312-50v12 Exam Dumps
Eccouncil 312-50v12 This Week Result
They can't be wrong
Score in Real Exam at Testing Centre
Questions came word by word from this dumps
Best Eccouncil 312-50v12 Dumps - pass your exam In First Attempt
Our 312-50v12 dumps are better than all other cheap 312-50v12 study material.
Only best way to pass your Eccouncil 312-50v12 is that if you will get reliable exam study materials. We ensure you that realexamdumps is one of the most authentic website for Eccouncil CEH v12 exam question answers. Pass your 312-50v12 Certified Ethical Hacker Exam (CEHv12) with full confidence. You can get free Certified Ethical Hacker Exam (CEHv12) demo from realexamdumps. We ensure 100% your success in 312-50v12 Exam with the help of Eccouncil Dumps. you will feel proud to become a part of realexamdumps family.
Our success rate from past 5 year very impressive. Our customers are able to build their carrier in IT field.
Search
45000+ Exams
Buy
Desire Exam
Download
Exam
Related Exam
Realexamdumps Providing most updated CEH v12 Question Answers. Here are a few exams:
Sample Questions
Realexamdumps Providing most updated CEH v12 Question Answers. Here are a few sample questions:
Eccouncil 312-50v12 Sample Question 1
Log monitoring tools performing behavioral analysis have alerted several suspicious logins on a Linux server occurring during non-business hours. After further examination of all login activities, it is noticed that none of the logins have occurred during typical work hours. A Linux administrator who is investigating this problem realizes the system time on the Linux server is wrong by more than twelve hours. What protocol used on Linux servers to synchronize the time has stopped working?
Options:
Answer: C
Eccouncil 312-50v12 Sample Question 2
When a security analyst prepares for the formal security assessment - what of the following should be done in order to determine inconsistencies in the secure assets database and verify that system is compliant to the minimum security baseline?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 3
Which of the following is the primary objective of a rootkit?
Options:
Answer: D
Eccouncil 312-50v12 Sample Question 4
How is the public key distributed in an orderly, controlled fashion so that the users can be sure of the senderâs identity?
Options:
Answer: E
Eccouncil 312-50v12 Sample Question 5
_________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.
Options:
Answer: C
Eccouncil 312-50v12 Sample Question 6
Vlady works in a fishing company where the majority of the employees have very little understanding of IT let alone IT Security. Several information security issues that Vlady often found includes, employees sharing password, writing his/her password on a post it note and stick it to his/her desk, leaving the computer unlocked, didnât log out from emails or other social media accounts, and etc. After discussing with his boss, Vlady decided to make some changes to improve the security environment in his company. The first thing that Vlady wanted to do is to make the employees understand the importance of keeping confidential information, such as password, a secret and they should not share it with other persons. Which of the following steps should be the first thing that Vlady should do to make the employees in his company understand to importance of keeping confidential information a secret?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 7
Nicolas just found a vulnerability on a public-facing system that is considered a zero-day vulnerability. He sent an email to the owner of the public system describing the problem and how the owner can protect themselves from that vulnerability. He also sent an email to Microsoft informing them of the problem that their systems are exposed to. What type of hacker is Nicolas?
Options:
Answer: B Explanation: Explanation: A white hat (or a white hat hacker) is an ethical computer hacker, or a computer security expert, who focuses on penetration testing and in other testing methodologies that ensures the safety of an organizationâs information systems. Ethical hacking may be a term meant to imply a broader category than simply penetration testing. Contrasted with black hat, a malicious hacker, the name comes from Western films, where heroic and antagonistic cowboys might traditionally wear a white and a black hat respectively. While a white hat hacker hacks under good intentions with permission, and a black hat hacker, most frequently unauthorized, has malicious intent, thereâs a 3rd kind referred to as a gray hat hacker who hacks with good intentions but sometimes without permission.White hat hackers can also add teams called âsneakers and/or hacker clubsâ,red teams, or tiger teams.While penetration testing concentrates on attacking software and computer systems from the beginning â scanning ports, examining known defects in protocols and applications running on the system and patch installations, as an example â ethical hacking may include other things. A full-blown ethical hack might include emailing staff to invite password details, searching through executiveâs dustbins and typically breaking and entering, without the knowledge and consent of the targets. Only the owners, CEOs and Board Members (stake holders) who asked for such a censoring of this magnitude are aware. to undertake to duplicate a number of the destructive techniques a true attack might employ, ethical hackers may arrange for cloned test systems, or organize a hack late in the dark while systems are less critical. In most up-to-date cases these hacks perpetuate for the long-term con (days, if not weeks, of long-term human infiltration into an organization). Some examples include leaving USB/flash key drives with hidden auto-start software during a public area as if someone lost the tiny drive and an unsuspecting employee found it and took it.Some other methods of completing these include:⢠DoS attacks⢠Social engineering tactics⢠Reverse engineering⢠Network security⢠Disk and memory forensics⢠Vulnerability research⢠Security scanners such as:â W3afâ Nessusâ Burp suiteâ¢Â Frameworks such as:â Metasploit⢠Training PlatformsThese methods identify and exploit known security vulnerabilities and plan to evade security to realize entry into secured areas. theyâre ready to do that by hiding software and system âback-doorsâ which will be used as a link to information or access that a non-ethical hacker, also referred to as âblack-hatâ or âgrey-hatâ, might want to succeed in .
