EC-COUNCIL EC-COUNCIL Certifications 312-50V11 Questions & Answers

• Question 231:

  Session splicing is an IDS evasion technique in which an attacker delivers data in multiple, small sized packets to the target computer, making it very difficult for an IDS to detect the attack signatures. Which tool can be used to perform session splicing attacks?

  A. tcpsplice

  B. Burp

  C. Hydra

  D. Whisker

  Correct Answer: D

• Question 232:

  Jack, a disgruntled ex-employee of Incalsol Ltd., decided to inject fileless malware into Incalsol's systems. To deliver the malware, he used the current employees' email IDs to send fraudulent emails embedded with malicious links that seem to be legitimate. When a victim employee clicks on the link, they are directed to a fraudulent website that automatically loads Flash and triggers the exploit. What is the technique used byjack to launch the fileless malware on the target systems?

  A. In-memory exploits

  B. Phishing

  C. Legitimate applications

  D. Script-based injection

  Correct Answer: B

• Question 233:

  Which of the following incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an organization?

  A. Preparation phase

  B. Containment phase

  C. Identification phase

  D. Recovery phase

  Correct Answer: A

• Question 234:

  Joel, a professional hacker, targeted a company and identified the types of websites frequently visited by its employees. Using this information, he searched for possible loopholes in these websites and injected a malicious script that can redirect users from the web page and download malware onto a victim's machine. Joel waits for the victim to access the infected web application so as to compromise the victim's machine. Which of the following techniques is used by Joel in the above scenario?

  A. DNS rebinding attack

  B. Clickjacking attack

  C. MarioNet attack

  D. Watering hole attack

  Correct Answer: B

• Question 235:

  Insecure direct object reference is a type of vulnerability where the application does not verify if the user is authorized to access the internal object via its name or key. Suppose a malicious user Rob tries to get access to the account of a benign user Ned.

  Which of the following requests best illustrates an attempt to exploit an insecure direct object reference vulnerability?

  A. "GET /restricted/goldtransfer?to=Robandfrom=1 or 1=1' HTTP/1.1Host: westbank.com"

  B. "GET /restricted/\r\n\%00account%00Ned%00access HTTP/1.1 Host: westbank.com"

  C. "GET /restricted/accounts/?name=Ned HTTP/1.1 Host westbank.com"

  D. "GET /restricted/ HTTP/1.1 Host: westbank.com

  Correct Answer: C

• Question 236:

  Which regulation defines security and privacy controls for Federal information systems and organizations?

  A. HIPAA

  B. EU Safe Harbor

  C. PCI-DSS

  D. NIST-800-53

  Correct Answer: D

• Question 237:

  Ricardo has discovered the username for an application in his targets environment. As he has a limited amount of time, he decides to attempt to use a list of common passwords he found on the Internet. He compiles them into a list and then feeds that list as an argument into his password-cracking application, what type of attack is Ricardo performing?

  A. Known plaintext

  B. Password spraying

  C. Brute force

  D. Dictionary

  Correct Answer: C

  A dictionary Attack as an attack vector utilized by the attacker to break in a very system, that is password

  protected, by golf shot technically each word in a very dictionary as a variety of password for that system.

  This attack vector could be a variety of Brute Force Attack.

  The lexicon will contain words from an English dictionary and conjointly some leaked list of commonly used

  passwords and once combined with common character substitution with numbers, will generally be terribly

  effective and quick.

  How is it done?

  Basically, it's attempting each single word that's already ready. it's done victimization machine-controlled

  tools that strive all the possible words within the dictionary.

  Some password Cracking Software:

  John the ripper

  L0phtCrack

  Aircrack-ng

• Question 238:

  Which among the following is the best example of the hacking concept called "clearing tracks"?

  A. After a system is breached, a hacker creates a backdoor to allow re-entry into a system.

  B. During a cyberattack, a hacker injects a rootkit into a server.

  C. An attacker gains access to a server through an exploitable vulnerability.

  D. During a cyberattack, a hacker corrupts the event logs on all machines.

  Correct Answer: D

• Question 239:

  During a recent security assessment, you discover the organization has one Domain Name Server (DNS) in a Demilitarized Zone (DMZ) and a second DNS server on the internal network.

  What is this type of DNS configuration commonly called?

  A. DynDNS

  B. DNS Scheme

  C. DNSSEC

  D. Split DNS

  Correct Answer: D

• Question 240:

  Cross-site request forgery involves: A. A request sent by a malicious user from a browser to a server

  B. Modification of a request by a proxy between client and server

  C. A browser making a request to a server without the user's knowledge

  D. A server making a request to another server without the user's knowledge

  Correct Answer: C