312-50v12 Free Update With 100% Exam Passing Guarantee [2023]

[Oct-2023] Verified ECCouncil Exam Dumps with 312-50v12 Exam Study Guide

The CEH exam is aimed at IT professionals with a background in networking, system administration, or computer security. Certified Ethical Hacker Exam certification demonstrates the knowledge and skills required to conduct ethical hacking activities, such as penetration testing, vulnerability assessment, and risk management.

 

NEW QUESTION # 282
From the following table, identify the wrong answer in terms of Range (ft).
Standard Range (ft)
802.11a 150-150
802.11b 150-150
802.11g 150-150
802.16 (WiMax) 30 miles

• A. 802.16 (WiMax)
• B. 802.11g
• C. 802.11b
• D. 802.11a

Answer: A

NEW QUESTION # 283
Nedved is an IT Security Manager of a bank in his country. One day. he found out that there is a security breach to his company's email server based on analysis of a suspicious connection from the email server to an unknown IP Address.
What is the first thing that Nedved needs to do before contacting the incident response team?

• A. Block the connection to the suspicious IP Address from the firewall
• B. Migrate the connection to the backup email server
• C. Leave it as it Is and contact the incident response te3m right away
• D. Disconnect the email server from the network

Answer: D

NEW QUESTION # 284
How does a denial-of-service attack work?

• A. A hacker attempts to imitate a legitimate user by confusing a computer or even another person
• B. A hacker prevents a legitimate user (or group of users) from accessing a service
• C. A hacker uses every character, word, or letter he or she can think of to defeat authentication
• D. A hacker tries to decipher a password by using a system, which subsequently crashes the network

Answer: B

NEW QUESTION # 285
Which of the following statements about a zone transfer is correct? (Choose three.)

• A. Zone transfers cannot occur on the Internet
• B. A zone transfer can be prevented by blocking all inbound TCP port 53 connections
• C. A zone transfer is accomplished with the nslookup service
• D. A zone transfer passes all zone information that a nslookup server maintains
• E. A zone transfer is accomplished with the DNS
• F. A zone transfer passes all zone information that a DNS server maintains

Answer: B,E,F

NEW QUESTION # 286
What does a firewall check to prevent particular ports and applications from getting packets into an organization?

• A. Presentation layer headers and the session layer port numbers
• B. Transport layer port numbers and application layer headers
• C. Application layer port numbers and the transport layer headers
• D. Network layer headers and the session layer port numbers

Answer: B

NEW QUESTION # 287
Which utility will tell you in real time which ports are listening or in another state?

• A. TCPView
• B. Nmap
• C. Netstat
• D. Loki

Answer: A

NEW QUESTION # 288
What is the algorithm used by LM for Windows2000 SAM?

• A. DES
• B. MD4
• C. SHA
• D. SSL

Answer: A

NEW QUESTION # 289
Attacker Rony installed a rogue access point within an organization's perimeter and attempted to intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by johnson in the above scenario?

• A. Host-based assessment
• B. Wireless network assessment
• C. Distributed assessment
• D. Application assessment

Answer: B

Explanation:
Wireless network assessment determines the vulnerabilities in an organization's wireless networks. In the past, wireless networks used weak and defective data encryption mechanisms. Now, wireless network standards have evolved, but many networks still use weak and outdated security mechanisms and are open to attack. Wireless network assessments try to attack wireless authentication mechanisms and gain unauthorized access. This type of assessment tests wireless networks and identifies rogue networks that may exist within an organization's perimeter. These assessments audit client-specified sites with a wireless network. They sniff wireless network traffic and try to crack encryption keys. Auditors test other network access if they gain access to the wireless network.

NEW QUESTION # 290
An unauthorized individual enters a building following an employee through the employee entrance after the lunch rush. What type of breach has the individual just performed?

• A. Announced
• B. Piggybacking
• C. Reverse Social Engineering
• D. Tailgating

Answer: D

Explanation:
* Identifying operating systems, services, protocols and devices,
* Collecting unencrypted information about usernames and passwords,
* Capturing network traffic for further analysis
are passive network sniffing methods since with the help of them we only receive information and do not make any changes to the target network. When modifying and replaying the captured network traffic, we are already starting to make changes and actively interact with it.

NEW QUESTION # 291
When a security analyst prepares for the formal security assessment - what of the following should be done in order to determine inconsistencies in the secure assets database and verify that system is compliant to the minimum security baseline?

• A. Reviewing the firewalls configuration
• B. Data items and vulnerability scanning
• C. Source code review
• D. Interviewing employees and network engineers

Answer: B

NEW QUESTION # 292
What is the most common method to exploit the "Bash Bug" or "Shellshock" vulnerability?