Eccouncil 312-50v12 Sample Question 8
In order to tailor your tests during a web-application scan, you decide to determine which web-server version is hosting the application. On using the sV flag with Nmap. you obtain the following response: 80/tcp open http-proxy Apache Server 7.1.6 what Information-gathering technique does this best describe?
Options:
Answer: B Explanation: Explanation: Banner grabbing is a technique wont to gain info about a computer system on a network and the services running on its open ports. administrators will use this to take inventory of the systems and services on their network. However, an to find will use banner grabbing so as to search out network hosts that are running versions of applications and operating systems with known exploits.Some samples of service ports used for banner grabbing are those used by Hyper Text Transfer Protocol (HTTP), File Transfer Protocol (FTP), and Simple Mail Transfer Protocol (SMTP); ports 80, 21, and 25 severally. Tools normally used to perform banner grabbing are Telnet, nmap and Netcat.For example, one may establish a connection to a target internet server using Netcat, then send an HTTP request. The response can usually contain info about the service running on the host:Graphical user interface, text, application Description automatically generatedThis information may be used by an administrator to catalog this system, or by an intruder to narrow down a list of applicable exploits.To prevent this, network administrators should restrict access to services on their networks and shut down unused or unnecessary services running on network hosts. Shodan is a search engine for banners grabbed from portscanning the Internet.
Eccouncil 312-50v12 Sample Question 9
During an Xmas scan what indicates a port is closed?
Options:
Answer: C
Eccouncil 312-50v12 Sample Question 10
How does a denial-of-service attack work?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 11
In this attack, a victim receives an e-mail claiming from PayPal stating that their account has been disabled and confirmation is required before activation. The attackers then scam to collect not one but two credit card numbers, ATM PIN number and other personal details. Ignorant users usually fall prey to this scam. Which of the following statement is incorrect related to this attack?
Options:
Answer: E
Eccouncil 312-50v12 Sample Question 12
What is the minimum number of network connections in a multi homed firewall?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 13
Yancey is a network security administrator for a large electric company. This company provides power for over 100, 000 people in Las Vegas. Yancey has worked for his company for over 15 years and has become very successful. One day, Yancey comes in to work and finds out that the company will be downsizing and he will be out of a job in two weeks. Yancey is very angry and decides to place logic bombs, viruses, Trojans, and backdoors all over the network to take down the company once he has left. Yancey does not care if his actions land him in jail for 30 or more years, he just wants the company to pay for what they are doing to him. What would Yancey be considered?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 14
Your organization has signed an agreement with a web hosting provider that requires you to take full responsibility of the maintenance of the cloud-based resources. Which of the following models covers this?
Options:
Answer: D
Eccouncil 312-50v12 Sample Question 15
in this attack, an adversary tricks a victim into reinstalling an already-in-use key. This is achieved by manipulating and replaying cryptographic handshake messages. When the victim reinstall the key, associated parameters such as the incremental transmit packet number and receive packet number are reset to their initial values. What is this attack called?
