EC-COUNCIL 312-50V12 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V12 Online Questions & Answers

• Question 361:

  In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various search engines, social networking sites,

  and web spidering tools. In this process, she also uses an automated tool to gather a list of words from the target website to further perform a brute-force attack on the previously gathered email addresses.

  What is the tool used by Hailey for gathering a list of words from the target website?

  A. Shadowsocks
  B. CeWL
  C. Psiphon
  D. Orbot
  B. CeWL

• Question 362:

  Consider the following Nmap output:

  

  What command-line parameter could you use to determine the type and version number of the web server?

  A. -sv
  B. -Pn
  C. -V
  D. -ss
  A. -sv

  ---

  Explanation/Reference:

  C:\Users\moi>nmap -h | findstr " -sV" -sV: Probe open ports to determine service/version info

• Question 363:

  Which system consists of a publicly available set of databases that contain domain name registration contact information?

  A. WHOIS
  B. CAPTCHA
  C. IANA
  D. IETF
  A. WHOIS

• Question 364:

  Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397- 1872883824-861252104-501. What needs to happen before Matthew has full administrator access?

  A. He must perform privilege escalation.
  B. He needs to disable antivirus protection.
  C. He needs to gain physical access.
  D. He already has admin privileges, as shown by the "501" at the end of the SID.
  A. He must perform privilege escalation.

• Question 365:

  Leverox Solutions hired Arnold, a security professional, for the threat intelligence process. Arnold collected information about specific threats against the organization. From this information, he retrieved contextual information about security events and incidents that helped him disclose potential risks and gain insight into attacker methodologies. He collected the information from sources such as humans, social media, and chat rooms as well as from events that resulted in cyberattacks. In this process, he also prepared a report that includes identified malicious activities, recommended courses of action, and warnings for emerging attacks. What is the type of threat intelligence collected by Arnold in the above scenario?

  A. Strategic threat intelligence
  B. Tactical threat intelligence
  C. Operational threat intelligence
  D. Technical threat intelligence
  C. Operational threat intelligence

• Question 366:

  Elante company has recently hired James as a penetration tester. He was tasked with performing enumeration on an organization's network. In the process of enumeration, James discovered a service that is accessible to external sources. This service runs directly on port 21. What is the service enumerated byjames in the above scenario?

  A. Border Gateway Protocol (BGP)
  B. File Transfer Protocol (FTP)
  C. Network File System (NFS)
  D. Remote procedure call (RPC)
  B. File Transfer Protocol (FTP)

• Question 367:

  Security administrator John Smith has noticed abnormal amounts of traffic coming from local computers at night. Upon reviewing, he finds that user data have been exfilltrated by an attacker. AV tools are unable to find any malicious software, and the IDS/IPS has not reported on any non-whitelisted programs, what type of malware did the attacker use to bypass the company's application whitelisting?

  A. Phishing malware
  B. Zero-day malware
  C. File-less malware
  D. Logic bomb malware
  C. File-less malware

  ---

  Explanation/Reference:

  https://www.mcafee.com/enterprise/en-us/security-awareness/ransomware/what-is-fileless-malware.html

• Question 368:

  From the following table, identify the wrong answer in terms of Range (ft). Standard Range (ft) 802.11a 150-150 802.11b 150-150 802.11g 150-150

  802.16 (WiMax) 30 miles

  A. 802.16 (WiMax)
  B. 802.11g
  C. 802.11b
  D. 802.11a
  A. 802.16 (WiMax)

• Question 369:

  ping-* 6 192.168.0.101

  Output:

  Pinging 192.168.0.101 with 32 bytes of data:

  Reply from 192.168.0.101: bytes=32 time<1ms TTL=128

  Reply from 192.168.0.101: bytes=32 time<1ms TTL=128

  Reply from 192.168.0.101: bytes=32 time<1ms TTL=128

  Reply from 192.168.0.101: bytes=32 time<1ms TTL=128

  Reply from 192.168.0.101: bytes=32 time<1ms TTL=128

  Reply from 192.168.0.101:

  Ping statistics for 192.168.0101

  Packets: Sent = 6, Received = 6, Lost = 0 (0% loss).

  Approximate round trip times in milli-seconds:

  Minimum = 0ms, Maximum = 0ms, Average = 0ms

  What does the option * indicate?

  A. t
  B. s
  C. a
  D. n
  D. n

• Question 370:

  If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack is possible?

  A. Birthday
  B. Brute force
  C. Man-in-the-middle
  D. Smurf
  B. Brute force