Which among the following is the best example of the hacking concept called "clearing tracks"?

During a cyberattack, a hacker corrupts the event logs on all machines.

After a system is breached, a hacker creates a backdoor to allow re-entry into a system.

During a cyberattack, a hacker injects a rootkit into a server.

An attacker gains access to a server through an exploitable vulnerability.

During a cyberattack, a hacker corrupts the event logs on all machines.

You are using a public Wi-Fi network inside a coffee shop. Before surfing the web, you use your VPN to prevent intruders from sniffing your traffic. If you did not have a VPN, how would you identify whether someone is performing an ARP spoofing attack on your laptop?

You should check your ARP table and see if there is one IP address with two different MAC addresses.

You should scan the network using Nmap to check the MAC addresses of all the hosts and look for duplicates.

You should use netstat to check for any suspicious connections with another IP address within the LAN.

You cannot identify such an attack and must use a VPN to protect your traffic, r

Robert, a professional hacker, is attempting to execute a fault injection attack on a target IoT device.In this process, he injects faults into the power supply that can be used for remote execution, also causing the skipping of key instructions. He also injects faults into the clock network used for delivering a synchronized signal across the chip.Which of the following types of fault injection attack is performed by Robert in the above scenario?

Optical, electromagnetic fault injection (EMFI)

What is the following command used for? sqlmap.py-u ,,http://10.10.1.20/?p=1&forumaction=search" -dbs

A Enumerating the databases in the DBMS for the URL

Creating backdoors using SQL injection

A Enumerating the databases in the DBMS for the URL

Retrieving SQL statements being executed on the database

Searching database statements at the IP address given

Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?

Boolean-based blind SQL injection

Your organization has signed an agreement with a web hosting provider that requires you to take full responsibility of the maintenance of the cloud-based resources. Which of the following models covers this?

service Infrastructure as a service

Your network infrastructure is under a SYN flood attack. The attacker has crafted an automated botnet to simultaneously send 's' SYN packets per second to the server. You have put measures in place to manage 'fSYN packets per second, and the system is designed to deal with this number without any performance issues.If 's' exceeds 'f', the network infrastructure begins to show signs of overload. The system's response time increases exponentially (24k), where 'k' represents each additional SYN packet above the ff limit. Now, considering 's=500' and different 'f values, in which scenario is the server most likely to experience overload and significantly increased response times?

f=420: The server can handle 490 SYN packets per second. With 's' exceeding 'f by 10, the response time shoots up (2410 = 1024 times the usual response time), indicating a system overload

f=510: The server can handle 510 SYN packets per second, which is greater than what the attacker is sending. The system stays stable, and the response time remains unaffected

f=495: The server can handle 495 SYN packets per second. The response time drastically rises (245 = 32 times the normal), indicating a probable system overload

f=S05: The server can handle 505 SYN packets per second. In this case, the response time increases but not as drastically (245 = 32 times the normal), and the systern might still function, albeit slowly

f=420: The server can handle 490 SYN packets per second. With 's' exceeding 'f by 10, the response time shoots up (2410 = 1024 times the usual response time), indicating a system overload

A certified ethical hacker is conducting a Whois footprinting activity on a specific domain. The individual is leveraging various tools such as Batch IP Converter and Whols Analyzer Pro to retrieve vital details but is unable to gather complete Whois information from the registrar for a particular set of data. As the hacker, what might be the probable data model being utilized by the domain's registrar for storing and looking upWho is information?

Thin Whois model working correctly

Thick Whois model with a malfunctioning server

Thick Whois model working correctly

Thin Whois model with a malfunctioning server

Thin Whois model working correctly

A sophisticated attacker targets your web server with the intent to execute a Denial of Service (DoS) attack. His strategy involves a unique mixture of TCP SYN, UDP, and ICMP floods, using 'r' packets per second. Your server, reinforced with advanced security measures, can handle 'h' packets per second before it starts showing signs of strain. If 'r' surpasses 'h', it overwhelms the server, causing it to become unresponsive. In a peculiar pattern, the attacker selects 'r' as a composite number and 'h' as a prime number, making the attack detection more challenging. Considering 'r=2010' and different values for 'h', which of the following scenarios would potentially cause the server to falter?

h=1987 (prime): The attacker's packet rate exceeds the server's capacity, causing potential unresponsiveness

h=1999 (prime): Despite the attacker's packet flood, the server can handle these requests, remaining responsive

h=2003 (prime): The server can manage more packets than the attacker is sending, hence it stays operational

h=1993 (prime): Despite being less than 'r', the server's prime number capacity keeps it barely operational, but the risk of falling is imminent

h=1987 (prime): The attacker's packet rate exceeds the server's capacity, causing potential unresponsiveness

You have been hired as an intern at a start-up company. Your first task is to help set up a basic web server for the company's new website. The team leader has asked you to make sure the server is secure from common - threats. Based on your knowledge from studying for the CEH exam, which of the following actions should be your priority to secure the web server?