Options:
Answer: B Explanation: Explanation: In this attack KRACK is an acronym for Key Reinstallation Attack. KRACK may be a severe replay attack on Wi-Fi Protected Access protocol (WPA2), which secures your Wi-Fi connection. Hackers use KRACK to take advantage of a vulnerability in WPA2. When in close range of a possible victim, attackers can access and skim encrypted data using KRACK.How KRACK WorksYour Wi-Fi client uses a four-way handshake when attempting to attach to a protected network. The handshake confirms that both the client â your smartphone, laptop, et cetera â and therefore the access point share the right credentials, usually a password for the network. This establishes the Pairwise passkey (PMK), which allows for encoding .Overall, this handshake procedure allows for quick logins and connections and sets up a replacement encryption key with each connection. this is often what keeps data secure on Wi-Fi connections, and every one protected Wi-Fi connections use the four-way handshake for security. This protocol is that the reason users are encouraged to use private or credential-protected Wi-Fi instead of public connections.KRACK affects the third step of the handshake, allowing the attacker to control and replay the WPA2 encryption key to trick it into installing a key already in use. When the keyâs reinstalled, other parameters related to it â the incremental transmit packet number called the nonce and therefore the replay counter â are set to their original values.Rather than move to the fourth step within the four-way handshake, nonce resets still replay transmissions of the third step. This sets up the encryption protocol for attack, and counting on how the attackers replay the third-step transmissions, they will take down Wi-Fi security.Why KRACK may be a ThreatThink of all the devices you employ that believe Wi-Fi. it isnât almost laptops and smartphones; numerous smart devices now structure the web of Things (IoT). due to the vulnerability in WPA2, everything connected to Wi-Fi is in danger of being hacked or hijacked.Attackers using KRACK can gain access to usernames and passwords also as data stored on devices. Hackers can read emails and consider photos of transmitted data then use that information to blackmail users or sell it on the Dark Web.Theft of stored data requires more steps, like an HTTP content injection to load malware into the system. Hackers could conceivably take hold of any device used thereon Wi-Fi connection. Because the attacks require hackers to be on the brink of the target, these internet security threats could also cause physical security threats.On the opposite hand, the necessity to be in close proximity is that the only excellent news associated with KRACK, as meaning a widespread attack would be extremely difficult.Victims are specifically targeted. However, there are concerns that a experienced attacker could develop the talents to use HTTP content injection to load malware onto websites to make a more widespread affect.Everyone is in danger from KRACK vulnerability. Patches are available for Windows and iOS devices, but a released patch for Android devices is currently in question (November 2017). There are issues with the discharge , and lots of question if all versions and devices are covered.The real problem is with routers and IoT devices. These devices arenât updated as regularly as computer operating systems, and for several devices, security flaws got to be addressed on the manufacturing side. New devices should address KRACK, but the devices you have already got in your home probably arenât protected.The best protection against KRACK is to make sure any device connected to Wi-Fi is patched and updated with the newest firmware. that has checking together with your routerâs manufacturer periodically to ascertain if patches are available.The safest connection option may be a private VPN, especially when publicly spaces. If you would like a VPN for private use, avoid free options, as they need their own security problems and thereâll even be issues with HTTPs. Use a paid service offered by a trusted vendor like Kaspersky. Also, more modern networks use WPA3 for better security.Avoid using public Wi-Fi, albeit itâs password protection. That password is out there to almost anyone, which reduces the safety level considerably.All the widespread implications of KRACK and therefore the WPA2 vulnerability arenât yet clear. whatâs certain is that everybody who uses Wi-Fi is in danger and wishes to require precautions to guard their data and devices.
Eccouncil 312-50v12 Sample Question 16
John, a professional hacker, targeted CyberSol Inc., an MNC. He decided to discover the loT devices connected in the target network that are using default credentials and are vulnerable to various hijacking attacks. For this purpose, he used an automated tool to scan the target network for specific types of loT devices and detect whether they are using the default, factory-set credentials. What is the tool employed by John in the above scenario?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 17
Harper, a software engineer, is developing an email application. To ensure the confidentiality of email messages. Harper uses a symmetric-key block cipher having a classical 12- or 16-round Feistel network with a block size of 64 bits for encryption, which includes large 8 x 32-bit S-boxes (S1, S2, S3, S4) based on bent functions, modular addition and subtraction, key-dependent rotation, and XOR operations. This cipher also uses a masking key(Km1)and a rotation key (Kr1) for performing its functions. What is the algorithm employed by Harper to secure the email messages?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 18
Which of the following antennas is commonly used in communications for a frequency band of 10 MHz to VHF and UHF?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 19
On performing a risk assessment, you need to determine the potential impacts when some of the critical business processes of the company interrupt its service. What is the name of the process by which you can determine those critical businesses?
Options:
Answer: C
Eccouncil 312-50v12 Sample Question 20
Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?
Options:
Answer: E
Eccouncil 312-50v12 Sample Question 21
Rebecca, a security professional, wants to authenticate employees who use web services for safe and secure communication. In this process, she employs a component of the Web Service Architecture, which is an extension of SOAP, and it can maintain the integrity and confidentiality of SOAP messages. Which of the following components of the Web Service Architecture is used by Rebecca for securing the communication?
