[UPDATED 2025] Getting 312-50v10 Certification Made Easy! [Q88-Q109]

4/5 - (1 vote)

[UPDATED 2025] Getting 312-50v10 Certification Made Easy!

312-50v10 Exam Crack Test Engine Dumps Training With 745 Questions

EC-COUNCIL 312-50v10 (Certified Ethical Hacker Exam (CEH v10)) Exam is a certification exam that evaluates the skills and knowledge of a candidate in ethical hacking. It is designed to test the abilities of professionals who are responsible for securing computer systems and networks against cyber-attacks. 312-50v10 exam includes various topics such as network security, reconnaissance, foot printing and scanning, system hacking, sniffing and session hijacking, among others.

The CEH v10 exam is a multiple-choice exam that consists of 125 questions. It is a four-hour exam that is conducted online, and candidates are required to answer all the questions within the allotted time. 312-50v10 exam is designed to assess your knowledge and skills in ethical hacking, and it tests your ability to identify vulnerabilities in computer systems and networks, and your ability to use various tools and techniques to exploit these vulnerabilities.

NEW QUESTION 88
Under what conditions does a secondary name server request a zone transfer from a primary name server?

When a primary SOA is higher that a secondary SOA

When a secondary SOA is higher that a primary SOA

When a primary name server has had its service restarted

When a secondary name server has had its service restarted

When the TTL falls to zero

NEW QUESTION 89
What is the most secure way to mitigate the theft of corporate information from a laptop that was left in a
hotel room?

Set a BIOS password

Encrypt the data on the hard drive.

Use a strong logon password to the operating system.

Back up everything on the laptop and store the backup in a safe place.

NEW QUESTION 90
Identify the UDP port that Network Time Protocol (NTP) uses as its primary means of communication?

123

161

113

NEW QUESTION 91
Which of the following is a common Service Oriented Architecture (SOA) vulnerability?

Cross-site scripting

SQL injection

VPath injection

XML denial of service issues

NEW QUESTION 92
A large mobile telephony and data network operator has a data center that houses network elements.
These are essentially large computers running on Linux. The perimeter of the data center is secured with
firewalls and IPS systems.
What is the best security policy concerning this setup?

Network elements must be hardened with user ids and strong passwords. Regular security tests and
audits should be performed.

As long as the physical access to the network elements is restricted, there is no need for additional
measures.

There is no need for specific security measures on the network elements as long as firewalls and IPS
systems exist.

The operator knows that attacks and down time are inevitable and should have a backup site.

NEW QUESTION 93
From the two screenshots below, which of the following is occurring?

10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against
10.0.0.2.

10.0.0.253 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against
10.0.0.2.

10.0.0.2 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against
10.0.0.2.

10.0.0.252 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against
10.0.0.2.

NEW QUESTION 94
Which of the following is the BEST way to protect Personally Identifiable Information (PII) from being exploited due to vulnerabilities of varying web applications?

Use cryptographic storage to store all PII

Use full disk encryption on all hard drives to protect PII

Use encrypted communications protocols to transmit PII

Use a security token to log into all Web applications that use PII

NEW QUESTION 95
What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

Passive

Active

Reflective

Distributive

Explanation

NEW QUESTION 96
What is a “Collision attack” in cryptography?

Collision attacks try to get the public key

Collision attacks try to break the hash into three parts to get the plaintext value

Collision attacks try to break the hash into two parts, with the same bytes in each part to get the private key

Collision attacks try to find two inputs producing the same hash

NEW QUESTION 97
What is the proper response for a NULL scan if the port is open?

SYN

ACK

FIN

PSH

RST

No response

NEW QUESTION 98
Which of the following cryptography attack methods is usually performed without the use of a computer?

Ciphertext-only attack

Chosen key attack

Rubber hose attack

Rainbow table attack

NEW QUESTION 99
Developers at your company are creating a web application which will be available for use by anyone on the Internet, The developers have taken the approach of implementing a Three-Tier Architecture for the web application. The developers are now asking you which network should the Presentation Tier (front- end web server) be placed in?

isolated vlan network

Mesh network

DMZ network

Internal network

NEW QUESTION 100
What mechanism in Windows prevents a user from accidentally executing a potentially malicious batch
(.bat) or PowerShell (.ps1) script?

