312-50v13 Exam Questions Dumps, Selling ECCouncil Products [Q211-Q235]

NO.211 John, a professional hacker, targeted an organization that uses LDAP for accessing distributed directory services. He used an automated tool to anonymously query the IDAP service for sensitive information such as usernames. addresses, departmental details, and server names to launch further attacks on the target organization.
What is the tool employed by John to gather information from the IDAP service?

jxplorer

Zabasearch

EarthExplorer

Ike-scan

NO.212 A zone file consists of which of the following Resource Records (RRs)?

DNS, NS, AXFR, and MX records

DNS, NS, PTR, and MX records

SOA, NS, AXFR, and MX records

SOA, NS, A, and MX records

NO.213 You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any any -> 192.168.100.0/24 21 (msg: “”FTP on the network!””;)

A firewall IPTable

FTP Server rule

A Router IPTable

An Intrusion Detection System

NO.214 When you are testing a web application, it is very useful to employ a proxy tool to save every request and response. You can manually test every request and analyze the response to find vulnerabilities. You can test parameters and headers manually to get more precise results than if using web vulnerability scanners.
What proxy tool will help you find web vulnerabilities?

Maskgen

Dimitry

Burpsuite

Proxychains

NO.215 Morris, an attacker, wanted to check whether the target AP is in a locked state. He attempted using different utilities to identify WPS-enabled APs in the target wireless network. Ultimately, he succeeded with one special command-line utility.
Which of the following command-line utilities allowed Morris to discover the WPS-enabled APs?

wash

ntptrace

macof

net view

NO.216 Mary found a high vulnerability during a vulnerability scan and notified her server team. After analysis, they sent her proof that a fix to that issue had already been applied. The vulnerability that Marry found is called what?

False-negative

False-positive

Brute force attack

Backdoor

NO.217 John, a professional hacker, targeted CyberSol Inc., an MNC. He decided to discover the IoT devices connected in the target network that are using default credentials and are vulnerable to various hijacking attacks. For this purpose, he used an automated tool to scan the target network for specific types of IoT devices and detect whether they are using the default, factory-set credentials. What is the tool employed by John in the above scenario?

IoTSeeker

IoT Inspector

AT&T IoT Platform

Azure IoT Central

NO.218 As a security analyst for Sky Secure Inc., you are working with a client that uses a multi-cloud strategy, utilizing services from several cloud providers. The client wants to implement a system that will provide unified security management across all their cloud platforms. They need a solution that allows them to consistently enforce security policies, identify and respond to threats, and maintain visibility of all their cloud resources. Which of the following should you recommend as the best solution?

Use a hardware-based firewall to secure all cloud resources.

implement separate security management tools for each cloud platform.

Use a Cloud Access Security Broker (CASB).

Rely on the built-in security features of each cloud platform.

NO.219 In the process of footprinting a target website, an ethical hacker utilized various tools to gather critical information. The hacker encountered a target site where standard web spiders were ineffective due to a specific file in its root directory. However, they managed to uncover all the files and web pages on the target site, monitoring the resulting incoming and outgoing traffic while browsing the website manually. What technique did the hacker likely employ to achieve this?

Using Photon to retrieve archived URLs of the target website from archive.org

Using the Netcraft tool to gather website information

Examining HTML source code and cookies

User-directed spidering with tools like Burp Suite and WebScarab

NO.220 In this attack, a victim receives an e-mail claiming to be from PayPal stating that their account has been disabled and confirmation is required before activation. The attackers then scam to collect not one but two credit card numbers, ATM PIN, and other personal details. Ignorant users usually fall prey to this scam.
Which of the following statement is incorrect related to this attack?

Do not reply to email messages or popup ads asking for personal or financial information

Do not trust telephone numbers in e-mails or popup ads

Review credit card and bank account statements regularly

Antivirus, anti-spyware, and firewall software can very easily detect these types of attacks

Do not send credit card numbers, and personal or financial information via e-mail

NO.221 You work for Acme Corporation as Sales Manager. The company has tight network security restrictions. You are trying to steal data from the company’s Sales database (Sales.xls) and transfer them to your home computer. Your company filters and monitors traffic that leaves from the internal network to the Internet.
How will you achieve this without raising suspicion?

Encrypt the Sales.xls using PGP and e-mail it to your personal gmail account

Package the Sales.xls using Trojan wrappers and telnet them back your home computer

You can conceal the Sales.xls database in another file like photo.jpg or other files and send it out in an innocent looking email or file transfer using Steganography techniques

Change the extension of Sales.xls to sales.txt and upload them as attachment to your hotmail account

NO.222 Which of the following are well known password-cracking programs?

L0phtcrack

NetCat

Jack the Ripper

Netbus

John the Ripper

NO.223 Todd has been asked by the security officer to purchase a counter-based authentication system. Which of the following best describes this type of system?

