VALID 312-50v11 Exam Dumps For Certification Exam Preparation
312-50v11 Dumps PDF 2024 Strategy Your Preparation Efficiently
EC-COUNCIL 312-50v11 exam, also known as the Certified Ethical Hacker Exam (CEH v11), is a certification exam designed for individuals interested in pursuing a career in ethical hacking. 312-50v11 exam is aimed at testing the candidate's knowledge and skills in identifying vulnerabilities in systems and networks, analyzing and exploiting them, and using the findings to enhance system security. The CEH v11 exam is recognized globally and is a prestigious certification for professionals in cybersecurity and information technology.
NEW QUESTION # 87
Wilson, a professional hacker, targets an organization for financial benefit and plans to compromise its systems by sending malicious emails. For this purpose, he uses a tool to track the emails of the target and extracts information such as sender identities, mall servers, sender IP addresses, and sender locations from different public sources. He also checks if an email address was leaked using the haveibeenpwned.com API. Which of the following tools is used by Wilson in the above scenario?
- A. infoga
- B. Netcraft
- C. Factiva
- D. Zoominfo
Answer: A
Explanation:
Infoga may be a tool gathering email accounts informations (ip,hostname,country,...) from completely different public supply (search engines, pgp key servers and shodan) and check if email was leaked using haveibeenpwned.com API. is a really simple tool, however very effective for the first stages of a penetration test or just to know the visibility of your company within the net.
NEW QUESTION # 88
What tool can crack Windows SMB passwords simply by listening to network traffic?
- A. This is not possible
- B. Netbus
- C. NTFSDOS
- D. L0phtcrack
Answer: D
NEW QUESTION # 89
The configuration allows a wired or wireless network interface controller to pass all traffic it receives to the Central Processing Unit (CPU), rather than passing only the frames that the controller is intended to receive. Which of the following is being described?
- A. Promiscuous mode
- B. Multi-cast mode
- C. Port forwarding
- D. WEM
Answer: A
NEW QUESTION # 90
Jim, a professional hacker, targeted an organization that is operating critical Industrial Infrastructure. Jim used Nmap to scan open pons and running services on systems connected to the organization's OT network. He used an Nmap command to identify Ethernet/IP devices connected to the Internet and further gathered Information such as the vendor name, product code and name, device name, and IP address. Which of the following Nmap commands helped Jim retrieve the required information?
- A. nmap -Pn -sU -p 44818 --script enip-info < Target IP >
- B. nmap -Pn -sT -p 102 --script s7-info < Target IP >
- C. nmap -Pn -sT -p 46824 < Target IP >
- D. nmap -Pn -sT --scan-delay 1s --max-parallelism 1 -p < Port List > < Target IP >
Answer: A
NEW QUESTION # 91
Some clients of TPNQM SA were redirected to a malicious site when they tried to access the TPNQM main site. Bob, a system administrator at TPNQM SA, found that they were victims of DNS Cache Poisoning. What should Bob recommend to deal with such a threat?
- A. The use of security agents in clients' computers
- B. The use of double-factor authentication
- C. Client awareness
- D. The use of DNSSEC
Answer: D
NEW QUESTION # 92
A zone file consists of which of the following Resource Records (RRs)?
- A. SOA, NS, A, and MX records
- B. SOA, NS, AXFR, and MX records
- C. DNS, NS, PTR, and MX records
- D. DNS, NS, AXFR, and MX records
Answer: A
NEW QUESTION # 93
A network administrator discovers several unknown files in the root directory of his Linux FTP server. One of the files is a tarball, two are shell script files, and the third is a binary file is named "nc." The FTP server's access logs show that the anonymous user account logged in to the server, uploaded the files, and extracted the contents of the tarball and ran the script using a function provided by the FTP server's software. The "ps" command shows that the "nc" file is running as process, and the netstat command shows the "nc" process is listening on a network port.
What kind of vulnerability must be present to make this remote attack possible?
- A. Privilege escalation
- B. File system permissions
- C. Brute force login
- D. Directory traversal
Answer: B
NEW QUESTION # 94
Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place.
He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers.
Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?
- A. Hardware and Software Keyloggers.
- B. Passwords are always best obtained using Hardware key loggers.
- C. Software only, they are the most effective.
- D. Hardware, Software, and Sniffing.
Answer: D
NEW QUESTION # 95
which type of virus can change its own code and then cipher itself multiple times as it replicates?
- A. Stealth virus
- B. Cavity virus
- C. Encryption virus
- D. Tunneling virus
Answer: A
Explanation:
A stealth virus may be a sort of virus malware that contains sophisticated means of avoiding detection by antivirus software. After it manages to urge into the now-infected machine a stealth viruses hides itself by continually renaming and moving itself round the disc. Like other viruses, a stealth virus can take hold of the many parts of one's PC. When taking control of the PC and performing tasks, antivirus programs can detect it, but a stealth virus sees that coming and can rename then copy itself to a special drive or area on the disc, before the antivirus software. Once moved and renamed a stealth virus will usually replace the detected 'infected' file with a clean file that doesn't trigger anti-virus detection. It's a never-ending game of cat and mouse. The intelligent architecture of this sort of virus about guarantees it's impossible to completely rid oneself of it once infected. One would need to completely wipe the pc and rebuild it from scratch to completely eradicate the presence of a stealth virus. Using regularly-updated antivirus software can reduce risk, but, as we all know, antivirus software is additionally caught in an endless cycle of finding new threats and protecting against them.
https://www.techslang.com/definition/what-is-a-stealth-virus/
NEW QUESTION # 96
Stephen, an attacker, targeted the industrial control systems of an organization. He generated a fraudulent email with a malicious attachment and sent it to employees of the target organization. An employee who manages the sales software of the operational plant opened the fraudulent email and clicked on the malicious attachment. This resulted in the malicious attachment being downloaded and malware being injected into the sales software maintained in the victim's system. Further, the malware propagated itself to other networked systems, finally damaging the industrial automation components. What is the attack technique used by Stephen to damage the industrial systems?
