EC-COUNCIL EC-COUNCIL Certifications 312-50V11 Questions & Answers

• Question 191:

  A post-breach forensic investigation revealed that a known vulnerability in Apache Struts was to blame for the Equifax data breach that affected 143 million customers. A fix was available from the software vendor for several months prior 10 the Intrusion. This Is likely a failure in which of the following security processes?

  A. vendor risk management

  B. Security awareness training

  C. Secure deployment lifecycle

  D. Patch management

  Correct Answer: D

  Patch management is that the method that helps acquire, test and install multiple patches (code changes)

  on existing applications and software tools on a pc, enabling systems to remain updated on existing

  patches and determining that patches are the suitable ones.

  Managing patches so becomes simple and simple.

  Patch Management is usually done by software system firms as a part of their internal efforts to mend

  problems with the various versions of software system programs and also to assist analyze existing

  software system programs and discover any potential lack of security features or different upgrades.

  Software patches help fix those problems that exist and are detected solely once the software's initial

  unharness. Patches mostly concern security while there are some patches that concern the particular

  practicality of programs as well.

• Question 192:

  This type of injection attack does not show any error message. It is difficult to exploit as it returns information when the application is given SQL payloads that elicit a true or false response from the server. By observing the response, an attacker can extract sensitive information. What type of attack is this?

  A. Time-based SQL injection

  B. Union SQL injection

  C. Error-based SQL injection

  D. Blind SQL injection

  Correct Answer: D

• Question 193:

  Alice needs to send a confidential document to her coworker. Bryan. Their company has public key infrastructure set up. Therefore. Alice both encrypts the message and digitally signs it. Alice uses_______to encrypt the message, and Bryan uses__________to confirm the digital signature.

  A. Bryan's public key; Bryan's public key

  B. Alice's public key; Alice's public key

  C. Bryan's private key; Alice's public key

  D. Bryan's public key; Alice's public key

  Correct Answer: B

• Question 194:

  In this attack, a victim receives an e-mail claiming from PayPal stating that their account has been disabled and confirmation is required before activation. The attackers then scam to collect not one but two credit card numbers, ATM PIN number and other personal details. Ignorant users usually fall prey to this scam.

  Which of the following statement is incorrect related to this attack?

  A. Do not reply to email messages or popup ads asking for personal or financial information

  B. Do not trust telephone numbers in e-mails or popup ads

  C. Review credit card and bank account statements regularly

  D. Antivirus, anti-spyware, and firewall software can very easily detect these type of attacks

  E. Do not send credit card numbers, and personal or financial information via e-mail

  Correct Answer: D

• Question 195:

  Dorian Is sending a digitally signed email to Polly, with which key is Dorian signing this message and how is Poly validating It?

  A. Dorian is signing the message with his public key. and Poly will verify that the message came from Dorian by using Dorian's private key.

  B. Dorian Is signing the message with Polys public key. and Poly will verify that the message came from Dorian by using Dorian's public key.

  C. Dorian is signing the message with his private key. and Poly will verify that the message came from Dorian by using Dorian's public key.

  D. Dorian is signing the message with Polys private key. and Poly will verify mat the message came from Dorian by using Dorian's public key.

  Correct Answer: C

• Question 196:

  Bob is going to perform an active session hijack against Brownies Inc. He has found a target that allows session oriented connections (Telnet) and performs the sequence prediction on the target operating system. He manages to find an active session due to the high level of traffic on the network. What is Bob supposed to do next?

  A. Take over the session

  B. Reverse sequence prediction

  C. Guess the sequence numbers

  D. Take one of the parties offline

  Correct Answer: C

• Question 197:

  Which of the following tools can be used for passive OS fingerprinting?

  A. nmap

  B. tcpdump

  C. tracert

  D. ping

  Correct Answer: B

• Question 198:

  Which ios jailbreaking technique patches the kernel during the device boot so that it becomes jailbroken after each successive reboot?

  A. Tethered jailbreaking

  B. Semi-tethered jailbreaking

  C. Untethered jailbreaking

  D. Semi-Untethered jailbreaking

  Correct Answer: C

  An untethered jailbreak is one that allows a telephone to finish a boot cycle when being pwned with none interruption to jailbreak-oriented practicality. Untethered jailbreaks area unit the foremost sought-after of all, however they're additionally the foremost difficult to attain due to the powerful exploits and organic process talent they need. associate unbound jailbreak is sent over a physical USB cable association to a laptop or directly on the device itself by approach of associate application-based exploit, like a web site in campaign. Upon running associate unbound jailbreak, you'll be able to flip your pwned telephone off and on once more while not running the jailbreak tool once more. all of your jailbreak tweaks and apps would then continue in operation with none user intervention necessary. It's been an extended time since IOS has gotten the unbound jailbreak treatment. the foremost recent example was the computer-based Pangu break, that supported most handsets that ran IOS nine.1. We've additionally witnessed associate unbound jailbreak within the kind of JailbreakMe, that allowed users to pwn their handsets directly from the mobile campaign applications programme while not a laptop.

• Question 199:

  When conducting a penetration test, it is crucial to use all means to get all available information about the target network. One of the ways to do that is by sniffing the network. Which of the following cannot be performed by the passive network sniffing?

  A. Identifying operating systems, services, protocols and devices

  B. Modifying and replaying captured network traffic

  C. Collecting unencrypted information about usernames and passwords

  D. Capturing a network traffic for further analysis

  Correct Answer: B

• Question 200:

  The configuration allows a wired or wireless network interface controller to pass all traffic it receives to the Central Processing Unit (CPU), rather than passing only the frames that the controller is intended to receive. Which of the following is being described?

  A. Multi-cast mode

  B. Promiscuous mode

  C. WEM

  D. Port forwarding

  Correct Answer: B