Options:
Answer: E
Eccouncil 312-50v12 Sample Question 22
Mary found a high vulnerability during a vulnerability scan and notified her server team. After analysis, they sent her proof that a fix to that issue had already been applied. The vulnerability that Marry found is called what?
Options:
Answer: B Explanation: Explanation: https://www.infocyte.com/blog/2019/02/16/cybersecurity-101-what-you-need-to-know-about-false-positives-and-false-negatives/ False positives are mislabeled security alerts, indicating there is a threat when in actuality, there isnât. These false/non-malicious alerts (SIEM events) increase noise for already over-worked security teams and can include software bugs, poorly written software, or unrecognized network traffic.False negatives are uncaught cyber threats â overlooked by security tooling because theyâre dormant, highly sophisticated (i.e. file-less or capable of lateral movement) or the security infrastructure in place lacks the technological ability to detect these attacks.
Eccouncil 312-50v12 Sample Question 23
Which iOS jailbreaking technique patches the kernel during the device boot so that it becomes jailbroken after each successive reboot?
Options:
Answer: C Explanation: Explanation: An untethered jailbreak is one that allows a telephone to finish a boot cycle when being pwned with none interruption to jailbreak-oriented practicality.Untethered jailbreaks area unit the foremost sought-after of all, however theyâre additionally the foremost difficult to attain due to the powerful exploits and organic process talent they need. associate unbound jailbreak is sent over a physical USB cable association to a laptop or directly on the device itself by approach of associate application-based exploit, like a web site in campaign.Upon running associate unbound jailbreak, youâll be able to flip your pwned telephone off and on once more while not running the jailbreak tool once more. all of your jailbreak tweaks and apps would then continue in operation with none user intervention necessary.Itâs been an extended time since IOS has gotten the unbound jailbreak treatment. the foremost recent example was the computer-based Pangu break, that supported most handsets that ran IOS nine.1. Weâve additionally witnessed associate unbound jailbreak within the kind of JailbreakMe, that allowed users to pwn their handsets directly from the mobile campaign applications programme while not a laptop.
Eccouncil 312-50v12 Sample Question 24
You are tasked to configure the DHCP server to lease the last 100 usable IP addresses in subnet to. 1.4.0/23. Which of the following IP addresses could be teased as a result of the new configuration?
Options:
Answer: C Explanation: Explanation: https://en.wikipedia.org/wiki/Subnetwork As we can see, we have an IP address of 10.1.4.0 with a subnet mask of /23. According to the question, we need to determine which IP address will be included in the range of the last 100 IP addresses.The available addresses for hosts start with 10.1.4.1 and end with 10.1.5.254. Now you can clearly see that the last 100 addresses include the address 10.1.5.200.
Eccouncil 312-50v12 Sample Question 25
A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?
Options:
Answer: E
Eccouncil 312-50v12 Sample Question 26
A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firmâs public facing web servers. The engineer decides to start by using netcat to port 80. The engineer receives this output: HTTP/1.1 200 OK Server: Microsoft-IIS/6 Expires: Tue, 17 Jan 2011 01:41:33 GMT Date: Mon, 16 Jan 2011 01:41:33 GMT Content-Type: text/html Accept-Ranges: bytes Last Modified: Wed, 28 Dec 2010 15:32:21 GMT ETag:âb0aac0542e25c31:89dâ Content-Length: 7369 Which of the following is an example of what the engineer performed?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 27
When you are testing a web application, it is very useful to employ a proxy tool to save every request and response. You can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers manually to get more precise results than if using web vulnerability scanners. What proxy tool will help you find web vulnerabilities?
Options:
Answer: D
Eccouncil 312-50v12 Sample Question 28
What is the most common method to exploit the âBash Bugâ or âShellshockâ vulnerability?
Options:
Answer: D
Eccouncil 312-50v12 Sample Question 29
Mary, a penetration tester, has found password hashes in a client system she managed to breach. She needs to use these passwords to continue with the test, but she does not have time to find the passwords that correspond to these hashes. Which type of attack can she implement in order to continue?
Options:
Answer: E
Eccouncil 312-50v12 Sample Question 30
You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible Intrusion Detection System. What is the best approach?
