2024 Current 312-50v11 dumps Preparation through Our Practice Test [Q135-Q155]

4/5 - (4 votes)

2024 Current 312-50v11 dumps Preparation through Our Practice Test

100% Reliable Microsoft 312-50v11 Exam Dumps Test Pdf Exam Material

The Certified Ethical Hacker Exam is a certification offered by the EC-Council. 312-50v11 exam, also known as CEH v11, is designed to test the skills and knowledge of individuals who wish to become certified ethical hackers. Certified Ethical Hacker Exam (CEH v11) certification is highly respected in the industry, as it demonstrates an individual’s ability to identify and exploit vulnerabilities in computer systems and networks in order to improve security.

EC-COUNCIL 312-50v11 exam, also known as the Certified Ethical Hacker Exam (CEH v11), is a certification exam designed for individuals interested in pursuing a career in ethical hacking. 312-50v11 exam is aimed at testing the candidate’s knowledge and skills in identifying vulnerabilities in systems and networks, analyzing and exploiting them, and using the findings to enhance system security. The CEH v11 exam is recognized globally and is a prestigious certification for professionals in cybersecurity and information technology.

NEW QUESTION 135
Wilson, a professional hacker, targets an organization for financial benefit and plans to compromise its systems by sending malicious emails. For this purpose, he uses a tool to track the emails of the target and extracts information such as sender identities, mall servers, sender IP addresses, and sender locations from different public sources. He also checks if an email address was leaked using the haveibeenpwned.com API. Which of the following tools is used by Wilson in the above scenario?

Factiva

Netcraft

infoga

Zoominfo

NEW QUESTION 136
An organization has automated the operation of critical infrastructure from a remote location. For this purpose, all the industrial control systems are connected to the Internet. To empower the manufacturing process, ensure the reliability of industrial networks, and reduce downtime and service disruption, the organization decided to install an OT security tool that further protects against security incidents such as cyber espionage, zero-day attacks, and malware.
Which of the following tools must the organization employ to protect its critical infrastructure?

Robotium

BalenaCloud

Flowmon

IntentFuzzer

NEW QUESTION 137
A company’s policy requires employees to perform file transfers using protocols which encrypt traffic. You suspect some employees are still performing file transfers using unencrypted protocols because the employees do not like changes. You have positioned a network sniffer to capture traffic from the laptops used by employees in the data ingest department. Using Wire shark to examine the captured traffic, which command can be used as a display filter to find unencrypted file transfers?

tcp.port != 21

tcp.port = 23

tcp.port ==21

tcp.port ==21 || tcp.port ==22

NEW QUESTION 138
Widespread fraud ac Enron. WorldCom, and Tyco led to the creation of a law that was designed to improve the accuracy and accountability of corporate disclosures. It covers accounting firms and third parties that provide financial services to some organizations and came into effect in 2002. This law is known by what acronym?

Fed RAMP

PCIDSS

SOX

HIPAA

NEW QUESTION 139
Identify the UDP port that Network Time Protocol (NTP) uses as its primary means of communication?

113

123

161

NEW QUESTION 140
A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network.
What are some things he can do to prevent it? Select the best answers.

Use port security on his switches.

Use a tool like ARPwatch to monitor for strange ARP activity.

Use a firewall between all LAN segments.

If you have a small network, use static ARP entries.

Use only static IP addresses on all PC’s.

NEW QUESTION 141
Abel, a security professional, conducts penetration testing in his client organization to check for any security loopholes. He launched an attack on the DHCP servers by broadcasting forged DHCP requests and leased all the DHCP addresses available in the DHCP scope until the server could not issue any more IP addresses. This led to a DoS attack, and as a result, legitimate employees were unable to access the client’s network.
Which of the following attacks did Abel perform in the above scenario?

