Eccouncil 312-50v12 Exam Dumps

Certified Ethical Hacker Exam (CEHv12)

Eccouncil 312-50v12 Sample Questions

Question # 1

Mike, a security engineer, was recently hired by BigFox Ltd. The company recently experienced disastrous DoS attacks. The management had instructed Mike to build defensive strategies for the company's IT infrastructure to thwart DoS/DDoS attacks. Mike deployed some countermeasures to handle jamming and scrambling attacks. What is the countermeasure Mike applied to defend against jamming and scrambling attacks?

A. Allow the usage of functions such as gets and strcpy 
B. Allow the transmission of all types of addressed packets at the ISP level 
C. Implement cognitive radios in the physical layer 
D. A Disable TCP SYN cookie protection 

Show Answer

Question # 2

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 no response TCP port 22 no response TCP port 23 Time-to-live exceeded

A. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server 
B. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error 
C. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall 
D. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host 

Show Answer

Question # 3

Which of the following statements is TRUE?

A. Packet Sniffers operate on the Layer 1 of the OSI model. 
B. Packet Sniffers operate on Layer 2 of the OSI model.
 C. Packet Sniffers operate on both Layer 2 & Layer 3 of the OSI model. 
D. Packet Sniffers operate on Layer 3 of the OSI model. 

Show Answer

Question # 4

An organization has automated the operation of critical infrastructure from a remote location. For this purpose, all the industrial control systems are connected to the Internet. To empower the manufacturing process, ensure the reliability of industrial networks, and reduce downtime and service disruption, the organization deckled to install an OT security tool that further protects against security incidents such as cyber espionage, zero-day attacks, and malware. Which of the following tools must the organization employ to protect its critical infrastructure?

A. Robotium 
B. BalenaCloud 
C. Flowmon 
D. IntentFuzzer

Show Answer

Question # 5

Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections. Which of the following attack techniques is used by Stella to compromise the web services?

A. XML injection 
B. WS-Address spoofing 
C. SOAPAction spoofing
D. Web services parsing attacks

Show Answer

Question # 6

What type of a vulnerability/attack is it when the malicious person forces the user’s browser to send an authenticated request to a server?

A. Session hijacking 
B. Server side request forgery 
C. Cross-site request forgery 
D. Cross-site scripting

Show Answer

Question # 7

Which of the following provides a security professional with most information about the system’s security posture?

A. Phishing, spamming, sending trojans 
B. Social engineering, company site browsing tailgating 
C. Wardriving, warchalking, social engineering 
D. Port scanning, banner grabbing service identification 

Show Answer

Question # 8

Attempting an injection attack on a web server based on responses to True/False QUESTION NO:s is called which of the following?

A. Compound SQLi 
B. Blind SQLi 
C. Classic SQLi 
D. DMS-specific SQLi 

Show Answer

Question # 9

John, a professional hacker, performs a network attack on a renowned organization and gains unauthorized access to the target network. He remains in the network without being detected for a long time and obtains sensitive information without sabotaging the organization. Which of the following attack techniques is used by John?

A. Advanced persistent theft 
B. threat Diversion theft 
C. Spear-phishing sites 
D. insider threat

Show Answer

Question # 10

The security team of Debry Inc. decided to upgrade Wi-Fi security to thwart attacks such as dictionary attacks and key recovery attacks. For this purpose, the security team started implementing cutting-edge technology that uses a modern key establishment protocol called the simultaneous authentication of equals (SAE), also known as dragonfly key exchange, which replaces the PSK concept. What is the Wi-Fi encryption technology implemented by Debry Inc.?

A. WEP 
B. WPA 
C. WPA2 
D. WPA3 

Show Answer

Question # 11

You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line. Which command would you use? 

A. c:\compmgmt.msc 
B. c:\services.msc
 C. c:\ncpa.cp 
D. c:\gpedit

Show Answer

Question # 12

On performing a risk assessment, you need to determine the potential impacts when some of the critical business processes of the company interrupt its service. What is the name of the process by which you can determine those critical businesses?