• A. Manipulate format strings in text fields
• B. SSH
• C. SYN Flood
• D. Through Web servers utilizing CGI (Common Gateway Interface) to send a malformed environment variable to a vulnerable Web server

Answer: D

NEW QUESTION # 293
Gregory, a professional penetration tester working at Sys Security Ltd., is tasked with performing a security test of web applications used in the company. For this purpose, Gregory uses a tool to test for any security loopholes by hijacking a session between a client and server. This tool has a feature of intercepting proxy that can be used to inspect and modify the traffic between the browser and target application. This tool can also perform customized attacks and can be used to test the randomness of session tokens. Which of the following tools is used by Gregory in the above scenario?

• A. Burp Suite
• B. CxSAST
• C. Wireshark
• D. Nmap

Answer: A

NEW QUESTION # 294
What is the proper response for a NULL scan if the port is open?

• A. PSH
• B. SYN
• C. No response
• D. ACK
• E. FIN
• F. RST

Answer: C

NEW QUESTION # 295
Insecure direct object reference is a type of vulnerability where the application does not verify if the user is authorized to access the internal object via its name or key. Suppose a malicious user Rob tries to get access to the account of a benign user Ned.
Which of the following requests best illustrates an attempt to exploit an insecure direct object reference vulnerability?

• A. "GET /restricted/accounts/?name=Ned HTTP/1.1 Host westbank.com"
• B. "GET /restricted/ HTTP/1.1 Host: westbank.com
• C. "GET /restricted/\r\n\%00account%00Ned%00access HTTP/1.1 Host: westbank.com"
• D. "GET /restricted/goldtransfer?to=Rob&from=1 or 1=1' HTTP/1.1Host: westbank.com"

Answer: A

Explanation:
This question shows a classic example of an IDOR vulnerability. Rob substitutes Ned's name in the "name" parameter and if the developer has not fixed this vulnerability, then Rob will gain access to Ned's account. Below you will find more detailed information about IDOR vulnerability.
Insecure direct object references (IDOR) are a cybersecurity issue that occurs when a web application developer uses an identifier for direct access to an internal implementation object but provides no additional access control and/or authorization checks. For example, an IDOR vulnerability would happen if the URL of a transaction could be changed through client-side user input to show unauthorized data of another transaction.
Most web applications use simple IDs to reference objects. For example, a user in a database will usually be referred to via the user ID. The same user ID is the primary key to the database column containing user information and is generated automatically. The database key generation algorithm is very simple: it usually uses the next available integer. The same database ID generation mechanisms are used for all other types of database records.
The approach described above is legitimate but not recommended because it could enable the attacker to enumerate all users. If it's necessary to maintain this approach, the developer must at least make absolutely sure that more than just a reference is needed to access resources. For example, let's say that the web application displays transaction details using the following URL:
https://www.example.com/transaction.php?id=74656
A malicious hacker could try to substitute the id parameter value 74656 with other similar values, for example:
https://www.example.com/transaction.php?id=74657
The 74657 transaction could be a valid transaction belonging to another user. The malicious hacker should not be authorized to see it. However, if the developer made an error, the attacker would see this transaction and hence we would have an insecure direct object reference vulnerability.

NEW QUESTION # 296
Your company was hired by a small healthcare provider to perform a technical assessment on the network.
What is the best approach for discovering vulnerabilities on a Windows-based computer?

• A. Use a scan tool like Nessus
• B. Check MITRE.org for the latest list of CVE findings
• C. Create a disk image of a clean Windows installation
• D. Use the built-in Windows Update tool

Answer: A

NEW QUESTION # 297
Mr. Omkar performed tool-based vulnerability assessment and found two vulnerabilities. During analysis, he found that these issues are not true vulnerabilities.
What will you call these issues?

• A. True negatives
• B. False positives
• C. True positives
• D. False negatives

Answer: B

Explanation:
False Positives occur when a scanner, Web Application Firewall (WAF), or Intrusion Prevention System (IPS) flags a security vulnerability that you do not have. A false negative is the opposite of a false positive, telling you that you don't have a vulnerability when, in fact, you do.
A false positive is like a false alarm; your house alarm goes off, but there is no burglar. In web application security, a false positive is when a web application security scanner indicates that there is a vulnerability on your website, such as SQL Injection, when, in reality, there is not. Web security experts and penetration testers use automated web application security scanners to ease the penetration testing process. These tools help them ensure that all web application attack surfaces are correctly tested in a reasonable amount of time. But many false positives tend to break down this process. If the first 20 variants are false, the penetration tester assumes that all the others are false positives and ignore the rest. By doing so, there is a good chance that real web application vulnerabilities will be left undetected.
When checking for false positives, you want to ensure that they are indeed false. By nature, we humans tend to start ignoring false positives rather quickly. For example, suppose a web application security scanner detects 100 SQL Injection vulnerabilities. If the first 20 variants are false positives, the penetration tester assumes that all the others are false positives and ignore all the rest. By doing so, there are chances that real web application vulnerabilities are left undetected. This is why it is crucial to check every vulnerability and deal with each false positive separately to ensure false positives.