Regularly updating and patching the server software

Installing a web application firewall

limiting the number of concurrent connections to the server

Encrypting the company's website with SSL/TLS

Regularly updating and patching the server software

An ethical hacker has been tasked with assessing the security of a major corporation's network. She suspects the network uses default SNMP community strings. To exploit this, she plans to extract valuable network information using SNMP enumeration. Which tool could best help her to get the information without directly modifying any parameters within the SNMP agent's management information base (MIB)?

snmp-check (snmp_enum Module) to gather a wide array of information about the target

Nmap, with a script to retrieve all running SNMP processes and associated ports

Oputits, are mainly designed for device management and not SNMP enumeration

SnmpWalk, with a command to change an OID to a different value

You are the lead cybersecurity analyst at a multinational corporation that uses a hybrid encryption system to secure inter-departmental communications. The system uses RSA encryption for key exchange and AES for data encryption, taking advantage of the strengths of both asymmetric and symmetric encryption. Each RSAkey pair has a size of 'n' bits, with larger keys providing more security at the cost of slower performance. The time complexity of generating an RSA key pair is O(n*2), and AES encryption has a time complexity of O(n). An attacker has developed a quantum algorithm with time complexity O((log n)*2) to crack RSA encryption. Given *n=4000' and variable 'AES key size', which scenario is likely to provide the best balance of security and performance?

AES key size=128 bits: This configuration provides less security than option A, but RSA key generation and AES encryption will be faster.

AES key size=256 bits: This configuration provides a high level of security, but RSA key generation may be slow.

AES key size=192 bits: This configuration is a balance between options A and B, providing moderate security and performance.

AES key size=512 bits: This configuration provides the highest level of security but at a significant performance cost due to the large AES key size.

You are a cybersecurity consultant for a healthcare organization that utilizes Internet of Medical Things (loMT) devices, such as connected insulin pumps and heart rate monitors, to provide improved patientcare. Recently, the organization has been targeted by ransomware attacks. While the IT infrastructure was unaffected due to robust security measures, they are worried that the loMT devices could be potential entry points for future attacks. What would be your main recommendation to protect these devices from such threats?

Use network segmentation to isolate loMT devices from the main network.

Implement multi-factor authentication for all loMT devices.

Disable all wireless connectivity on loMT devices.

Use network segmentation to isolate loMT devices from the main network.

Regularly change the IP addresses of all loMT devices.

As a cybersecurity consultant for SafePath Corp, you have been tasked with implementing a system for secure email communication. The key requirement is to ensure both confidentiality and non-repudiation. While considering various encryption methods, you are inclined towards using a combination of symmetric and asymmetric cryptography. However, you are unsure which cryptographic technique would best serve the purpose. Which of the following options would you choose to meet these requirements?

Apply asymmetric encryption with RSA and use the private key for signing.

Use symmetric encryption with the AES algorithm.

Use the Diffie-Hellman protocol for key exchange and encryption.

Apply asymmetric encryption with RSA and use the public key for encryption.

Apply asymmetric encryption with RSA and use the private key for signing.

An audacious attacker is targeting a web server you oversee. He intends to perform a Slow HTTP POST attack, by manipulating 'a' HTTP connection. Each connection sends a byte of data every 'b' second, effectively holding up the connections for an extended period. Your server is designed to manage 'm' connections per second, but any connections exceeding this number tend to overwhelm the system. Given 'a=100' and variable 'm', along with the attacker's intention of maximizing the attack duration 'D=a*b', consider the following scenarios. Which is most likely to result in the longest duration of server unavailability?

m=90, b=15: The server can manage 90 connections per second, but the attacker's 100 connections exceed this, and with each connection held up for 15 seconds, the attack duration could be significant

m=110, b=20: Despite the attacker sending 100 connections, the server can handle 110 connections per second, therefore likely staying operative, regardless of the hold-up time per connection

m=90, b=15: The server can manage 90 connections per second, but the attacker's 100 connections exceed this, and with each connection held up for 15 seconds, the attack duration could be significant

95, b=10: Here, the server can handle 95 connections per second, but it falls short against the attacker's 100 connections, albeit the hold-up time per connection is lower

m=105, b=12: The server can manage 105 connections per second, more than the attacker's 100 connections, likely maintaining operation despite a moderate hold-up time

Your company suspects a potential security breach and has hired you as a Certified Ethical Hacker to investigate. You discover evidence of footprinting through search engines and advanced Google hacking techniques. The attacker utilized Google search operators to extract sensitive information. You further notice queries that indicate the use of the Google Hacking Database (GHDB) with an emphasis on VPN footprinting.Which of the following Google advanced search operators would be the LEAST useful in providing the attacker with sensitive VPN-related information?

location: This operator finds information for a specific location

intitle: This operator restricts results to only the pages containing the specified term in the title

location: This operator finds information for a specific location

inur: This operator restricts the results to only the pages containing the specified word in the URL

link: This operator searches websites or pages that contain links to the specified website or page

In your cybersecurity class, you are learning about common security risks associated with web servers. One topic that comes up is the risk posed by using default server settings. Why is using default settings ona web - server considered a security risk, and what would be the best initial step to mitigate this risk?

