You are a penetration tester tasked with testing the wireless network of your client Brakeme S

You are attempting to break into the wireless network with the SSID "Brakeme-lnternal." You realize that this network uses WPA3 encryption, which of the following vulnerabilities is the promising to exploit?

Alice needs to send a confidential document to her coworker. Bryan. Their company has public key infrastructure set up. Therefore. Alice both encrypts the message and digitally signs it. Alice uses_______to encrypt the message, and Bryan uses__________to confirm the digital signature.

Bryan's public key; Alice's public key

Bryan's public key; Bryan's public key

Alice's public key; Alice's public key

Bryan's private key; Alice's public key

Bryan's public key; Alice's public key

A friend of yours tells you that he downloaded and executed a file that was sent to him by a coworker. Since the file did nothing when executed, he asks you for help because he suspects that he may have installed a trojan on his computer.what tests would you perform to determine whether his computer Is Infected?

Use netstat and check for outgoing connections to strange IP addresses or domains.

Use ExifTool and check for malicious content.

You do not check; rather, you immediately restore a previous snapshot of the operating system.

Use netstat and check for outgoing connections to strange IP addresses or domains.

While browsing his Facebook teed, Matt sees a picture one of his friends posted with the caption."Learn more about your friends!", as well as a number of personal questions. Matt is suspicious and texts his friend, who confirms that he did indeed post it. With assurance that the post is legitimate.Matt responds to the questions on the post, a few days later. Mates bank account has been accessed, and the password has been changed. What most likely happened?

Matt inadvertently provided the answers to his security questions when responding to the post.

Matt's bank-account login information was brute forced.

Matt Inadvertently provided his password when responding to the post.

Matt's computer was infected with a keylogger.

Jason, an attacker, targeted an organization to perform an attack on its Internet-facing web server with the intention of gaining access to backend servers, which are protected by a firewall. In this process, he used a URL https://xyz.com/ feed.php?url:externaIsile.com/feed/to to obtain a remote feed and altered the URL input to the local host to view all the local resources on the target server.What is the type of attack Jason performed In the above scenario?

Server-side request forgery (SSRF) attack

What would be the fastest way to perform content enumeration on a given web server by using the Gobuster tool?

Performing content enumeration using a wordlist

Performing content enumeration using the bruteforce mode and 10 threads

Shipping SSL certificate verification

Performing content enumeration using a wordlist

Performing content enumeration using the bruteforce mode and random file extensions

Bill is a network administrator. He wants to eliminate unencrypted traffic inside his company's network. He decides to setup a SPAN port and capture all traffic to the datacenter. He immediately discovers unencrypted traffic in port UDP 161.what protocol is this port using and how can he secure that traffic?

SNMP and he should change it to SNMP V3

it is not necessary to perform any actions, as SNMP is not carrying important information.

SNMP and he should change it to SNMP V3

RPC and the best practice is to disable RPC completely

SNMP and he should change it to SNMP v2, which is encrypted

Suppose that you test an application for the SQL injection vulnerability. You know that the backend database is based on Microsoft SQL Server. In the login/password form, you enter the following credentials:Username: attack' or 1=1 -Password: 123456 Based on the above credentials, which of the following SQL commands are you expecting to be executed by the server, if there is indeed an SQL injection vulnerability?

select * from Users where UserName = 'attack' or 1=1 --' and UserPassword = '123456'

select * from Users where UserName = 'attack' ' or 1=1 -- and UserPassword = '123456'

select * from Users where UserName = 'attack' or 1=1 -- and UserPassword = '123456'

select * from Users where UserName = 'attack or 1=1 -- and UserPassword = '123456'

select * from Users where UserName = 'attack' or 1=1 --' and UserPassword = '123456'

ECCouncil 312-50v12 Practice Test 7 - Free Online Exam Prep & Questions

This form of encryption algorithm is asymmetric key block cipher that is characterized by a 128-bit block size, and its key size can be up to 256 bits. Which among the following is this encryption algorithm?

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 312-50v12 Practice Test 7

Question

ECCouncil 312-50v12 Practice Tests

Practice Tests