312-50v12 exam overviews – Prepaway Exam Dumps

312-50v12 Certification Overview – [Feb 28, 2023] Latest 312-50v12 PDF Dumps

The Best ECCouncil 312-50v12 Study Guides and Dumps of 2023

ECCouncil 312-50v12 Exam Syllabus Topics:

Topic	Details
Topic 1	IoT Architecture, IoT Communication Models, OWASP Top 10 IoT Threats, IoT Vulnerabilities Denial-of-Service
Topic 2	Cloud Computing, Types of Cloud Computing Services, Cloud Deployment Models, Fog and Edge Computing Vulnerability Analysis
Topic 3	Foot Printing and Reconnaissance Social Engineering, Types of Social Engineering, Phishing, Phishing Tools
Topic 4	Email Encryption, Disk Encryption, Cryptanalysis, Cryptography Attacks, Key Stretching SQL Injection Methodology, SQL Injection Tools, Signature Evasion Techniques
Topic 5	Network Sniffing, Wiretapping, MAC Flooding, DHCP Starvation Attack, ARP Spoofing Attack Hacking Web Applications
Topic 6	Evading IDS, Firewalls, and Honeypots Elements of Information Security, Cyber Kill Chain Methodology, MITRE ATT&CK Framework
Topic 7	Hacking Wireless Networks Hacker Classes, Ethical Hacking, Information Assurance (IA), Risk Management, Incident Management
Topic 8	Introduction to Ethical Hacking Malware, Components of Malware, APT, Trojan, Types of Trojans, Exploit Kits, Virus, Virus Lifecycle
Topic 9	Cryptography Encryption Algorithms, MD5 and MD6 Hash Calculators, Cryptography Tools, Public Key Infrastructure (PKI)
Topic 10	Man-in-the-Browser Attack, Client-side Attacks, Session Replay Attacks, Session Fixation Attack IoT Hacking Methodology, IoT Hacking Tools, IoT Security Tools, IT OT Convergence (IIOT)
Topic 11	SQL Injection, Types of SQL injection, Blind SQL Injection Web Application Architecture, Web Application Threats, OWASP Top 10 Application Security Risks
Topic 12	DoS DDoS Attack Tools, DoS DDoS Attack Detection Techniques, DoS DDoS Protection Tools Types of Viruses, Ransomware, Computer Worms, Fileless Malware, Malware Analysis
Topic 13	Hacking Mobile Platforms DoS Attack, DDoS Attack, Botnets, DoS DDoS Attack Techniques

NO.175 Jack, a disgruntled ex-employee of Incalsol Ltd., decided to inject fileless malware into Incalsol’s systems. To deliver the malware, he used the current employees’ email IDs to send fraudulent emails embedded with malicious links that seem to be legitimate. When a victim employee clicks on the link, they are directed to a fraudulent website that automatically loads Flash and triggers the exploit. What is the technique used byjack to launch the fileless malware on the target systems?

In-memory exploits

Phishing

Legitimate applications

Script-based injection

NO.176 The company ABC recently contracts a new accountant. The accountant will be working with the financial statements. Those financial statements need to be approved by the CFO and then they will be sent to the accountant but the CFO is worried because he wants to be sure that the information sent to the accountant was not modified once he approved it. Which of the following options can be useful to ensure the integrity of the data?

The CFO can use a hash algorithm in the document once he approved the financial statements

The CFO can use an excel file with a password

The financial statements can be sent twice, one by email and the other delivered in USB and the accountant can compare both to be sure is the same document

The document can be sent to the accountant using an exclusive USB for that document

NO.177 Allen, a professional pen tester, was hired by xpertTech solutWns to perform an attack simulation on the organization’s network resources. To perform the attack, he took advantage of the NetBIOS API and targeted the NetBIOS service. B/enumerating NetBIOS, he found that port 139 was open and could see the resources that could be accessed or viewed on a remote system. He came across many NetBIOS codes during enumeration.
identify the NetBIOS code used for obtaining the messenger service running for the logged-in user?

<1B>

<00>

<03>

<20>

NO.178 You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly.
What is the best Nmap command you will use?

nmap -T4 -q 10.10.0.0/24

nmap -T4 -F 10.10.0.0/24

nmap -T4 -r 10.10.1.0/24

nmap -T4 -O 10.10.0.0/24

NO.179 Which of the following tools performs comprehensive tests against web servers, including dangerous files and CGIs?

