Home / ECCouncil / 312-50v12

ECCouncil 312-50v12 Practice Test - Questions Answers, Page 6

Question list

List of questions

Question 51

(0)

The "Gray-box testing" methodology enforces what kind of restriction?

Question 52

(0)

When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's Computer to update the router configuration. What ty

Question 53

(0)

A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to dem

Question 54

(0)

When you are getting information about a web server, it is very important to know the HTTPMethods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two criticalmethods (PUT

Question 55

(0)

Todd has been asked by the security officer to purchase a counter-based authentication system. Which of the following best describes this type of system?

Question 56

(0)

Which of the following is a low-tech way of gaining unauthorized access to systems?

Question 57

(0)

Which system consists of a publicly available set of databases that contain domain name registration contact information?

Question 58

(0)

Why is a penetration test considered to be more thorough than vulnerability scan?

Question 59

(0)

Bob received this text message on his mobile phone: "Hello, this is Scott Smelby from the Yahoo Bank. Kindly contact me for a vital transaction on: [email protected]". Which statement below is t

Question 60

(0)

env x='(){ :;};echo exploit' bash –c 'cat/etc/passwd' What is the Shellshock bash vulnerability attempting to do on a vulnerable Linux host?

Related questions

A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?

The "Gray-box testing" methodology enforces what kind of restriction?

You are the Network Admin, and you get a complaint that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL. What may be the problem?

Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?

Upon establishing his new startup, Tom hired a cloud service provider (CSP) but was dissatisfied with their service and wanted to move to another CSP. What part of the contract might prevent him from doing so?

In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various search engines, social networking sites, and web spidering tools. In this process, she also uses an automated tool to gather a list of words from the target website to further perform a brute-force attack on the previously gathered email addresses. What is the tool used by Hailey for gathering a list of words from the target website?

Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. Identify the behavior of the adversary In the above scenario.

A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?

A penetration tester was assigned to scan a large network range to find live hosts. The network is known for using strict TCP filtering rules on its firewall, which may obstruct common host discovery techniques. The tester needs a method that can bypass these firewall restrictions and accurately identify live systems. What host discovery technique should the tester use?

Attacker Rony Installed a rogue access point within an organization's perimeter and attempted to Intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by Johnson in the above scenario?

Question 51

The "Gray-box testing" methodology enforces what kind of restriction?

Only the external operation of a system is accessible to the tester.

The internal operation of a system in only partly accessible to the tester.

Only the internal operation of a system is known to the tester.

The internal operation of a system is completely known to the tester.

Show Answer Comment (0)

Question 52

When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's Computer to update the router configuration.

What type of an alert is this?

False negative

True negative

True positive

False positive

Show Answer Comment (0)

A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the Prometric Online Testing – Reports https://ibt1.prometric.com/users/custom/report_queue/rq_str... corporate network. What tool should the analyst use to perform a Blackjacking attack?

Paros Proxy

BBProxy

Blooover

BBCrack

Show Answer Comment (0)

Question 54

When you are getting information about a web server, it is very important to know the HTTPMethods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two criticalmethods (PUT and DELETE). PUT can upload a file to the server and DELETE can delete a file from theserver. You can detect all these methods (GET, POST, HEAD, DELETE, PUT, TRACE) using NMAP scriptengine. What Nmap script will help you with this task?

http-methods

http enum

http-headers

http-git

Show Answer Comment (0)

Question 55

Todd has been asked by the security officer to purchase a counter-based authentication system.

Which of the following best describes this type of system?

A biometric system that bases authentication decisions on behavioral attributes.

A biometric system that bases authentication decisions on physical attributes.

An authentication system that creates one-time passwords that are encrypted with secret keys.

An authentication system that uses passphrases that are converted into virtual passwords.

Show Answer Comment (0)

Question 56

Which of the following is a low-tech way of gaining unauthorized access to systems?

Social Engineering

Eavesdropping

Scanning

Sniffing

Show Answer Comment (0)

Question 57

Which system consists of a publicly available set of databases that contain domain name registration contact information?

WHOIS

CAPTCHA

IANA

IETF

Show Answer Comment (0)

Question 58

Why is a penetration test considered to be more thorough than vulnerability scan?

Vulnerability scans only do host discovery and port scanning by default.

A penetration test actively exploits vulnerabilities in the targeted infrastructure, while a vulnerability scan does not typically involve active exploitation.

It is not – a penetration test is often performed by an automated tool, while a vulnerability scan requires active engagement.

The tools used by penetration testers tend to have much more comprehensive vulnerability databases.

Show Answer Comment (0)

Question 59

Bob received this text message on his mobile phone: "Hello, this is Scott Smelby from the Yahoo Bank. Kindly contact me for a vital transaction on: [email protected]". Which statement below is true?

This is a scam as everybody can get a @yahoo address, not the Yahoo customer service employees.

This is a scam because Bob does not know Scott.

Bob should write to [email protected] to verify the identity of Scott.

This is probably a legitimate message as it comes from a respectable organization.

Show Answer Comment (0)