A. Emergency Plan Response (EPR) 
B. Business Impact Analysis (BIA) 
C. Risk Mitigation 
D. Disaster Recovery Planning (DRP) 

Show Answer

Question # 13

Which of the following Google advanced search operators helps an attacker in gathering information about websites that are similar to a specified target URL? 

A. [inurl:] 
B. [related:] 
C. [info:] 
D. [site:] 

Show Answer

Question # 14

A post-breach forensic investigation revealed that a known vulnerability in Apache Struts was to blame for the Equifax data breach that affected 143 million customers. A fix was available from the software vendor for several months prior 10 the Intrusion. This Is likely a failure in which of the following security processes? 

A. vendor risk management 
B. Security awareness training
 C. Secure deployment lifecycle 
D. Patch management

Show Answer

Question # 15

Which of the following is a passive wireless packet analyzer that works on Linux-based systems? 

A. Burp Suite 
B. OpenVAS 
C. tshark 
D. Kismet 

Show Answer

Question # 16

Ben purchased a new smartphone and received some updates on it through the OTA method. He received two messages: one with a PIN from the network operator and another asking him to enter the PIN received from the operator. As soon as he entered the PIN, the smartphone started functioning in an abnormal manner. What is the type of attack performed on Ben in the above scenario?

A. Advanced SMS phishing 
B. Bypass SSL pinning 
C. Phishing 
D. Tap 'n ghost attack 

Show Answer

Question # 17

Dorian Is sending a digitally signed email to Polly, with which key is Dorian signing this message and how is Poly validating It? 

A. Dorian is signing the message with his public key. and Poly will verify that the message came from Dorian by using Dorian's private key. 
B. Dorian Is signing the message with Polys public key. and Poly will verify that the message came from Dorian by using Dorian's public key. 
C. Dorian is signing the message with his private key. and Poly will verify that the message came from Dorian by using Dorian's public key. 
D. Dorian is signing the message with Polys private key. and Poly will verify mat the message came from Dorian by using Dorian's public key. 

Show Answer

Question # 18

Harper, a software engineer, is developing an email application. To ensure the confidentiality of email messages. Harper uses a symmetric-key block cipher having a classical 12- or 16-round Feistel network with a block size of 64 bits for encryption, which includes large 8 x 32-bit S-boxes (S1, S2, S3, S4) based on bent functions, modular addition and subtraction, key-dependent rotation, and XOR operations. This cipher also uses a masking key(Km1)and a rotation key (Kr1) for performing its functions. What is the algorithm employed by Harper to secure the email messages?

A. CAST-128 
B. AES 
C. GOST block cipher 
D. DES 

Show Answer

Question # 19

Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?

A. Role Based Access Control (RBAC) 
B. Discretionary Access Control (DAC) 
C. Single sign-on 
D. Windows authentication 

Show Answer

Question # 20

Miley, a professional hacker, decided to attack a target organization's network. To perform the attack, she used a tool to send fake ARP messages over the target network to link her MAC address with the target system's IP address. By performing this, Miley received messages directed to the victim's MAC address and further used the tool to intercept, steal, modify, and block sensitive communication to the target system. What is the tool employed by Miley to perform the above attack?

A. Gobbler 
B. KDerpNSpoof 
C. BetterCAP 
D. Wireshark 

Show Answer

Question # 21

Which of the following scanning method splits the TCP header into several packets and makes it difficult for packet filters to detect the purpose of the packet?

A. ACK flag probe scanning 
B. ICMP Echo scanning 
C. SYN/FIN scanning using IP fragments 
D. IPID scanning

Show Answer

Question # 22

What useful information is gathered during a successful Simple Mail Transfer Protocol (SMTP) enumeration? 