Rogue DHCP server attack

VLAN hopping

STP attack

DHCP starvation

NEW QUESTION 142
Alex, a cloud security engineer working in Eyecloud Inc. is tasked with isolating applications from the underlying infrastructure and stimulating communication via well-defined channels. For this purpose, he used an open-source technology that helped him in developing, packaging, and running applications; further, the technology provides PaaS through OS-level visualization, delivers containerized software packages, and promotes fast software delivery. What is the cloud technology employed by Alex in the above scenario?

Virtual machine

Serverless computing

Docker

Zero trust network

NEW QUESTION 143
Security administrator John Smith has noticed abnormal amounts of traffic coming from local computers at night. Upon reviewing, he finds that user data have been exfilltrated by an attacker. AV tools are unable to find any malicious software, and the IDS/IPS has not reported on any non-whitelisted programs, what type of malware did the attacker use to bypass the company’s application whitelisting?

Phishing malware

Zero-day malware

File-less malware

Logic bomb malware

NEW QUESTION 144
Steve, an attacker, created a fake profile on a social media website and sent a request to Stella. Stella was enthralled by Steve’s profile picture and the description given for his profile, and she initiated a conversation with him soon after accepting the request. After a few days, Steve started asking about her company details and eventually gathered all the essential information regarding her company.
What is the social engineering technique Steve employed in the above scenario?

Baiting

Piggybacking

Diversion theft

Honey trap

NEW QUESTION 145
You have been authorized to perform a penetration test against a website. You want to use Google dorks to footprint the site but only want results that show file extensions. What Google dork operator would you use?

filetype

ext

inurl

site

NEW QUESTION 146
What did the following commands determine?

That the Joe account has a SID of 500

These commands demonstrate that the guest account has NOT been disabled

These commands demonstrate that the guest account has been disabled

That the true administrator is Joe

Issued alone, these commands prove nothing

NEW QUESTION 147
What is the proper response for a NULL scan if the port is closed?

SYN

ACK

FIN

PSH

RST

No response

NEW QUESTION 148
Jake, a professional hacker, installed spyware on a target iPhone to spy on the target user’s activities. He can take complete control of the target mobile device by jailbreaking the device remotely and record audio, capture screenshots, and monitor all phone calls and SMS messages. What is the type of spyware that Jake used to infect the target device?

DroidSheep

Androrat

Zscaler

Trident

NEW QUESTION 149
Abel, a cloud architect, uses container technology to deploy applications/software including all its dependencies, such as libraries and configuration files, binaries, and other resources that run independently from other processes in the cloud environment. For the containerization of applications, he follows the five-tier container technology architecture. Currently, Abel is verifying and validating image contents, signing images, and sending them to the registries.
Which of the following tiers of the container technology architecture is Abel currently working in?

Tier-1: Developer machines

Tier-2: Testing and accreditation systems

Tier-3: Registries

Tier-4: Orchestrators

NEW QUESTION 150
You are performing a penetration test for a client and have gained shell access to a Windows machine on the internal network. You intend to retrieve all DNS records for the internal domain, if the DNS server is at 192.168.10.2 and the domain name is abccorp.local, what command would you type at the nslookup prompt to attempt a zone transfer?

list server=192.168.10.2 type=all

is-d abccorp.local

Iserver 192.168.10.2-t all

List domain=Abccorp.local type=zone

NEW QUESTION 151
jane invites her friends Alice and John over for a LAN party. Alice and John access Jane’s wireless network without a password. However. Jane has a long, complex password on her router. What attack has likely occurred?