Default settings reveal server software type; change these settings

Default settings cause server malfunctions; simplify the settings

Default settings allow unlimited login attempts; setup account lockout

Default settings reveal server software type; change these settings

Default settings enable auto-updates; disable and manually patch

A skilled ethical hacker was assigned to perform a thorough OS discovery on a potential target. They decided to adopt an advanced fingerprinting technique and sent a TCP packet to an open TCP port with specific flags enabled. Upon receiving the reply, they noticed the flags were SYN and ECN-Echo. Which test did the ethical hacker conduct and why was this specific approach adopted?

Qrest 1: The test was conducted because SYN and ECN-Echo flags enabled to allow the hacker to probe the nature of the response and subsequently determine the OS fingerprint

Test 3: The test was executed to observe the response of the target system when a packet with URG, PSH, SYN, and FIN flags was sent, thereby identifying the OS

Qrest 1: The test was conducted because SYN and ECN-Echo flags enabled to allow the hacker to probe the nature of the response and subsequently determine the OS fingerprint

Test 2: This test was chosen because a TCP packet with no flags enabled is known as a NULL packet and this would allow the hacker to assess the OS of the target

Test 6; The hacker selected this test because a TCP packet with the ACK flag enabled sent to a closed TCP port would yield more information about the OS

An IT company has just implemented new security controls to their network and system setup. As a Certified Ethical Hacker, your responsibility is to assess the possible vulnerabilities in the new setup. You are given the information that the network and system are adequately patched with the latest updates, and all employees have gone through recent cybersecurity awareness training. Considering the potential vulnerability sources, what is the best initial approach to vulnerability assessment?

Checking for hardware and software misconfigurations to identify any possible loopholes

Evaluating the network for inherent technology weaknesses prone to specific types of attacks

Investigating if any ex-employees still have access to the company's system and data

Conducting social engineering tests to check if employees can be tricked into revealing sensitive information

As an IT Security Analyst, you've been asked to review the security measures of an e-commerce website that relies on a SQL database for storing sensitive customer data. Recently, an anonymous tip has alerted you to a possible threat: a seasoned hacker who specializes in SQL Injection attacks may be targeting your system. The site already employs input validation measures to prevent basic injection attacks, and it blocks any user inputs containing suspicious patterns. However, this hacker is known to use advanced SQL Injection techniques. Given this situation, which of the following strategies would the hacker most likely adopt to bypass your security measures?

The hacker could deploy an 'out-of-band' SQL Injection attack, extracting data via a different communication channel, such as DNS or HTTP requests

The hacker may resort to a DDoS attack instead, attempting to crash the server and thus render the e commerce site unavailable

The hacker may try to use SQL commands which are less known and less likely to be blocked by your system's security

The hacker might employ a blind' SQL Injection attack, taking advantage of the application's true or false responses to extract data bit by bit

In an intricate web application architecture using an Oracle database, you, as a security analyst, have identified a potential SQL Injection attack surface. The database consists of 'x' tables, each with y columns. Each table contains z1 records. An attacker, well-versed in SQLi techniques, crafts 'u' SQL payloads, each attempting to extract maximum data from the database. The payloads include UNION SELECT' statements and 'DBMS_XSLPPOCESSOR.READ2CLOB' to read sensitive files. The attacker aims to maximize the total data extracted E=xyz'u'. Assuming 'x=4\ y=2\ and varying z' and 'u\ which situation is likely to result in the highest extracted data volume?

z=600. u=2: The attacker devises 2 SQL payloads. each aimed at tables holding 600 records, affecting all columns across all tables

z=400. u=4: The attacker constructs A SQLpayloads, each focusing on tables with 400 records, influencing all columns of all tables

z=550, u=Z Here, the attacker formulates 2 SQL payloads and directs them towards tables containing 550 records, impacting all columns and tables

z=600. u=2: The attacker devises 2 SQL payloads. each aimed at tables holding 600 records, affecting all columns across all tables

Az=500. u=3: The attacker creates 3 SQL payloads and targets tables with 500 records each, exploiting all columns and tables

ECCouncil 312-50v12 Practice Test 13 - Free Online Exam Prep & Questions

Sam, a web developer, was instructed to incorporate a hybrid encryption software program into a web application to secure email messages. Sam used an encryption software, which is a free implementation of the OpenPGP standard that uses both symmetric-key cryptography and asymmetric-key cryptography for improved speed and secure key exchange. What is the encryption software employed by Sam for securing the email messages?

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 312-50v12 Practice Test 13

Question

ECCouncil 312-50v12 Practice Tests

Practice Tests