A. The two internal commands VRFY and EXPN provide a confirmation of valid users, email addresses, aliases, and mailing lists. 
B. Reveals the daily outgoing message limits before mailboxes are locked 
C. The internal command RCPT provides a list of ports open to message traffic. 
D. A list of all mail proxy server addresses used by the targeted host 

Show Answer

Question # 23

Insecure direct object reference is a type of vulnerability where the application does not verify if the user is authorized to access the internal object via its name or key. Suppose a malicious user Rob tries to get access to the account of a benign user Ned. Which of the following requests best illustrates an attempt to exploit an insecure direct object reference vulnerability?

A. “GET /restricted/goldtransfer?to=Rob&from=1 or 1=1’ HTTP/1.1Host: westbank.com”
B. “GET /restricted/\r\n\%00account%00Ned%00access HTTP/1.1 Host: westbank.com” 
C. “GET /restricted/accounts/?name=Ned HTTP/1.1 Host westbank.com” 
D. “GET /restricted/ HTTP/1.1 Host: westbank.com

Show Answer

Question # 24

Heather’s company has decided to use a new customer relationship management tool. After performing the appropriate research, they decided to purchase a subscription to a cloud-hosted solution. The only administrative task that Heather will need to perform is the management of user accounts. The provider will take care of the hardware, operating system, and software administration including patching and monitoring. Which of the following is this type of solution?

A. SaaS 
B. IaaS 
C. CaaS 
D. PasS 

Show Answer

Question # 25

After an audit, the auditors Inform you that there is a critical finding that you must tackle Immediately. You read the audit report, and the problem is the service running on port 389. Which service Is this and how can you tackle the problem?

A. The service is LDAP. and you must change it to 636. which is LDPAPS. 
B. The service is NTP. and you have to change It from UDP to TCP in order to encrypt it 
C. The findings do not require immediate actions and are only suggestions. 
D. The service is SMTP, and you must change it to SMIME. which is an encrypted way to send emails. 

Show Answer

Question # 26

You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible Intrusion Detection System. What is the best approach? 

A. Use Alternate Data Streams to hide the outgoing packets from this server. 
B. Use HTTP so that all traffic can be routed vis a browser, thus evading the internal Intrusion Detection Systems.
 C. Install Cryptcat and encrypt outgoing packets from this server. 
D. Install and use Telnet to encrypt all outgoing traffic from this server. 

Show Answer

Question # 27

Mr. Omkar performed tool-based vulnerability assessment and found two vulnerabilities. During analysis, he found that these issues are not true vulnerabilities. What will you call these issues?

A. False positives 
B. True negatives 
C. True positives 
D. False negatives

Show Answer

Question # 28

in this form of encryption algorithm, every Individual block contains 64-bit data, and three keys are used, where each key consists of 56 bits. Which is this encryption algorithm?

A. IDEA 
B. Triple Data Encryption standard 
C. MDS encryption algorithm 
D. AES

Show Answer

Question # 29

Roma is a member of a security team. She was tasked with protecting the internal network of an organization from imminent threats. To accomplish this task, Roma fed threat intelligence into the security devices in a digital format to block and identify inbound and outbound malicious traffic entering the organization's network. Which type of threat intelligence is used by Roma to secure the internal network?

A. Technical threat intelligence 
B. Operational threat intelligence 
C. Tactical threat intelligence 
D. Strategic threat intelligence 

Show Answer

Question # 30

A "Server-Side Includes" attack refers to the exploitation of a web application by injecting scripts in HTML pages or executing arbitrary code remotely. Which web-page file type, if it exists on the web server, is a strong indication that the server is vulnerable to this kind of attack?

A. .stm 
B. .html 
C. .rss 
D. .cms 

Show Answer

Question # 31

Calvin, a grey-hat hacker, targets a web application that has design flaws in its authentication mechanism. He enumerates usernames from the login form of the web application, which requests users to feed data and specifies the incorrect field in case of invalid credentials. Later, Calvin uses this information to perform social engineering. Which of the following design flaws in the authentication mechanism is exploited by Calvin?

