EC-COUNCIL EC-COUNCIL Certifications 312-50V11 Questions & Answers

• Question 121:

  Kevin, a professional hacker, wants to penetrate CyberTech Inc.'s network. He employed a technique, using which he encoded packets with Unicode characters. The company's IDS cannot recognize the packet, but the target web server can decode them.

  What is the technique used by Kevin to evade the IDS system?

  A. Desynchronization

  B. Obfuscating

  C. Session splicing

  D. Urgency flag

  Correct Answer: B

  Adversaries could decide to build an possible or file difficult to find or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. this is often common behavior which will be used across totally different platforms and therefore the network to evade defenses. Payloads may be compressed, archived, or encrypted so as to avoid detection. These payloads may be used throughout Initial Access or later to mitigate detection. typically a user's action could also be needed to open and Deobfuscate/ Decode Files or info for User Execution. The user can also be needed to input a parole to open a parole protected compressed/encrypted file that was provided by the mortal. Adversaries can also used compressed or archived scripts, like JavaScript. Portions of files can even be encoded to cover the plain-text strings that will otherwise facilitate defenders with discovery. Payloads can also be split into separate, ostensibly benign files that solely reveal malicious practicality once reassembled. Adversaries can also modify commands dead from payloads or directly via a Command and Scripting Interpreter. surroundings variables, aliases, characters, and different platform/ language specific linguistics may be wont to evade signature based mostly detections and application management mechanisms.

• Question 122:

  Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network.

  Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.

  A. SNMPUtil

  B. SNScan

  C. SNMPScan

  D. Solarwinds IP Network Browser

  E. NMap

  Correct Answer: ABD

• Question 123:

  Mary, a penetration tester, has found password hashes in a client system she managed to breach. She needs to use these passwords to continue with the test, but she does not have time to find the passwords that correspond to these hashes. Which type of attack can she implement in order to continue?

  A. LLMNR/NBT-NS poisoning

  B. Internal monologue attack

  C. Pass the ticket

  D. Pass the hash

  Correct Answer: D

• Question 124:

  Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two.

  What would you call this attack?

  A. Interceptor

  B. Man-in-the-middle

  C. ARP Proxy

  D. Poisoning Attack

  Correct Answer: B

• Question 125:

  Clark, a professional hacker, was hired by an organization lo gather sensitive Information about its competitors surreptitiously. Clark gathers the server IP address of the target organization using Whole footprinting. Further, he entered the server IP address as an input to an online tool to retrieve information such as the network range of the target organization and to identify the network topology and operating system used in the network. What is the online tool employed by Clark in the above scenario?

  A. AOL

  B. ARIN

  C. DuckDuckGo

  D. Baidu

  Correct Answer: B

• Question 126:

  The Payment Card Industry Data Security Standard (PCI DSS) contains six different categories of control objectives. Each objective contains one or more requirements, which must be followed in order to achieve compliance. Which of the following requirements would best fit under the objective, "Implement strong access control measures"?

  A. Regularly test security systems and processes.

  B. Encrypt transmission of cardholder data across open, public networks.

  C. Assign a unique ID to each person with computer access.

  D. Use and regularly update anti-virus software on all systems commonly affected by malware.

  Correct Answer: C

• Question 127:

  George is a security professional working for iTech Solutions. He was tasked with securely transferring sensitive data of the organization between industrial systems. In this process, he used a short-range communication protocol based on the IEEE 203.15.4 standard. This protocol is used in devices that transfer data infrequently at a low rate in a restricted area, within a range of 10-100 m. What is the short-range wireless communication technology George employed in the above scenario?

  A. MQTT

  B. LPWAN

  C. Zigbee

  D. NB-IoT

  Correct Answer: C

  Zigbee could be a wireless technology developed as associate open international normal to deal with the unique desires of affordable, low-power wireless IoT networks. The Zigbee normal operates on the IEEE

  802.15.4 physical radio specification and operates in unauthorised bands as well as a pair of.4 GHz, 900 MHz and 868 MHz.

  The 802.15.4 specification upon that the Zigbee stack operates gained confirmation by the Institute of Electrical and physical science Engineers (IEEE) in 2003. The specification could be a packet-based radio protocol supposed for affordable, battery-operated devices. The protocol permits devices to speak in an exceedingly kind of network topologies and may have battery life lasting many years.

  The Zigbee three.0 Protocol The Zigbee protocol has been created and ratified by member corporations of the Zigbee Alliance.Over three hundred leading semiconductor makers, technology corporations, OEMs and repair corporations comprise the Zigbee Alliance membership. The Zigbee protocol was designed to supply associate easy-touse wireless information answer characterised by secure, reliable wireless network architectures.

  THE ZIGBEE ADVANTAGE The Zigbee 3.0 protocol is intended to speak information through rip-roaring RF environments that area unit common in business and industrial applications. Version 3.0 builds on the prevailing Zigbee normal however unifies the market- specific application profiles to permit all devices to be wirelessly connected within the same network, no matter their market designation and performance. what is more, a Zigbee 3.0 certification theme ensures the ability of product from completely different makers. Connecting Zigbee three.0 networks to the information science domain unveil observance and management from devices like smartphones and tablets on a local area network or WAN, as well as the web, and brings verity net of Things to fruition.

  Zigbee protocol options include: Support for multiple network topologies like point-to-point, point-to-multipoint and mesh networks Low duty cycle provides long battery life Low latency Direct Sequence unfold Spectrum (DSSS) Up to 65,000 nodes per network 128-bit AES encryption for secure information connections Collision avoidance, retries and acknowledgements

• Question 128:

  Mike, a security engineer, was recently hired by BigFox Ltd. The company recently experienced disastrous DoS attacks. The management had instructed Mike to build defensive strategies for the company's IT infrastructure to thwart DoS/ DDoS attacks. Mike deployed some countermeasures to handle jamming and scrambling attacks. What is the countermeasure Mike applied to defend against jamming and scrambling attacks?

  A. Allow the usage of functions such as gets and strcpy

  B. Allow the transmission of all types of addressed packets at the ISP level

  C. Implement cognitive radios in the physical layer

  D. A Disable TCP SYN cookie protection

  Correct Answer: D

• Question 129:

  What is the known plaintext attack used against DES which gives the result that encrypting plaintext with one DES key followed by encrypting it with a second DES key is no more secure than using a single key?

  A. Man-in-the-middle attack

  B. Meet-in-the-middle attack

  C. Replay attack

  D. Traffic analysis attack

  Correct Answer: B

• Question 130:

  Which of the following steps for risk assessment methodology refers to vulnerability identification?

  A. Determines if any flaws exist in systems, policies, or procedures

  B. Assigns values to risk probabilities; Impact values.

  C. Determines risk probability that vulnerability will be exploited (High. Medium, Low)

  D. Identifies sources of harm to an IT system. (Natural, Human. Environmental)

  Correct Answer: C