A biometric system that bases authentication decisions on behavioral attributes.

A biometric system that bases authentication decisions on physical attributes.

An authentication system that creates one-time passwords that are encrypted with secret keys.

An authentication system that uses passphrases that are converted into virtual passwords.

NO.224 A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed.
Which security policy must the security analyst check to see if dial-out modems are allowed?

Firewall-management policy

Acceptable-use policy

Permissive policy

Remote-access policy

NO.225 A DDOS attack is performed at layer 7 to take down web infrastructure. Partial HTTP requests are sent to the web infrastructure or applications. Upon receiving a partial request, the target servers opens multiple connections and keeps waiting for the requests to complete.
Which attack is being described here?

Desynchronization

Slowloris attack

Session splicing

Phlashing

Developed by Robert “RSnake” Hansen, Slowloris is DDoS attack software that permits one computer to require down an internet server. Due the straightforward yet elegant nature of this attack, it requires minimal bandwidth to implement and affects the target server’s web server only, with almost no side effects on other services and ports.Slowloris has proven highly-effective against many popular sorts of web server software, including Apache 1.x and 2.x.Over the years, Slowloris has been credited with variety of high-profile server takedowns. Notably, it had been used extensively by Iranian ‘hackivists’ following the 2009 Iranian presidential election to attack Iranian government internet sites .Slowloris works by opening multiple connections to the targeted web server and keeping them open as long as possible. It does this by continuously sending partial HTTP requests, none of which are ever completed. The attacked servers open more and connections open, expecting each of the attack requests to be completed.Periodically, the Slowloris sends subsequent HTTP headers for every request, but never actually completes the request. Ultimately, the targeted server’s maximum concurrent connection pool is filled, and extra (legitimate) connection attempts are denied.
By sending partial, as against malformed, packets, Slowloris can easily elapse traditional Intrusion Detection systems.Named after a kind of slow-moving Asian primate, Slowloris really does win the race by moving slowly and steadily. A Slowloris attack must await sockets to be released by legitimate requests before consuming them one by one.For a high-volume internet site , this will take a while . the method are often further slowed if legitimate sessions are reinitiated. But within the end, if the attack is unmitigated, Slowloris-like the tortoise-wins the race.If undetected or unmitigated, Slowloris attacks also can last for long periods of your time . When attacked sockets outing , Slowloris simply reinitiates the connections, continuing to reach the online server until mitigated.Designed for stealth also as efficacy, Slowloris are often modified to send different host headers within the event that a virtual host is targeted, and logs are stored separately for every virtual host.More importantly, within the course of an attack, Slowloris are often set to suppress log file creation. this suggests the attack can catch unmonitored servers off-guard, with none red flags appearing in log file entries.Methods of mitigationImperva’s security services are enabled by reverse proxy technology, used for inspection of all incoming requests on their thanks to the clients’ servers.Imperva’ s secured proxy won’t forward any partial connection requests-rendering all Slowloris DDoS attack attempts completely and utterly useless.

NO.226 which of the following information security controls creates an appealing isolated environment for hackers to prevent them from compromising critical targets while simultaneously gathering information about the hacker?

intrusion detection system

Honeypot

BotnetD Firewall

A honeypot may be a trap that an IT pro lays for a malicious hacker, hoping that they will interact with it during a way that gives useful intelligence. It’s one among the oldest security measures in IT, but beware:
luring hackers onto your network, even on an isolated system, are often a dangerous game.
honeypot may be a good starting place: “A honeypot may be a computer or computing system intended to mimic likely targets of cyberattacks.” Often a honeypot are going to be deliberately configured with known vulnerabilities in situation to form a more tempting or obvious target for attackers. A honeypot won’t contain production data or participate in legitimate traffic on your network – that’s how you’ll tell anything happening within it’s a results of an attack. If someone’s stopping by, they’re up to no good.
That definition covers a various array of systems, from bare-bones virtual machines that only offer a couple of vulnerable systems to ornately constructed fake networks spanning multiple servers. and therefore the goals of these who build honeypots can vary widely also , starting from defense thorough to academic research.
additionally , there’s now an entire marketing category of deception technology that, while not meeting the strict definition of a honeypot, is certainly within the same family. But we’ll get thereto during a moment.
honeypots aim to permit close analysis of how hackers do their dirty work. The team controlling the honeypot can watch the techniques hackers use to infiltrate systems, escalate privileges, and otherwise run amok through target networks. These sorts of honeypots are found out by security companies, academics, and government agencies looking to look at the threat landscape. Their creators could also be curious about learning what kind of attacks are out there, getting details on how specific sorts of attacks work, or maybe trying to lure a specific hackers within the hopes of tracing the attack back to its source. These systems are often inbuilt fully isolated lab environments, which ensures that any breaches don’t end in non-honeypot machines falling prey to attacks.
Production honeypots, on the opposite hand, are usually deployed in proximity to some organization’s production infrastructure, though measures are taken to isolate it the maximum amount as possible. These honeypots often serve both as bait to distract hackers who could also be trying to interrupt into that organization’s network, keeping them faraway from valuable data or services; they will also function a canary within the coalpit , indicating that attacks are underway and are a minimum of partially succeeding.

