Leverox Solutions hired Arnold, a security professional, for the threat intelligence process. Arnold collected information about specific threats against the organization. From this information, he retrieved contextual information about security events and incidents that helped him disclose potential risks and gain insight into attacker methodologies. He collected the information from sources such as humans, social media, and chat rooms as well as from events that resulted in cyberattacks. In this process, he also prepared a report that includes identified malicious activities, recommended courses of action, and warnings for emerging attacks. What is the type of threat intelligence collected by Arnold in the above scenario?

Operational threat intelligence

Clark, a professional hacker, attempted to perform a Btlejacking attack using an automated tool, Btlejack, and hardware tool, micro:bit. This attack allowed Clark to hijack, read, and export sensitive information shared between connected devices. To perform this attack, Clark executed various btlejack commands. Which of the following commands was used by Clark to hijack the connections?

btlejack -f 0x9c68fd30 -t -m 0x1 fffffffff

btlejack -d /dev/ttyACM0 -d /dev/ttyACM2 -s

btlejack -f 0x9c68fd30 -t -m 0x1 fffffffff

Mike, a security engineer, was recently hired by BigFox Ltd. The company recently experienced disastrous DoS attacks. The management had instructed Mike to build defensive strategies for the company's IT infrastructure to thwart DoS/ DDoS attacks. Mike deployed some countermeasures to handle jamming and scrambling attacks. What is the countermeasure Mike applied to defend against jamming and scrambling attacks?

Implement cognitive radios in the physical layer

Allow the usage of functions such as gets and strcpy

Allow the transmission of all types of addressed packets at the ISP level

Implement cognitive radios in the physical layer

A Disable TCP SYN cookie protection

What useful information is gathered during a successful Simple Mail Transfer Protocol (SMTP) enumeration?

The two internal commands VRFY and EXPN provide a confirmation of valid users, email addresses, aliases, and mailing lists.

Reveals the daily outgoing message limits before mailboxes are locked

The internal command RCPT provides a list of ports open to message traffic.

A list of all mail proxy server addresses used by the targeted host

When considering how an attacker may exploit a web server, what is web server footprinting?

When an attacker gathers system-level data, including account details and server names

When an attacker implements a vulnerability scanner to identify weaknesses

When an attacker creates a complete profile of the site's external links and file structures

When an attacker gathers system-level data, including account details and server names

When an attacker uses a brute-force attack to crack a web-server password

Calvin, a grey-hat hacker, targets a web application that has design flaws in its authentication mechanism. He enumerates usernames from the login form of the web application, which requests users to feed data and specifies the incorrect field in case of invalid credentials. Later, Calvin uses this information to perform social engineering.Which of the following design flaws in the authentication mechanism is exploited by Calvin?

Insecure transmission of credentials

ECCouncil 312-50v12 Practice Test 12 - Free Online Exam Prep & Questions

A group of hackers were roaming around a bank office building in a city, driving a luxury car. They were using hacking tools on their laptop with the intention to find a free-access wireless network.

What is this hacking process known as?

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 312-50v12 Practice Test 12

Question

ECCouncil 312-50v12 Practice Tests

Practice Tests