Home / ECCouncil / 312-50v12

ECCouncil 312-50v12 Practice Test - Questions Answers, Page 38

Question list

List of questions

Question 371

(0)

What would be the purpose of running "wget 192.168.0.15 -q -S" against a web server?

Question 372

(0)

The security administrator of PLUS needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and

Question 373

(0)

Which of the following provides a security professional with most information about the system's security posture?

Question 374

(0)

Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types o

Question 375

(0)

An attacker scans a host with the below command. Which three flags are set? # nmap -sX host.domain.com

Question 376

(0)

If executives are found liable for not properly protecting their company's assets and information systems, what type of law would apply in this situation?

Question 377

(0)

Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?

Question 378

(0)

What would you enter if you wanted to perform a stealth scan using Nmap?

Question 379

(0)

Which protocol is used for setting up secure channels between two devices, typically in VPNs?

Question 380

(0)

You have compromised a server on a network and successfully opened a shell. You aimed to identify all operating systems running on the network. However, as you attempt to fingerprint all machines in

Related questions

The "Gray-box testing" methodology enforces what kind of restriction?

A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?

Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. Identify the behavior of the adversary In the above scenario.

In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various search engines, social networking sites, and web spidering tools. In this process, she also uses an automated tool to gather a list of words from the target website to further perform a brute-force attack on the previously gathered email addresses. What is the tool used by Hailey for gathering a list of words from the target website?

You are the Network Admin, and you get a complaint that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL. What may be the problem?

Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?

Upon establishing his new startup, Tom hired a cloud service provider (CSP) but was dissatisfied with their service and wanted to move to another CSP. What part of the contract might prevent him from doing so?

Jason, an attacker, targeted an organization to perform an attack on its Internet-facing web server with the intention of gaining access to backend servers, which are protected by a firewall. In this process, he used a URL https://xyz.com/ feed.php?url:externaIsile.com/feed/to to obtain a remote feed and altered the URL input to the local host to view all the local resources on the target server. What is the type of attack Jason performed In the above scenario?

A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?

A penetration tester was assigned to scan a large network range to find live hosts. The network is known for using strict TCP filtering rules on its firewall, which may obstruct common host discovery techniques. The tester needs a method that can bypass these firewall restrictions and accurately identify live systems. What host discovery technique should the tester use?

Question 371

What would be the purpose of running "wget 192.168.0.15 -q -S" against a web server?

Performing content enumeration on the web server to discover hidden folders

Using wget to perform banner grabbing on the webserver

Flooding the web server with requests to perform a DoS attack

Downloading all the contents of the web page locally for further examination

Show Answer Comment (0)

The security administrator of PLUS needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic.

After he applied his ACL configuration in the router, nobody can access the ftp, and the permitted hosts cannot access the Internet. According to the next configuration, what is happening in the network? access-list 102 deny tcp any any access-list 104 permit udp host 10.0.0.3 any access-list 110 permit tcp host 10.0.0.2 eq www any access-list 108 permit tcp any eq ftp any

The ACL 104 needs to be first because is UDP

The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router

The ACL for FTP must be before the ACL 110

The ACL 110 needs to be changed to port 80

Show Answer Comment (0)

Question 373

Which of the following provides a security professional with most information about the system's security posture?

Phishing, spamming, sending trojans

Social engineering, company site browsing tailgating

Wardriving, warchalking, social engineering

Port scanning, banner grabbing service identification

Show Answer Comment (0)

Question 374

Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?

Data-driven firewall

Packet firewall

Web application firewall

Stateful firewall

Show Answer Comment (0)

Question 375

An attacker scans a host with the below command. Which three flags are set?

# nmap -sX host.domain.com

This is SYN scan. SYN flag is set.

This is Xmas scan. URG, PUSH and FIN are set.

This is ACK scan. ACK flag is set.

This is Xmas scan. SYN and ACK flags are set.

Show Answer Comment (0)

Question 376

If executives are found liable for not properly protecting their company's assets and information systems, what type of law would apply in this situation?

Criminal

International

Common

Civil

Show Answer Comment (0)

Question 377

Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?

Role Based Access Control (RBAC)

Discretionary Access Control (DAC)

Single sign-on

Windows authentication

Show Answer Comment (0)

Question 378

What would you enter if you wanted to perform a stealth scan using Nmap?

nmap -sM

nmap -sU

nmap -sS

nmap -sT

Show Answer Comment (0)

Question 379

Which protocol is used for setting up secure channels between two devices, typically in VPNs?

PEM

ppp

IPSEC

SET

Show Answer Comment (0)

Question 380

You have compromised a server on a network and successfully opened a shell. You aimed to identify all operating systems running on the network. However, as you attempt to fingerprint all machines in the network using the nmap syntax below, it is not going through.

invictus@victim_server.~$ nmap -T4 -O 10.10.0.0/24 TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxx. QUITTING!

What seems to be wrong?

The nmap syntax is wrong.

This is a common behavior for a corrupted nmap application.

The outgoing TCP/IP fingerprinting is blocked by the host firewall.

OS Scan requires root privileges.

Show Answer Comment (0)

Total 573 questions