Options:
Answer: C Explanation: Explanation: https://linuxsecurityblog.com/2018/12/23/create-a-backdoor-with-cryptcat/ Cryptcat enables us to communicate between two systems and encrypts the communication between them with twofish, one of many excellent encryption algorithms from Bruce Schneier et al. Twofishâs encryption is on par with AES encryption, making it nearly bulletproof. In this way, the IDS canât detect the malicious behavior taking place even when its traveling across normal HTTP ports like 80 and 443.
Eccouncil 312-50v12 Sample Question 31
Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections. Which of the following attack techniques is used by Stella to compromise the web services?
Options:
Answer: B Explanation: Explanation: WS-Address provides additional routing information in the SOAP header to support asynchronous communication. This technique allows the transmission of web service requests and response messages using different TCP connectionshttps://www.google.com/search?client=firefox-b-d &q=WS-Address+spoofingCEH V11 Module 14 Page 1897
Eccouncil 312-50v12 Sample Question 32
Tony is a penetration tester tasked with performing a penetration test. After gaining initial access to a target system, he finds a list of hashed passwords. Which of the following tools would not be useful for cracking the hashed passwords?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 33
John, a professional hacker, performs a network attack on a renowned organization and gains unauthorized access to the target network. He remains in the network without being detected for a long time and obtains sensitive information without sabotaging the organization. Which of the following attack techniques is used by John?
Options:
Answer: A Explanation: Explanation: An advanced persistent threat (APT) may be a broad term wont to describe AN attack campaign within which an intruder, or team of intruders, establishes a bootleg, long presence on a network so as to mine sensitive knowledge.The targets of those assaults, that square measure terribly fastidiously chosen and researched, usually embrace massive enterprises or governmental networks. the implications of such intrusions square measure huge, and include:Intellectual property thieving (e.g., trade secrets or patents)Compromised sensitive info (e.g., worker and user personal data)The sabotaging of essential structure infrastructures (e.g., information deletion)Total website takeoversExecuting an APT assault needs additional resources than a regular internet application attack. The perpetrators square measure typically groups of intimate cybercriminals having substantial resource. Some APT attacks square measure government-funded and used as cyber warfare weapons.APT attacks dissent from ancient internet application threats, in that:Theyâre considerably additional advanced.Theyâre not hit and run attacksâonce a network is infiltrated, the culprit remains so as to realize the maximum amount info as potential.Theyâre manually dead (not automated) against a selected mark and indiscriminately launched against an outsized pool of targets.They typically aim to infiltrate a complete network, as opposition one specific half.More common attacks, like remote file inclusion (RFI), SQL injection and cross-site scripting (XSS), square measure oftentimes employed by perpetrators to ascertain a footing in a very targeted network. Next, Trojans and backdoor shells square measure typically wont to expand that foothold and make a persistent presence inside the targeted perimeter.
Eccouncil 312-50v12 Sample Question 34
Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored?
Options:
Answer: D
Eccouncil 312-50v12 Sample Question 35
You have the SOA presented below in your Zone. Your secondary servers have not been able to contact your primary server to synchronize information. How long will the secondary servers attempt to contact the primary server before it considers that zone is dead and stops responding to queries? collegae.edu.SOA, cikkye.edu ipad.college.edu. (200302028 3600 3600 604800 3600)
Options:
Answer: D
Eccouncil 312-50v12 Sample Question 36
Which of the following tools are used for enumeration? (Choose three.)
Options:
Answer: B, D, F
Eccouncil 312-50v12 Sample Question 37
Which of the following is not a Bluetooth attack?
Options:
Answer: A Explanation: Explanation: https://github.com/verovaleros/bluedriving Bluedriving is a bluetooth wardriving utility. It can capture bluetooth devices, lookup their services, get GPS information and present everything in a nice web page. It can search for and show a lot of information about the device, the GPS address and the historic location of devices on a map. The main motivation of this tool is to research about the targeted surveillance of people by means of its cellular phone or car. With this tool you can capture information about bluetooth devices and show, on a map, the points where you have seen the same device in the past.
Eccouncil 312-50v12 Sample Question 38
Email is transmitted across the Internet using the Simple Mail Transport Protocol. SMTP does not encrypt email, leaving the information in the message vulnerable to being read by an unauthorized person. SMTP can upgrade a connection between two mail servers to use TLS. Email transmitted by SMTP over TLS is encrypted. What is the name of the command used by SMTP to transmit email over TLS?
Options:
Answer: E
Eccouncil 312-50v12 Sample Question 39
Which of the following tools is used to analyze the files produced by several packet-capture programs such as tcpdump, WinDump, Wireshark, and EtherPeek?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 40
Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?