Wireless sniffing

Piggybacking

Evil twin

Wardriving

Explanation
A wireless sniffer may be a sort of packet analyzer. A packet analyzer (also referred to as a packet sniffer) may be a piece of software or hardware designed to intercept data because it is transmitted over a network and decode the info into a format that’s readable for humans. Wireless sniffers are packet analyzers specifically created for capturing data on wireless networks. Wireless sniffers also are commonly mentioned as wireless packet sniffers or wireless network sniffers.Wireless sniffer tools have many uses in commercial IT environments. Their ability to watch , intercept, and decode data because it is in transit makes them useful for:* Diagnosing and investigating network problems* Monitoring network usage, activity, and security* Discovering network misuse, vulnerabilities, malware, and attack attempts* Filtering network traffic* Identifying configuration issues and network bottlenecks* Wireless Packet Sniffer AttacksWhile wireless packet sniffers are valuable tools for maintaining wireless networks, their capabilities make them popular tools for malicious actors also . Hackers can use wireless sniffer software to steal data, spy on network activity, and gather information to use in attacking the network. Logins (usernames and passwords) are quite common targets for attackers using wireless sniffer tools. Wireless network sniffing attacks usually target unsecure networks, like free WiFi publicly places (coffee shops, hotels, airports, etc).Wireless sniffer tools also are commonly utilized in “spoofing” attacks. Spoofing may be a sort of attack where a malicious party uses information obtained by a wireless sniffer to impersonate another machine on the network. Spoofing attacks often target business’ networks and may be wont to steal sensitive information or run man-in-the-middle attacks against network hosts.There are two modes of wireless sniffing: monitor mode and promiscuous mode.
In monitor mode, a wireless sniffer is in a position to gather and skim incoming data without sending any data of its own. A wireless sniffing attack in monitor mode are often very difficult to detect due to this. In promiscuous mode, a sniffer is in a position to read all data flowing into and out of a wireless access point.
Since a wireless sniffer in promiscuous mode also sniffs outgoing data, the sniffer itself actually transmits data across the network. This makes wireless sniffing attacks in promiscuous mode easier to detect. it’s more common for attackers to use promiscuous mode in sniffing attacks because promiscuous mode allows attackers to intercept the complete range of knowledge flowing through an access point.
Preventing Wireless Sniffer AttacksThere are several measures that organizations should fancy mitigate wireless packet sniffer attacks. First off, organizations (and individual users) should refrain from using insecure protocols. Commonly used insecure protocols include basic HTTP authentication, File Transfer Protocol (FTP), and Telnet. Secure protocols like HTTPS, Secure File Transfer Protocol (SFTP), and Secure Shell (SSH) should be utilized in place of their insecure alternatives when possible. Secure protocols make sure that any information transmitted will automatically be encrypted. If an insecure protocol must be used, organizations themselves got to encrypt any data which will be sent using that protocol. Virtual Private Networks (VPNs) are often wont to encrypt internet traffic and are a well-liked tool for organizations today.Additionally to encrypting information and using secure protocols, companies can prevent attacks by using wireless sniffer software to smell their own networks. this enables security teams to look at their networks from an attacker’s perspective and find out sniffing vulnerabilities and attacks ongoing . While this method won’t be effective in discovering wireless network sniffers in monitor mode, it’s possible to detect sniffers in promiscuous mode (the preferred mode for attackers) by sniffing your own network.
Tools for Detecting Packet SniffersWireless sniffer software programs frequently include features like intrusion and hidden network detection for helping organizations discover malicious sniffers on their networks. additionally to using features that are built into wireless sniffer tools, there are many aftermarket tools available that are designed specifically for detecting sniffing attacks. These tools typically perform functions like monitoring network traffic or scanning network cards in promiscuous mode to detect wireless network sniffers. There are dozens of options (both paid and open source) for sniffer detection tools, so organizational security teams will got to do some research before selecting the proper tool for his or her needs.

NEW QUESTION 152
#!/usr/bin/python import socket buffer=[“”A””] counter=50 while len(buffer)<=100: buffer.append (“”A””*counter) counter=counter+50 commands= [“”HELP””,””STATS .””,””RTIME .””,””LTIME. “”,””SRUN .”‘,””TRUN .””,””GMON
.””,””GDOG .””,””KSTET .”,””GTER .””,””HTER .””, “”LTER .”,””KSTAN .””] for command in commands: for buffstring in buffer: print “”Exploiting”” +command +””:””+str(len(buffstring)) s=socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((‘127.0.0.1’, 9999)) s.recv(50) s.send(command+buffstring) s.close() What is the code written for?