NO.227 What hacking attack is challenge/response authentication used to prevent?

Replay attacks

Scanning attacks

Session hijacking attacks

Password cracking attacks

NO.228 Which of the following scanning method splits the TCP header into several packets and makes it difficult for packet filters to detect the purpose of the packet?

ACK flag probe scanning

ICMP Echo scanning

SYN/FIN scanning using IP fragments

IPID scanning

NO.229 Daniel Is a professional hacker who Is attempting to perform an SQL injection attack on a target website.
www.movlescope.com. During this process, he encountered an IDS that detects SQL Injection attempts based on predefined signatures. To evade any comparison statement, he attempted placing characters such as ”or
‘1’=’1″ In any bask injection statement such as “or 1=1.” Identify the evasion technique used by Daniel in the above scenario.

Null byte

IP fragmentation

Char encoding

Variation

One may append the comment “-” operator along with the String for the username and whole avoid executing the password segment of the SQL query. Everything when the – operator would be considered as comment and not dead.
To launch such an attack, the value passed for name could be ‘OR ‘1’=’1′ ; – Statement = “SELECT * FROM ‘CustomerDB’ WHERE ‘name’ = ‘ “+ userName + ” ‘ AND ‘password’ = ‘
” + passwd + ” ‘ ; “
Statement = “SELECT * FROM ‘CustomerDB’ WHERE ‘name’ = ‘ ‘ OR ‘1’=’1′;- + ” ‘ AND ‘password’ =
‘ ” + passwd + ” ‘ ; “
All the records from the customer database would be listed.
Yet, another variation of the SQL Injection Attack can be conducted in dbms systems that allow multiple SQL injection statements. Here, we will also create use of the vulnerability in sure dbms whereby a user provided field isn’t strongly used in or isn’t checked for sort constraints.
This could take place once a numeric field is to be employed in a SQL statement; but, the programmer makes no checks to validate that the user supplied input is numeric.
Variation is an evasion technique whereby the attacker can easily evade any comparison statement. The attacker does this by placing characters such as “‘ or ‘1’=’1′” in any basic injection statement such as “or 1=1” or with other accepted SQL comments.
Evasion Technique: Variation Variation is an evasion technique whereby the attacker can easily evade any comparison statement. The attacker does this by placing characters such as “‘ or ‘1’=’1′” in any basic injection statement such as “or 1=1” or with other accepted SQL comments. The SQL interprets this as a comparison between two strings or characters instead of two numeric values. As the evaluation of two strings yields a true statement, similarly, the evaluation of two numeric values yields a true statement, thus rendering the evaluation of the complete query unaffected. It is also possible to write many other signatures; thus, there are infinite possibilities of variation as well. The main aim of the attacker is to have a WHERE statement that is always evaluated as “true” so that any mathematical or string comparison can be used, where the SQL can perform the same.

NO.230 E-mail scams and mail fraud are regulated by which of the following?

18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers

18 U.S.C. par. 1029 Fraud and Related activity in connection with Access Devices

18 U.S.C. par. 1362 Communication Lines, Stations, or Systems

18 U.S.C. par. 2510 Wire and Electronic Communications Interception and Interception of Oral Communication

NO.231 Which of the following provides a security professional with most information about the system’s security posture?

Phishing, spamming, sending trojans

Social engineering, company site browsing tailgating

Wardriving, warchalking, social engineering

Port scanning, banner grabbing service identification

NO.232 What is the purpose of a demilitarized zone on a network?

To scan all traffic coming through the DMZ to the internal network

To only provide direct access to the nodes within the DMZ and protect the network behind it

To provide a place to put the honeypot

To contain the network devices you wish to protect

NO.233 Geena, a cloud architect, uses a master component in the Kubernetes cluster architecture that scans newly generated pods and allocates a node to them. This component can also assign nodes based on factors such as the overall resource requirement, data locality, software/hardware/policy restrictions, and internal workload interventions.
Which of the following master components is explained in the above scenario?

Kube-controller-manager

Kube-scheduler

Kube-apiserver

Etcd cluster

NO.234 You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c

What is the hexadecimal value of NOP instruction?

0x60

0x80

0x70

0x90

NO.235 One of your team members has asked you to analyze the following SOA record.
What is the TTL?
Rutgers.edu. SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.)

200303028

3600

604800

2400

60

4800