NEW QUESTION # 298
Harry. a professional hacker, targets the IT infrastructure of an organization. After preparing for the attack, he attempts to enter the target network using techniques such as sending spear-phishing emails and exploiting vulnerabilities on publicly available servers. Using these techniques, he successfully deployed malware on the target system to establish an outbound connection. What is the APT lifecycle phase that Harry is currently executing?

• A. Preparation
• B. initial intrusion
• C. Persistence
• D. Cleanup

Answer: B

Explanation:
After the attacker completes preparations, subsequent step is an effort to realize an edge within the target's environment. a particularly common entry tactic is that the use of spearphishing emails containing an internet link or attachment. Email links usually cause sites where the target's browser and related software are subjected to varied exploit techniques or where the APT actors plan to social engineer information from the victim which will be used later. If a successful exploit takes place, it installs an initial malware payload on the victim's computer. Figure 2 illustrates an example of a spearphishing email that contains an attachment. Attachments are usually executable malware, a zipper or other archive containing malware, or a malicious Office or Adobe PDF (Portable Document Format) document that exploits vulnerabilities within the victim's applications to ultimately execute malware on the victim's computer. Once the user has opened a malicious file using vulnerable software, malware is executing on the target system. These phishing emails are often very convincing and difficult to differentiate from legitimate email messages. Tactics to extend their believability include modifying legitimate documents from or associated with the organization. Documents are sometimes stolen from the organization or their collaborators during previous exploitation operations. Actors modify the documents by adding exploits and malicious code then send them to the victims. Phishing emails are commonly sent through previously compromised email servers, email accounts at organizations associated with the target or public email services. Emails also can be sent through mail relays with modified email headers to form the messages appear to possess originated from legitimate sources. Exploitation of vulnerabilities on public-facing servers is another favorite technique of some APT groups. Though this will be accomplished using exploits for known vulnerabilities, 0-days are often developed or purchased to be used in intrusions as required .

NEW QUESTION # 299
Which DNS resource record can indicate how long any "DNS poisoning" could last?

• A. NS
• B. MX
• C. SOA
• D. TIMEOUT

Answer: C

NEW QUESTION # 300
Joel, a professional hacker, targeted a company and identified the types of websites frequently visited by its employees. Using this information, he searched for possible loopholes in these websites and injected a malicious script that can redirect users from the web page and download malware onto a victim's machine. Joel waits for the victim to access the infected web application so as to compromise the victim's machine. Which of the following techniques is used by Joel in the above scenario?

• A. MarioNet attack
• B. Watering hole attack
• C. Clickjacking attack
• D. DNS rebinding attack

Answer: B

Explanation:
Web Application Threats - Watering Hole Attack In a watering hole attack, the attacker identifies the kinds of websites a target company/individual frequently surfs and tests those particular websites to identify any possible vulnerabilities. Attacker injects malicious script/code into the web application that can redirect the webpage and download malware onto the victim machine. (P.1797/1781)

NEW QUESTION # 301
Which of the following are well known password-cracking programs?

• A. NetCat
• B. Jack the Ripper
• C. John the Ripper
• D. L0phtcrack
• E. Netbus

Answer: C,D

NEW QUESTION # 302
A friend of yours tells you that he downloaded and executed a file that was sent to him by a coworker. Since the file did nothing when executed, he asks you for help because he suspects that he may have installed a trojan on his computer.
what tests would you perform to determine whether his computer Is Infected?

• A. You do not check; rather, you immediately restore a previous snapshot of the operating system.
• B. Use netstat and check for outgoing connections to strange IP addresses or domains.
• C. Use ExifTool and check for malicious content.
• D. Upload the file to VirusTotal.

Answer: B

NEW QUESTION # 303
Which of the following represents the initial two commands that an IRC client sends to join an IRC network?

• A. LOGIN, NICK
• B. USER, NICK
• C. USER, PASS
• D. LOGIN, USER

Answer: B

NEW QUESTION # 304
......

ECCouncil 312-50v12 certification exam is a comprehensive test that covers a wide range of topics related to ethical hacking. 312-50v12 exam covers topics such as network security, system security, web application security, cryptography, and many others. 312-50v12 exam is designed to test the skills and knowledge of professionals in these areas and to ensure that they are equipped with the necessary skills to become certified ethical hackers.

 

Authentic Best resources for 312-50v12 Online Practice Exam: https://examboost.vce4dumps.com/312-50v12-latest-dumps.html