Denial-of-service (DOS)

Buffer Overflow

Bruteforce

Encryption

NEW QUESTION 153
Jack, a professional hacker, targets an organization and performs vulnerability scanning on the target web server to identify any possible weaknesses, vulnerabilities, and misconfigurations. In this process, Jack uses an automated tool that eases his work and performs vulnerability scanning to find hosts, services, and other vulnerabilities in the target server. Which of the following tools is used by Jack to perform vulnerability scanning?

Infoga

WebCopier Pro

Netsparker

NCollector Studio

NEW QUESTION 154
Ricardo has discovered the username for an application in his targets environment. As he has a limited amount of time, he decides to attempt to use a list of common passwords he found on the Internet. He compiles them into a list and then feeds that list as an argument into his password-cracking application, what type of attack is Ricardo performing?

Known plaintext

Password spraying

Brute force

Dictionary

A brute force attack could be a popular cracking method: by some accounts, brute force attacks accounted for five% has a of confirmed security breaches. A brute force attack involves ‘guessing’ username and passwords to achieve unauthorized access to a system. Brute force could be a easy attack methodology and encompasses a high success rate. Some attackers use applications and scripts as brute force tools. These tools attempt various parole combos to bypass authentication processes. In different cases, attackers try and access net applications by sorting out the correct session ID. offender motivation might embody stealing data, infecting sites with malware, or disrupting service. While some attackers still perform brute force attacks manually, nowadays most brute force attacks nowadays area unit performed by bots. Attackers have lists of ordinarily used credentials, or real user credentials, obtained via security breaches or the dark net. Bots consistently attack websites and take a look at these lists of credentials, and apprize the offender after they gain access.
Types of Brute Force Attacks
* Simple brute force attack-uses a scientific approach to ‘guess’ that doesn’t believe outside logic. * Hybrid brute force attacks-starts from external logic to see that parole variation could also be presumably to succeed, then continues with the easy approach to undertake several potential variations. * Dictionary attacks-guesses username or passwords employing a wordbook of potential strings or phrases. * Rainbow table attacks-a rainbow table could be a precomputed table for reversing cryptologic hash functions. It may be wont to guess a perform up to a precise length consisting of a restricted set of characters. * Reverse brute force attack-uses a typical parole or assortment of passwords against several potential username . Targets a network of users that the attackers have antecedently obtained knowledge. * Credential stuffing-uses previously-known password-username pairs, attempting them against multiple websites. Exploits the actual fact that several users have an equivalent username and parole across totally different systems.
Hydra and different widespread Brute Force Attack Tools
Security analysts use the THC-Hydra tool to spot vulnerabilities in shopper systems. Hydra quickly runs through an outsized range of parole combos, either easy brute force or dictionary-based. It will attack quite fifty protocols and multiple operational systems. Hydra is an open platform; the safety community and attackers perpetually develop new modules.
Other high brute force tools are: * Aircrack-ng-can be used on Windows, Linux, iOS, and golem. It uses a wordbook of wide used passwords to breach wireless networks. * John the Ripper-runs on fifteen totally different platforms as well as UNIX operating system, Windows, and OpenVMS. Tries all potential combos employing a dictionary of potential passwords. * L0phtCrack-a tool for cracking Windows passwords. It uses rainbow tables, dictionaries, and digital computer algorithms. * Hashcat-works on Windows, Linux, and Mac OS. will perform easy brute force, rule-based, and hybrid attacks. * DaveGrohl-an open-source tool for cracking mac OS. may be distributed across multiple computers. * Ncrack-a tool for cracking network authentication. It may be used on Windows, Linux, and BSD.

NEW QUESTION 155
How is the public key distributed in an orderly, controlled fashion so that the users can be sure of the sender’s identity?

Hash value

Private key

Digital signature

Digital certificate