Cross-site request forgery involves:

A browser making a request to a server without the user's knowledge

A request sent by a malicious user from a browser to a server

Modification of a request by a proxy between client and server

A browser making a request to a server without the user's knowledge

A server making a request to another server without the user's knowledge

Which of the following scanning method splits the TCP header into several packets and makes it difficult for packet filters to detect the purpose of the packet?

SYN/FIN scanning using IP fragments

You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible Intrusion Detection System. What is the best approach?

Install Cryptcat and encrypt outgoing packets from this server.

Use Alternate Data Streams to hide the outgoing packets from this server.

Use HTTP so that all traffic can be routed vis a browser, thus evading the internal IntrusionDetection Systems.

Install Cryptcat and encrypt outgoing packets from this server.

Install and use Telnet to encrypt all outgoing traffic from this server.

How can rainbow tables be defeated?

All uppercase character passwords

Lockout accounts under brute force password cracking attempts

What would be the purpose of running "wget 192.168.0.15 -q -S" against a web server?

Using wget to perform banner grabbing on the webserver

Performing content enumeration on the web server to discover hidden folders

Using wget to perform banner grabbing on the webserver

Flooding the web server with requests to perform a DoS attack

Downloading all the contents of the web page locally for further examination

The security administrator of PLUS needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic.After he applied his ACL configuration in the router, nobody can access the ftp, and the permitted hosts cannot access the Internet. According to the next configuration, what is happening in the network? access-list 102 deny tcp any any access-list 104 permit udp host 10.0.0.3 any access-list 110 permit tcp host 10.0.0.2 eq www any access-list 108 permit tcp any eq ftp any

The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router

The ACL 104 needs to be first because is UDP

The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router

The ACL for FTP must be before the ACL 110

The ACL 110 needs to be changed to port 80

Which of the following provides a security professional with most information about the system's security posture?

Port scanning, banner grabbing service identification

Phishing, spamming, sending trojans

Social engineering, company site browsing tailgating

Wardriving, warchalking, social engineering

Port scanning, banner grabbing service identification

An attacker scans a host with the below command. Which three flags are set?# nmap -sX host.domain.com

This is Xmas scan. URG, PUSH and FIN are set.

This is SYN scan. SYN flag is set.

This is Xmas scan. URG, PUSH and FIN are set.

This is ACK scan. ACK flag is set.

This is Xmas scan. SYN and ACK flags are set.

Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?

Role Based Access Control (RBAC)

Discretionary Access Control (DAC)

You have compromised a server on a network and successfully opened a shell. You aimed to identify all operating systems running on the network. However, as you attempt to fingerprint all machines in the network using the nmap syntax below, it is not going through.invictus@victim_server.~$ nmap -T4 -O 10.10.0.0/24 TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxx. QUITTING!What seems to be wrong?

OS Scan requires root privileges.

This is a common behavior for a corrupted nmap application.

The outgoing TCP/IP fingerprinting is blocked by the host firewall.

OS Scan requires root privileges.

What is the most common method to exploit the "Bash Bug" or "Shellshock" vulnerability?

Through Web servers utilizing CGI (Common Gateway Interface) to send a malformed environment variable to a vulnerable Web server

Manipulate format strings in text fields

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results?TCP port 21 no responseTCP port 22 no responseTCP port 23 Time-to-live exceeded

The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall

The lack of response from ports 21 and 22 indicate that those services are not running on the destination server

The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error

The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall

The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host

In both pharming and phishing attacks, an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims.What is the difference between pharming and phishing attacks?

In a pharming attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack, an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name

In a phishing attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack, an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name

Both pharming and phishing attacks are purely technical and are not considered forms of social engineering

Both pharming and phishing attacks are identical

When configuring wireless on his home router, Javik disables SSID broadcast. He leaves authentication "open" but sets the SSID to a 32-character string of random letters and numbers.What is an accurate assessment of this scenario from a security perspective?

It is still possible for a hacker to connect to the network after sniffing the SSID from a successful wireless association.

Since the SSID is required in order to connect, the 32-character string is sufficient to prevent bruteforce attacks.

Disabling SSID broadcast prevents 802.11 beacons from being transmitted from the access point, resulting in a valid setup leveraging "security through obscurity".

It is still possible for a hacker to connect to the network after sniffing the SSID from a successful wireless association.

Javik's router is still vulnerable to wireless hacking attempts because the SSID broadcast setting can be enabled using a specially crafted packet sent to the hardware address of the access point.

Which of the following statements is TRUE?

Packet Sniffers operate on Layer 2 of the OSI model.

Packet Sniffers operate on the Layer 1 of the OSI model.

Packet Sniffers operate on Layer 2 of the OSI model.

Packet Sniffers operate on both Layer 2 & Layer 3 of the OSI model.

Packet Sniffers operate on Layer 3 of the OSI model.

Insecure direct object reference is a type of vulnerability where the application does not verify if the user is authorized to access the internal object via its name or key. Suppose a malicious user Rob tries to get access to the account of a benign user Ned.Which of the following requests best illustrates an attempt to exploit an insecure direct object reference vulnerability?

"GET /restricted/accounts/?name=Ned HTTP/1.1 Host westbank.com"

"GET /restricted/goldtransfer?to=Rob&from=1 or 1=1' HTTP/1.1Host: westbank.com"

"GET /restricted/\r\n\%00account%00Ned%00access HTTP/1.1 Host: westbank.com"

"GET /restricted/accounts/?name=Ned HTTP/1.1 Host westbank.com"

"GET /restricted/ HTTP/1.1 Host: westbank.com

You are a security officer of a company. You had an alert from IDS that indicates that one PC on your Intranet is connected to a blacklisted IP address (C2 Server) on the Internet. The IP address was blacklisted just before the alert. You are starting an investigation to roughly analyze the severity of the situation. Which of the following is appropriate to analyze?

Event logs on domain controller

A company's Web development team has become aware of a certain type of security vulnerability in their Web software. To mitigate the possibility of this vulnerability being exploited, the team wants to modify the software requirements to disallow users from entering HTML as input into their Web application.What kind of Web application vulnerability likely exists in their software?

Cross-site scripting vulnerability

Web site defacement vulnerability

Gross-site Request Forgery vulnerability

On performing a risk assessment, you need to determine the potential impacts when some of the critical business processes of the company interrupt its service.What is the name of the process by which you can determine those critical businesses?

Disaster Recovery Planning (DRP)

ECCouncil 312-50v12 Practice Test 10 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

ECCouncil 312-50v12 Practice Test 10

Question

ECCouncil 312-50v12 Practice Tests

Practice Tests