EC-COUNCIL EC-COUNCIL Certifications 312-50V11 Questions & Answers

• Question 281:

  Security administrator John Smith has noticed abnormal amounts of traffic coming from local computers at night. Upon reviewing, he finds that user data have been exfilltrated by an attacker. AV tools are unable to find any malicious software, and the IDS/IPS has not reported on any non-whitelisted programs, what type of malware did the attacker use to bypass the company's application whitelisting?

  A. Phishing malware

  B. Zero-day malware

  C. File-less malware

  D. Logic bomb malware

  Correct Answer: C

• Question 282:

  A security analyst uses Zenmap to perform an ICMP timestamp ping scan to acquire information related to the current time from the target host machine.

  Which of the following Zenmap options must the analyst use to perform the ICMP timestamp ping scan?

  A. -PY

  B. -PU

  C. -PP

  D. -Pn

  Correct Answer: C

• Question 283:

  These hackers have limited or no training and know how to use only basic techniques or tools.

  What kind of hackers are we talking about?

  A. Black-Hat Hackers A

  B. Script Kiddies

  C. White-Hat Hackers

  D. Gray-Hat Hacker

  Correct Answer: B

  Script Kiddies: These hackers have limited or no training and know how to use only basictechniques or tools. Even then they may not understand any or all of what they are doing.

• Question 284:

  Which of the following LM hashes represent a password of less than 8 characters? (Choose two.)

  A. BA810DBA98995F1817306D272A9441BB

  B. 44EFCE164AB921CQAAD3B435B51404EE

  C. 0182BD0BD4444BF836077A718CCDF409

  D. CEC52EB9C8E3455DC2265B23734E0DAC

  E. B757BF5C0D87772FAAD3B435B51404EE

  F. E52CAC67419A9A224A3B108F3FA6CB6D

  Correct Answer: BE

• Question 285:

  Jack, a professional hacker, targets an organization and performs vulnerability scanning on the target web server to identify any possible weaknesses, vulnerabilities, and misconfigurations. In this process, Jack uses an automated tool that eases his work and performs vulnerability scanning to find hosts, services, and other vulnerabilities in the target server. Which of the following tools is used by Jack to perform vulnerability scanning?

  A. Infoga

  B. WebCopier Pro

  C. Netsparker

  D. NCollector Studio

  Correct Answer: C

• Question 286:

  Which of the following is considered an exploit framework and has the ability to perform automated attacks on services, ports, applications and unpatched security flaws in a computer system?

  A. Wireshark

  B. Maltego

  C. Metasploit

  D. Nessus

  Correct Answer: C

• Question 287:

  Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397- 1872883824-861252104-501. What needs to happen before Matthew has full administrator access?

  A. He must perform privilege escalation.

  B. He needs to disable antivirus protection.

  C. He needs to gain physical access.

  D. He already has admin privileges, as shown by the "501" at the end of the SID.

  Correct Answer: A

• Question 288:

  A friend of yours tells you that he downloaded and executed a file that was sent to him by a coworker. Since the file did nothing when executed, he asks you for help because he suspects that he may have installed a trojan on his computer.

  what tests would you perform to determine whether his computer Is Infected?

  A. Use ExifTool and check for malicious content.

  B. You do not check; rather, you immediately restore a previous snapshot of the operating system.

  C. Upload the file to VirusTotal.

  D. Use netstat and check for outgoing connections to strange IP addresses or domains.

  Correct Answer: C

• Question 289:

  "........is an attack type for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. It is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hot-spot by posing as a legitimate provider. This type of attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there."

  Fill in the blank with appropriate choice.

  A. Evil Twin Attack

  B. Sinkhole Attack

  C. Collision Attack

  D. Signal Jamming Attack

  Correct Answer: A

• Question 290:

  Ben purchased a new smartphone and received some updates on it through the OTA method. He received two messages: one with a PIN from the network operator and another asking him to enter the PIN received from the operator. As soon as he entered the PIN, the smartphone started functioning in an abnormal manner. What is the type of attack performed on Ben in the above scenario?

  A. Advanced SMS phishing

  B. Bypass SSL pinning

  C. Phishing

  D. Tap 'n ghost attack

  Correct Answer: A