EC-COUNCIL EC-COUNCIL Certifications 312-50V12 Questions & Answers

• Question 231:

  Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections. Which of the following attack techniques is used by Stella to compromise the web services?

  A. XML injection

  B. WS-Address spoofing

  C. SOAPAction spoofing

  D. Web services parsing attacks

  Correct Answer: B

  WS-Address provides additional routing information in the SOAP header to support asynchronous communication. This technique allows the transmission of web service requests and response messages using different TCP connections https://www.google.com/search?client=firefox-b-dandq=WS-Address+spoofing CEH V11 Module 14 Page 1896

• Question 232:

  You are tasked to perform a penetration test. While you are performing information gathering, you find an employee list in Google. You find the receptionist's email, and you send her an email changing the source email to her boss's email (boss@company). In this email, you ask for a pdf with information. She reads your email and sends back a pdf with links. You exchange the pdf links with your malicious links (these links contain malware) and send back the modified pdf, saying that the links don't work. She reads your email, opens the links, and her machine gets infected. You now have access to the company network. What testing method did you use?

  A. Social engineering

  B. Piggybacking

  C. Tailgating

  D. Eavesdropping

  Correct Answer: A

  Social engineering is the term used for a broad range of malicious activities accomplished through human interactions. It uses psychological manipulation to trick users into making security mistakes or giving away sensitive information. Social engineering attacks typically involve some form of psychological manipulation, fooling otherwise unsuspecting users or employees into handing over confidential or sensitive data. Commonly, social engineering involves email or other communication that invokes urgency, fear, or similar emotions in the victim, leading the victim to promptly reveal sensitive information, click a malicious link, or open a malicious file. Because social engineering involves a human element, preventing these attacks can be tricky for enterprises.

• Question 233:

  Fred is the network administrator for his company. Fred is testing an internal switch. From an external IP address, Fred wants to try and trick this switch into thinking it already has established a session with his computer. How can Fred accomplish this?

  A. Fred can accomplish this by sending an IP packet with the RST/SIN bit and the source address of his computer.

  B. He can send an IP packet with the SYN bit and the source address of his computer.

  C. Fred can send an IP packet with the ACK bit set to zero and the source address of the switch.

  D. Fred can send an IP packet to the switch with the ACK bit and the source address of his machine.

  Correct Answer: D

• Question 234:

  A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?

  A. Firewall-management policy

  B. Acceptable-use policy

  C. Permissive policy

  D. Remote-access policy

  Correct Answer: D

• Question 235:

  Your company performs penetration tests and security assessments for small and medium- sized business in the local area. During a routine security assessment, you discover information that suggests your client is involved with human

  trafficking.

  What should you do?

  A. Confront the client in a respectful manner and ask her about the data.

  B. Copy the data to removable media and keep it in case you need it.

  C. Ignore the data and continue the assessment until completed as agreed.

  D. Immediately stop work and contact the proper legal authorities.

  Correct Answer: D

• Question 236:

  When you are testing a web application, it is very useful to employ a proxy tool to save every request and response. You can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers

  manually to get more precise results than if using web vulnerability scanners.

  What proxy tool will help you find web vulnerabilities?

  A. Maskgen

  B. Dimitry

  C. Burpsuite

  D. Proxychains

  Correct Answer: C

• Question 237:

  Which type of virus can change its own code and then cipher itself multiple times as it replicates?

  A. Stealth virus

  B. Tunneling virus

  C. Cavity virus

  D. Encryption virus

  Correct Answer: A

  A stealth virus may be a sort of virus malware that contains sophisticated means of avoiding detection by antivirus software. After it manages to urge into the now- infected machine a stealth viruses hides itself by continually renaming and moving itself round the disc.Like other viruses, a stealth virus can take hold of the many parts of one's PC. When taking control of the PC and performing tasks, antivirus programs can detect it, but a stealth virus sees that coming and can rename then copy itself to a special drive or area on the disc, before the antivirus software. Once moved and renamed a stealth virus will usually replace the detected `infected' file with a clean file that doesn't trigger anti-virus detection. It's a never-ending game of cat and mouse.The intelligent architecture of this sort of virus about guarantees it's impossible to completely rid oneself of it once infected. One would need to completely wipe the pc and rebuild it from scratch to completely eradicate the presence of a stealth virus. Using regularly-updated antivirus software can reduce risk, but, as we all know, antivirus software is additionally caught in an endless cycle of finding new threats and protecting against them.

• Question 238:

  An attacker with access to the inside network of a small company launches a successful STP manipulation attack. What will he do next?

  A. He will create a SPAN entry on the spoofed root bridge and redirect traffic to his computer.

  B. He will activate OSPF on the spoofed root bridge.

  C. He will repeat this action so that it escalates to a DoS attack.

  D. He will repeat the same attack against all L2 switches of the network.

  Correct Answer: A

• Question 239:

  What useful information is gathered during a successful Simple Mail Transfer Protocol (SMTP) enumeration?

  A. The two internal commands VRFY and EXPN provide a confirmation of valid users, email addresses, aliases, and mailing lists.

  B. Reveals the daily outgoing message limits before mailboxes are locked.

  C. The internal command RCPT provides a list of ports open to message traffic.

  D. A list of all mail proxy server addresses used by the targeted host.

  Correct Answer: A

• Question 240:

  Attacker Rony installed a rogue access point within an organization's perimeter and attempted to intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by johnson in the above scenario?

  A. Host-based assessment

  B. Wireless network assessment

  C. Application assessment

  D. Distributed assessment

  Correct Answer: B

  Expanding your network capabilities are often done well using wireless networks, but it also can be a source of harm to your data system . Deficiencies in its implementations or configurations can allow tip to be accessed in an unauthorized manner.This makes it imperative to closely monitor your wireless network while also conducting periodic Wireless Network assessment.It identifies flaws and provides an unadulterated view of exactly how vulnerable your systems are to malicious and unauthorized accesses.Identifying misconfigurations and inconsistencies in wireless implementations and rogue access points can improve your security posture and achieve compliance with regulatory frameworks.