Options:
Answer: C
Eccouncil 312-50v12 Sample Question 41
You are tasked to perform a penetration test. While you are performing information gathering, you find an employee list in Google. You find the receptionistâs email, and you send her an email changing the source email to her bossâs email (boss@company). In this email, you ask for a pdf with information. She reads your email and sends back a pdf with links. You exchange the pdf links with your malicious links (these links contain malware) and send back the modified pdf, saying that the links donât work. She reads your email, opens the links, and her machine gets infected. You now have access to the company network. What testing method did you use?
Options:
Answer: A Explanation: Explanation: Social engineering is the term used for a broad range of malicious activities accomplished through human interactions. It uses psychological manipulation to trick users into making security mistakes or giving away sensitive information.Social engineering attacks typically involve some form of psychological manipulation, fooling otherwise unsuspecting users or employees into handing over confidential or sensitive data. Commonly, social engineering involves email or other communication that invokes urgency, fear, or similar emotions in the victim, leading the victim to promptly reveal sensitive information, click a malicious link, or open a malicious file. Because social engineering involves a human element, preventing these attacks can be tricky for enterprises.
Eccouncil 312-50v12 Sample Question 42
Which mode of IPSec should you use to assure security and confidentiality of data within the same LAN?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 43
A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?
Options:
Answer: C
Eccouncil 312-50v12 Sample Question 44
What kind of detection techniques is being used in antivirus software that identifies malware by collecting data from multiple protected systems and instead of analyzing files locally itâs made on the providerâs environment?
Options:
Answer: E
Eccouncil 312-50v12 Sample Question 45
The change of a hard drive failure is once every three years. The cost to buy a new hard drive is $300. It will require 10 hours to restore the OS and software to the new hard disk. It will require a further 4 hours to restore the database from the last backup to the new hard disk. The recovery person earns $10/hour. Calculate the SLE, ARO, and ALE. Assume the EF = 1(100%). What is the closest approximate cost of this replacement and recovery operation per year?
Options:
Answer: D Explanation: Explanation: 1. AV (Asset value) = $300 + (14 * $10) = $440 - the cost of a hard drive plus the work of a recovery person, i.e.how much would it take to replace 1 asset? 10 hours for resorting the OS and soft + 4 hours for DB restore multiplies by hourly rate of the recovery person.2. SLE (Single Loss Expectancy) = AV * EF (Exposure Factor) = $440 * 1 = $4403. ARO (Annual rate of occurrence) = 1/3 (every three years, meaning the probability of occurring during 1 years is 1/3)4. ALE (Annual Loss Expectancy) = SLE * ARO = 0.33 * $440 = $145.3
Eccouncil 312-50v12 Sample Question 46
PGP, SSL, and IKE are all examples of which type of cryptography?
Options:
Answer: D
Eccouncil 312-50v12 Sample Question 47
Which definition among those given below best describes a covert channel?
Options:
Answer: C
Eccouncil 312-50v12 Sample Question 48
Which type of security feature stops vehicles from crashing through the doors of a building?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 49
Bob is acknowledged as a hacker of repute and is popular among visitors of "underground" sites. Bob is willing to share his knowledge with those who are willing to learn, and many have expressed their interest in learning from him. However, this knowledge has a risk associated with it, as it can be used for malevolent attacks as well. In this context, what would be the most effective method to bridge the knowledge gap between the "black" hats or crackers and the "white" hats or computer security professionals? (Choose the test answer.)
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 50
What is the minimum number of network connections in a multihomed firewall?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 51
Which of the following Linux commands will resolve a domain name into IP address?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 52
What is a NULL scan?
Options:
Answer: B
Eccouncil 312-50v12 Sample Question 53
If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which other option could the tester use to get a response from a host using TCP?
Options:
Answer: B Explanation: Explanation: https://tools.kali.org/information-gathering/hping3http://www.carnal0wnage.com/papers/LSO-Hping2-Basics.pdg
Eccouncil 312-50v12 Sample Question 54
Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?
Options:
Answer: E
Eccouncil 312-50v12 Sample Question 55
You are a Network Security Officer. You have two machines. The first machine (192.168.0.99) has snort installed, and the second machine (192.168.0.150) has kiwi syslog installed. You perform a syn scan in your network, and you notice that kiwi syslog is not receiving the alert message from snort. You decide to run wireshark in the snort machine to check if the messages are going to the kiwi syslog machine. What Wireshark filter will show the connections from the snort machine to kiwi syslog machine?
Options:
Answer: E