A. Insecure transmission of credentials 
B. Verbose failure messages 
C. User impersonation 
D. Password reset mechanism 

Show Answer

Question # 32

Calvin, a software developer, uses a feature that helps him auto-generate the content of a web page without manual involvement and is integrated with SSI directives. This leads to a vulnerability in the developed web application as this feature accepts remote user inputs and uses them on the page. Hackers can exploit this feature and pass malicious SSI directives as input values to perform malicious activities such as modifying and erasing server files. What is the type of injection attack Calvin's web application is susceptible to?

A. Server-side template injection 
B. Server-side JS injection 
C. CRLF injection 
D. Server-side includes injection 

Show Answer

Question # 33

Henry is a penetration tester who works for XYZ organization. While performing enumeration on a client organization, he queries the DNS server for a specific cached DNS record. Further, by using this cached record, he determines the sites recently visited by the organization's user. What is the enumeration technique used by Henry on the organization?

A. DNS zone walking 
B. DNS cache snooping 
C. DNS SEC zone walking 
D. DNS cache poisoning 

Show Answer

Question # 34

Given below are different steps involved in the vulnerability-management life cycle. 1) Remediation 2) Identify assets and create a baseline 3) Verification 4) Monitor 5) Vulnerability scan 6) Risk assessment Identify the correct sequence of steps involved in vulnerability management. 

A. 2-->5-->6-->1-->3-->4 
B. 2-->1-->5-->6-->4-->3 
C. 2-->4-->5-->3-->6--> 1 
D. 1-->2-->3-->4-->5-->6 

Show Answer

Question # 35

Upon establishing his new startup, Tom hired a cloud service provider (CSP) but was dissatisfied with their service and wanted to move to another CSP. What part of the contract might prevent him from doing so? 

A. Virtualization 
B. Lock-in 
C. Lock-down 
D. Lock-up 

Show Answer

Question # 36

Jane is working as a security professional at CyberSol Inc. She was tasked with ensuring the authentication and integrity of messages being transmitted in the corporate network. To encrypt the messages, she implemented a security model in which every user in the network maintains a ring of public keys. In this model, a user needs to encrypt a message using the receiver's public key, and only the receiver can decrypt the message using their private key. What is the security model implemented by Jane to secure corporate messages?

A. Zero trust network 
B. Transport Layer Security (TLS) 
C. Secure Socket Layer (SSL) 
D. Web of trust (WOT) 

Show Answer

Question # 37

Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities. Which type of virus detection method did Chandler use in this context?

A. Heuristic Analysis 
B. Code Emulation 
C. Scanning 
D. Integrity checking 

Show Answer

Question # 38

How can rainbow tables be defeated?

A. Use of non-dictionary words 
B. All uppercase character passwords 
C. Password salting 
D. Lockout accounts under brute force password cracking attempts

Show Answer

Question # 39

Louis, a professional hacker, had used specialized tools or search engines to encrypt all his browsing activity and navigate anonymously to obtain sensitive/hidden information about official government or federal databases. After gathering the Information, he successfully performed an attack on the target government organization without being traced. Which of the following techniques is described in the above scenario?

A. Dark web footprinting 
B. VoIP footpnnting 
C. VPN footprinting 
D. website footprinting 

Show Answer

Question # 40

Dayn, an attacker, wanted to detect if any honeypots are installed in a target network. For this purpose, he used a time-based TCP fingerprinting method to validate the response to a normal computer and the response of a honeypot to a manual SYN request. Which of the following techniques is employed by Dayn to detect honeypots?

A. Detecting honeypots running on VMware 
B. Detecting the presence of Honeyd honeypots 
C. Detecting the presence of Snort_inline honeypots
 D. Detecting the presence of Sebek-based honeypots 

Show Answer