- A. Spear-phishing attack
- B. HMI-based attack
- C. Reconnaissance attack
- D. SMishing attack
Answer: A
NEW QUESTION # 97
Robin, an attacker, is attempting to bypass the firewalls of an organization through the DNS tunneling method in order to exfiltrate data. He is using the NSTX tool for bypassing the firewalls.
On which of the following ports should Robin run the NSTX tool?
- A. Port 80
- B. Port 50
- C. Port 53
- D. Port 23
Answer: C
NEW QUESTION # 98
What is the file that determines the basic configuration (specifically activities, services, broadcast receivers, etc.) in an Android application?
- A. classes.dex
- B. AndroidManifest.xml
- C. resources.asrc
- D. APK.info
Answer: B
Explanation:
Explanation
The AndroidManifest.xml file contains information of your package, including components of the appliance like activities, services, broadcast receivers, content providers etc.It performs another tasks also:* it's responsible to guard the appliance to access any protected parts by providing the permissions.* It also declares the android api that the appliance goes to use.* It lists the instrumentation classes. The instrumentation classes provides profiling and other informations. These informations are removed just before the appliance is published etc.This is the specified xml file for all the android application and located inside the basis directory.
NEW QUESTION # 99
The tools which receive event logs from servers, network equipment, and applications, and perform analysis and correlation on those logs, and can generate alarms for security relevant issues, are known as what?
- A. Security incident and event Monitoring
- B. Vulnerability Scanner
- C. network Sniffer
- D. Intrusion prevention Server
Answer: A
NEW QUESTION # 100
You are performing a penetration test for a client and have gained shell access to a Windows machine on the internal network. You intend to retrieve all DNS records for the internal domain, if the DNS server is at 192.168.10.2 and the domain name is abccorp.local, what command would you type at the nslookup prompt to attempt a zone transfer?
- A. List domain=Abccorp.local type=zone
- B. is-d abccorp.local
- C. Iserver 192.168.10.2-t all
- D. list server=192.168.10.2 type=all
Answer: B
NEW QUESTION # 101
Which DNS resource record can indicate how long any "DNS poisoning" could last?
- A. NS
- B. MX
- C. SOA
- D. TIMEOUT
Answer: C
NEW QUESTION # 102
Email is transmitted across the Internet using the Simple Mail Transport Protocol. SMTP does not encrypt email, leaving the information in the message vulnerable to being read by an unauthorized person. SMTP can upgrade a connection between two mail servers to use TLS. Email transmitted by SMTP over TLS is encrypted. What is the name of the command used by SMTP to transmit email over TLS?
- A. FORCETLS
- B. UPGRADETLS
- C. STARTTLS
- D. OPPORTUNISTICTLS
Answer: C
NEW QUESTION # 103
Attacker Rony installed a rogue access point within an organization's perimeter and attempted to intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by johnson in the above scenario?
- A. Distributed assessment
- B. Wireless network assessment
- C. Host-based assessment
- D. Application assessment
Answer: B
NEW QUESTION # 104
A "Server-Side Includes" attack refers to the exploitation of a web application by injecting scripts in HTML pages or executing arbitrary code remotely.
Which web-page file type, if it exists on the web server, is a strong indication that the server is vulnerable to this kind of attack?
- A. .html
- B. .stm
- C. .cms
- D. .rss
Answer: B
NEW QUESTION # 105
Scenario:
1. Victim opens the attacker's web site.
2. Attacker sets up a web site which contains interesting and attractive content like 'Do you want to make $1000 in a day?'.
3. Victim clicks to the interesting and attractive content URL.
4. Attacker creates a transparent 'iframe' in front of the URL which the victim attempts to click, so the victim thinks that he/she clicks on the 'Do you want to make $1000 in a day?' URL but actually he/she clicks on the content or URL that exists in the transparent 'iframe' which is setup by the attacker.
What is the name of the attack which is mentioned in the scenario?
- A. HTML Injection
- B. HTTP Parameter Pollution
- C. Clickjacking Attack
- D. Session Fixation
Answer: C
NEW QUESTION # 106
......
EC-COUNCIL 312-50v11 (Certified Ethical Hacker Exam (CEH v11)) Certification Exam is designed to test the knowledge and skills of individuals who want to become ethical hackers. 312-50v11 exam covers a wide range of topics related to ethical hacking, including network security, system security, web application security, cryptography, and more. It is an internationally recognized certification that is highly valued in the cybersecurity industry.
Latest Verified & Correct 312-50v11 Questions: https://torrentpdf.actual4exams.com/312-50v11-real-braindumps.html