User Access Control (UAC)

Data Execution Prevention (DEP)

Address Space Layout Randomization (ASLR)

Windows firewall

NEW QUESTION 101
While performing ping scans into a target network you get a frantic call from the organization’s security team.
They report that they are under a denial of service attack. When you stop your scan, the smurf attack event stops showing up on the organization’s IDS monitor.
How can you modify your scan to prevent triggering this event in the IDS?

Scan more slowly.

Do not scan the broadcast IP.

Spoof the source IP address.

Only scan the Windows systems.

NEW QUESTION 102
The Open Web Application Security Project (OWASP) is the worldwide not-for-profit charitable
organization focused on improving the security of software. What item is the primary concern on OWASP’s
Top Ten Project Most Critical Web Application Security Risks?

Cross Site Scripting

Injection

Path disclosure

Cross Site Request Forgery

NEW QUESTION 103
A penetration test was done at a company. After the test, a report was written and given to the company’s IT authorities. A section from the report is shown below:
* Access List should be written between VLANs.
* Port security should be enabled for the intranet.
* A security solution which filters data packets should be set between intranet (LAN) and DMZ.
* A WAF should be used in front of the web applications.
According to the section from the report, which of the following choice is true?

A stateful firewall can be used between intranet (LAN) and DMZ.

There is access control policy between VLANs.

MAC Spoof attacks cannot be performed.

Possibility of SQL Injection attack is eliminated.

NEW QUESTION 104
You have gained physical access to a Windows 2008 R2 server which has an accessible disc drive. When
you attempt to boot the server and log in, you are unable to guess the password. In your toolkit, you have
an Ubuntu 9.10 Linux LiveCD. Which Linux-based tool can change any user’s password or activate
disabled Windows accounts?

John the Ripper

SET

CHNTPW

Cain & Abel

NEW QUESTION 105
Supposed you are the Chief Network Engineer of a certain Telco. Your company is planning for a big business expansion and it requires that your network authenticate users connecting using analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network. Which AAA protocol would you implement?

TACACS+

DIAMETER

Kerberos

RADIUS

NEW QUESTION 106
You want to do an ICMP scan on a remote computer using hping2. What is the proper syntax?

hping2 host.domain.com

hping2 –set-ICMP host.domain.com

hping2 -i host.domain.com

hping2 -1 host.domain.com

NEW QUESTION 107
When a normal TCP connection starts, a destination host receives a SYN (synchronize/start) packet from a source host and sends back a SYN/ACK (synchronize acknowledge). The destination host must then hear an ACK (acknowledge) of the SYN/ACK before the connection is established. This is referred to as the “TCP three-way handshake.” While waiting for the ACK to the SYN ACK, a connection queue of finite size on the destination host keeps track of connections waiting to be completed. This queue typically empties quickly since the ACK is expected to arrive a few milliseconds after the SYN ACK.
How would an attacker exploit this design by launching TCP SYN attack?

Attacker generates TCP SYN packets with random destination addresses towards a victim host

Attacker floods TCP SYN packets with random source addresses towards a victim host

Attacker generates TCP ACK packets with random source addresses towards a victim host

Attacker generates TCP RST packets with random source addresses towards a victim host

NEW QUESTION 108
Which of the following steps for risk assessment methodology refers to vulnerability identification?

Determines if any flaws exist in systems, policies, or procedures

Assigns values to risk probabilities; Impact values.

Determines risk probability that vulnerability will be exploited (High. Medium, Low)

Identifies sources of harm to an IT system. (Natural, Human. Environmental)

NEW QUESTION 109
What is one of the advantages of using both symmetric and asymmetric cryptogrsphy in SSL/TLS?

Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.

Symmetric algorithms such as AES provide a failsafe when asymmetric methods fail.

Symmetric encryption allows the server to security transmit the session keys out-of-band.

Asymmetric cryptography is computationally expensive in comparison. However, it is well-suited to securely negotiate keys for use with symmetric cryptography.

Loading …