Certified Ethical Hacker 312-50v10 Real Exam Questions and Answers FREE Updated on Sep 11, 2021
312-50v10 Ultimate Study Guide - RealExamFree
NEW QUESTION 71
The Open Web Application Security Project (OWASP) is the worldwide not-for-profit charitable
organization focused on improving the security of software. What item is the primary concern on OWASP's
Top Ten Project Most Critical Web Application Security Risks?
- A. Injection
- B. Cross Site Request Forgery
- C. Cross Site Scripting
- D. Path disclosure
Answer: A
NEW QUESTION 72
In order to show improvement of security over time, what must be developed?
- A. Reports
- B. Taxonomy of vulnerabilities
- C. Testing tools
- D. Metrics
Answer: D
Explanation:
Today, management demands metrics to get a clearer view of security.
Metrics that measure participation, effectiveness, and window of exposure, however, offer information the organization can use to make plans and improve programs.
References: http://www.infoworld.com/article/2974642/security/4-security-metrics-that- matter.html
NEW QUESTION 73
Bob, your senior colleague, has sent you a mail regarding aa deal with one of the clients. You are
requested to accept the offer and you oblige.
After 2 days, Bob denies that he had ever sent a mail.
What do you want to "know" to prove yourself that it was Bob who had send a mail?
- A. Integrity
- B. Authentication
- C. Non-Repudiation
- D. Confidentiality
Answer: C
NEW QUESTION 74
A hacker has successfully infected an internet-facing server which he will then use to send junk mail, take part in coordinated attacks, or host junk email content.
Which sort of trojan infects this server?
- A. Ransomware Trojans
- B. Banking Trojans
- C. Botnet Trojan
- D. Turtle Trojans
Answer: C
Explanation:
In computer science, a zombie is a computer connected to the Internet that has been compromised by a hacker, computer virus or trojan horse and can be used to perform malicious tasks of one sort or another under remote direction. Botnets of zombie computers are often used to spread e-mail spam and launch denial-of-service attacks. Most owners of zombie computers are unaware that their system is being used in this way. Because the owner tends to be unaware, these computers are metaphorically compared to zombies. A coordinated DDoS attack by multiple botnet machines also resembles a zombie horde attack.
NEW QUESTION 75
You just set up a security system in your network. In what kind of system would you find the following
string of characters used as a rule within its configuration? alert tcp any any ->192.168.100.0/24 21
(msg:""FTP on the network!"";)
- A. FTP Server rule
- B. A firewall IPTable
- C. An Intrusion Detection System
- D. A Router IPTable
Answer: C
NEW QUESTION 76
Low humidity in a data center can cause which of the following problems?
- A. Heat
- B. Static electricity
- C. Airborne contamination
- D. Corrosion
Answer: B
NEW QUESTION 77
In which of the following cryptography attack methods, the attacker makes a series of interactive queries, choosing subsequent plaintexts based on the information from the previous encryptions?
- A. Chosen-plaintext attack
- B. Known-plaintext attack
- C. Ciphertext-only attack
- D. Adaptive chosen-plaintext attack
Answer: A
NEW QUESTION 78
Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in
and out the target network based on pre-defined set of rules.
Which of the following types of firewalls can protect against SQL injection attacks?
- A. Data-driven firewall
- B. Packet firewall
- C. Stateful firewall
- D. Web application firewall
Answer: D
NEW QUESTION 79
What is the main advantage that a network-based IDS/IPS system has over a host-based solution?
- A. They are easier to install and configure.
- B. They will not interfere with user interfaces.
- C. They are placed at the boundary, allowing them to inspect all traffic.
- D. They do not use host system resources.
Answer: D
NEW QUESTION 80
What did the following commands determine?
- A. These commands demonstrate that the guest account has been disabled
- B. Issued alone, these commands prove nothing
- C. That the Joe account has a SID of 500
- D. These commands demonstrate that the guest account has NOT been disabled
- E. That the true administrator is Joe
Answer: E
NEW QUESTION 81
Cryptography is the practice and study of techniques for secure communication in the presence of third parties (called adversaries). More generally, it is about constructing and analyzing protocols that overcome the influence of adversaries and that are related to various aspects in information security such as data confidentially, data integrity, authentication, and non-repudiation. Modern cryptography intersects the disciplines of mathematics, computer science, and electrical engineering. Applications of cryptography include ATM cards, computer passwords, and electronic commerce.
Basic example to understand how cryptography works is given below:
Which of the following choices true about cryptography?
- A. Symmetric-key algorithms are a class of algorithms for cryptography that use the different cryptographic keys for both encryption of plaintext and decryption of ciphertext.
- B. Algorithm is not the secret; key is the secret.
- C. Secure Sockets Layer (SSL) use the asymmetric encryption both (public/private key pair) to deliver the shared session key and to achieve a communication way.
- D. Public-key cryptography, also known as asymmetric cryptography, public key is for decrypt, private key is for encrypt.
Answer: C
NEW QUESTION 82
How does the Address Resolution Protocol (ARP) work?
- A. It sends a request packet to all the network elements, asking for the MAC address from a specific IP.
- B. It sends a request packet to all the network elements, asking for the domain name from a specific IP.
- C. It sends a reply packet for a specific IP, asking for the MAC address.
- D. It sends a reply packet to all the network elements, asking for the MAC address from a specific IP.
Answer: A
Explanation:
When an incoming packet destined for a host machine on a particular local area network arrives at a gateway, the gateway asks the ARP program to find a physical host or MAC address that matches the IP address. The ARP program looks in the ARP cache and, if it finds the address, provides it so that the packet can be converted to the right packet length and format and sent to the machine. If no entry is found for the IP address, ARP broadcasts a request packet in a special format to all the machines on the LAN to see if one machine knows that it has that IP address associated with it. A machine that recognizes the IP address as its own returns a reply so indicating. ARP updates the ARP cache for future reference and then sends the packet to the MAC address that replied.
References: http://searchnetworking.techtarget.com/definition/Address-Resolution- Protocol-ARP
NEW QUESTION 83
Bob, a network administrator at BigUniversity, realized that some students are connecting their notebooks in the wired network to have Internet access. In the university campus, there are many Ethernet ports available for professors and authorized visitors but not for students.
He identified this when the IDS alerted for malware activities in the network.
What should Bob do to avoid this problem?
- A. Separate students in a different VLAN
- B. Ask students to use the wireless network
- C. Disable unused ports in the switches
- D. Use the 802.1x protocol
Answer: D
NEW QUESTION 84
What tool can crack Windows SMB passwords simply by listening to network traffic?
- A. This is not possible
- B. Netbus
- C. L0phtcrack
- D. NTFSDOS
Answer: C
NEW QUESTION 85
An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS
server and NTP server because of the importance of their job. The attacker gain access to the DNS server
and redirect the direction www.google.com to his own IP address. Now when the employees of the office
wants to go to Google they are being redirected to the attacker machine. What is the name of this kind of
attack?
- A. MAC Flooding
- B. ARP Polsoning
- C. DNS spoofing
- D. Smurf Attack
Answer: C
NEW QUESTION 86
......
Ultimate Guide to Prepare 312-50v10 Certification Exam for Certified Ethical Hacker: https://www.realexamfree.com/312-50v10-real-exam-dumps.html
Use Real 312-50v10 Dumps - EC-COUNCIL Correct Answers: https://drive.google.com/open?id=1bU_Nn83sVkSIQKeD4D1MygUtZrJXjUqV
