Spring Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the ECCouncil CEH v11 312-50v11 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 312-50v11 Premium Access

View all detail and faqs for the 312-50v11 exam

Go to Exam

705 Students Passed

93% Average Score

98% Same Questions

Viewing page 9 out of 11 pages

Viewing questions 121-135 out of questions

Questions # 121:

DNS cache snooping is a process of determining if the specified resource address is present in the DNS cache records. It may be useful during the examination of the network to determine what software update resources are used, thus discovering what software is installed.

What command is used to determine if the entry is present in DNS cache?

Options:

nslookup -fullrecursive update.antivirus.com

dnsnooping –rt update.antivirus.com

nslookup -norecursive update.antivirus.com

dns --snoop update.antivirus.com

Questions # 122:

Attacker Rony installed a rogue access point within an organization's perimeter and attempted to intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by johnson in the above scenario?

Options:

Host-based assessment

Wireless network assessment

Application assessment

Distributed assessment

Questions # 123:

The network in ABC company is using the network address 192.168.1.64 with mask 255.255.255.192. In the network the servers are in the addresses 192.168.1.122, 192.168.1.123 and 192.168.1.124. An attacker is trying to find those servers but he cannot see them in his scanning. The command he is using is: nmap 192.168.1.64/28.

Why he cannot see the servers?

Options:

He needs to add the command ““ip address”” just before the IP address

He needs to change the address to 192.168.1.0 with the same mask

He is scanning from 192.168.1.64 to 192.168.1.78 because of the mask /28 and the servers are not in that range

The network must be dawn and the nmap command and IP address are ok

Questions # 124:

Which of the following describes the characteristics of a Boot Sector Virus?

Options:

Modifies directory table entries so that directory entries point to the virus code instead of the actual program.

Moves the MBR to another location on the RAM and copies itself to the original location of the MBR.

Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR.

Overwrites the original MBR and only executes the new virus code.

Questions # 125:

In both pharming and phishing attacks, an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims.

What is the difference between pharming and phishing attacks?

Options:

In a pharming attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack, an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name

In a phishing attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack, an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name

Both pharming and phishing attacks are purely technical and are not considered forms of social engineering

Both pharming and phishing attacks are identical

Questions # 126:

Jane is working as a security professional at CyberSol Inc. She was tasked with ensuring the authentication and integrity of messages being transmitted in the corporate network. To encrypt the messages, she implemented a security model in which every user in the network maintains a ring of public keys. In this model, a user needs to encrypt a message using the receiver's public key, and only the receiver can decrypt the message using their private key. What is the security model implemented by Jane to secure corporate messages?

Options:

Zero trust network

Transport Layer Security (TLS)

Secure Socket Layer (SSL)

Web of trust (WOT)

Questions # 127:

John the Ripper is a technical assessment tool used to test the weakness of which of the following?

Options:

Passwords

File permissions

Firewall rulesets

Usernames

Questions # 128:

When discussing passwords, what is considered a brute force attack?

Options:

You attempt every single possibility until you exhaust all possible combinations or discover the password

You threaten to use the rubber hose on someone unless they reveal their password

You load a dictionary of words into your cracking program

You create hashes of a large number of words and compare it with the encrypted passwords

You wait until the password expires

Questions # 129:

You want to analyze packets on your wireless network. Which program would you use?

Options:

Wireshark with Airpcap

Airsnort with Airpcap

Wireshark with Winpcap

Ethereal with Winpcap

Questions # 130:

Jake, a professional hacker, installed spyware on a target iPhone to spy on the target user's activities. He can take complete control of the target mobile device by jailbreaking the device remotely and record audio, capture screenshots, and monitor all phone calls and SMS messages. What is the type of spyware that Jake used to infect the target device?

Options:

DroidSheep

Androrat

Zscaler

Trident

Questions # 131:

Although FTP traffic is not encrypted by default, which layer 3 protocol would allow for end-to-end encryption of the connection?

Options:

SFTP

Ipsec

SSL

FTPS

Questions # 132:

Daniel Is a professional hacker who Is attempting to perform an SQL injection attack on a target website. www.movlescope.com. During this process, he encountered an IDS that detects SQL Injection attempts based on predefined signatures. To evade any comparison statement, he attempted placing characters such as ‘ 'or '1'='1" In any bask injection statement such as "or 1=1." Identify the evasion technique used by Daniel in the above scenario.

Options:

Null byte

IP fragmentation

Char encoding

Variation

Answer

Explanation

One may append the comment “–” operator along with the String for the username and whole avoid executing the password segment of the SQL query. Everything when the — operator would be considered as comment and not dead.

To launch such an attack, the value passed for name could be ’OR ‘1’=‘1’ ; —Statement = “SELECT * FROM ‘CustomerDB’ WHERE ‘name’ = ‘ ”+ userName + “ ‘ AND ‘password’ = ‘ ” + passwd + “ ‘ ; ”

Statement = “SELECT * FROM ‘CustomerDB’ WHERE ‘name’ = ‘ ’ OR ‘1’=‘1‘;– + “ ‘ AND ‘password’ = ‘ ” + passwd + “ ‘ ; ”

All the records from the customer database would be listed.

Yet, another variation of the SQL Injection Attack can be conducted in dbms systems that allow multiple SQL injection statements. Here, we will also create use of the vulnerability in sure dbms whereby a user provided field isn’t strongly used in or isn’t checked for sort constraints.

This could take place once a numeric field is to be employed in a SQL statement; but, the programmer makes no checks to validate that the user supplied input is numeric.

Variation is an evasion technique whereby the attacker can easily evade any comparison statement. The attacker does this by placing characters such as “' or '1'='1'” in any basic injection statement such as “or 1=1” or with other accepted SQL comments.

Evasion Technique: Variation Variation is an evasion technique whereby the attacker can easily evade any comparison statement. The attacker does this by placing characters such as “' or '1'='1'” in any basic injection statement such as “or 1=1” or with other accepted SQL comments. The SQL interprets this as a comparison between two strings or characters instead of two numeric values. As the evaluation of two strings yields a true statement, similarly, the evaluation of two numeric values yields a true statement, thus rendering the evaluation of the complete query unaffected. It is also possible to write many other signatures; thus, there are infinite possibilities of variation as well. The main aim of the attacker is to have a WHERE statement that is always evaluated as “true” so that any mathematical or string comparison can be used, where the SQL can perform the same.

Questions # 133:

Password cracking programs reverse the hashing process to recover passwords. (True/False.)