table in an Ethernet switch?

  A. Evil twin attack

  B. DNS cache flooding

  C. MAC flooding

  D. DDoS attack

  Correct Answer: C

• Question 198:

  What is the known plaintext attack used against DES which gives the result that encrypting plaintext with one DES key followed by encrypting it with a second DES key is no more secure than using a single key?

  A. Man-in-the-middle attack

  B. Meet-in-the-middle attack

  C. Replay attack

  D. Traffic analysis attack

  Correct Answer: B

  https://en.wikipedia.org/wiki/Meet-in-the-middle_attack The meet-in-the-middle attack (MITM), a known plaintext attack, is a generic space-time tradeoff cryptographic attack against encryption schemes that rely on performing multiple encryption operations in sequence. The MITM attack is the primary reason why Double DES is not used and why a Triple DES key (168-bit) can be bruteforced by an attacker with 256 space and 2112 operations. The intruder has to know some parts of plaintext and their ciphertexts. Using meet-in-the- middle attacks it is possible to break ciphers, which have two or more secret keys for multiple encryption using the same algorithm. For example, the 3DES cipher works in this way. Meet-in-the-middle attack was first presented by Diffie and Hellman for cryptanalysis of DES algorithm.

• Question 199:

  Gregory, a professional penetration tester working at Sys Security Ltd., is tasked with performing a security test of web applications used in the company. For this purpose, Gregory uses a tool to test for any security loopholes by hijacking a

  session between a client and server. This tool has a feature of intercepting proxy that can be used to inspect and modify the traffic between the browser and target application. This tool can also perform customized attacks and can be used to

  test the randomness of session tokens.

  Which of the following tools is used by Gregory in the above scenario?

  A. Nmap

  B. Burp Suite

  C. CxSAST

  D. Wireshark

  Correct Answer: B

• Question 200:

  In an internal security audit, the white hat hacker gains control over a user account and attempts to acquire access to another account's confidential files and information. How can he achieve this?

  A. Privilege Escalation

  B. Shoulder-Surfing

  C. Hacking Active Directory

  D. Port Scanning

  Correct Answer: A