Nikto

John the Ripper

Dsniff

Snort

NO.180 Your company performs penetration tests and security assessments for small and medium-sized business in the local are a. During a routine security assessment, you discover information that suggests your client is involved with human trafficking.
What should you do?

Confront the client in a respectful manner and ask her about the data.

Copy the data to removable media and keep it in case you need it.

Ignore the data and continue the assessment until completed as agreed.

Immediately stop work and contact the proper legal authorities.

NO.181 By using a smart card and pin, you are using a two-factor authentication that satisfies

Something you are and something you remember

Something you have and something you know

Something you know and something you are

Something you have and something you are

NO.182 Robin, a professional hacker, targeted an organization’s network to sniff all the traffic. During this process.
Robin plugged in a rogue switch to an unused port in the LAN with a priority lower than any other switch in the network so that he could make it a root bridge that will later allow him to sniff all the traffic in the network.
What is the attack performed by Robin in the above scenario?

ARP spoofing attack

VLAN hopping attack

DNS poisoning attack

STP attack

NO.183 John is investigating web-application firewall logs and observers that someone is attempting to inject the following:
char buff[10];
buff[>o] – ‘a’:
What type of attack is this?

CSRF

XSS

Buffer overflow

SQL injection

Buffer overflow this attack is an anomaly that happens when software writing data to a buffer overflows the buffer’s capacity, leading to adjacent memory locations being overwritten. In other words, an excessive amount of information is being passed into a container that doesn’t have enough space, which information finishes up replacing data in adjacent containers. Buffer overflows are often exploited by attackers with a goal of modifying a computer’s memory so as to undermine or take hold of program execution.

What’s a buffer?
A buffer, or data buffer, is a neighborhood of physical memory storage wont to temporarily store data while it’s being moved from one place to a different . These buffers typically sleep in RAM memory. Computers frequently use buffers to assist improve performance; latest hard drives cash in of buffering to efficiently access data, and lots of online services also use buffers. for instance , buffers are frequently utilized in online video streaming to stop interruption. When a video is streamed, the video player downloads and stores perhaps 20% of the video at a time during a buffer then streams from that buffer. This way, minor drops in connection speed or quick service disruptions won’t affect the video stream performance. Buffers are designed to contain specific amounts of knowledge . Unless the program utilizing the buffer has built-in instructions to discard data when an excessive amount of is shipped to the buffer, the program will overwrite data in memory adjacent to the buffer. Buffer overflows are often exploited by attackers to corrupt software. Despite being well-understood, buffer overflow attacks are still a serious security problem that torment cyber-security teams. In 2014 a threat referred to as ‘heartbleed’ exposed many many users to attack due to a buffer overflow vulnerability in SSL software.
How do attackers exploit buffer overflows?
An attacker can deliberately feed a carefully crafted input into a program which will cause the program to undertake and store that input during a buffer that isn’t large enough, overwriting portions of memory connected to the buffer space. If the memory layout of the program is well-defined, the attacker can deliberately overwrite areas known to contain executable code. The attacker can then replace this code together with his own executable code, which may drastically change how the program is meant to figure . For example if the overwritten part in memory contains a pointer (an object that points to a different place in memory) the attacker’s code could replace that code with another pointer that points to an exploit payload. this will transfer control of the entire program over to the attacker’s code.

NO.184 Windows LAN Manager (LM) hashes are known to be weak.
Which of the following are known weaknesses of LM? (Choose three.)

Converts passwords to uppercase.

Hashes are sent in clear text over the network.

Makes use of only 32-bit encryption.

Effective length is 7 characters.

NO.185 Session splicing is an IDS evasion technique in which an attacker delivers data in multiple, small sized packets to the target computer, making it very difficult for an IDS to detect the attack signatures. Which tool can be used to perform session splicing attacks?

tcpsplice

Burp

Hydra

Whisker

Many IDS reassemble communication streams; hence, if a packet is not received within a reasonable period, many IDS stop reassembling and handling that stream. If the application under attack keeps a session active for a longer time than that spent by the IDS on reassembling it, the IDS will stop. As a result, any session after the IDS stops reassembling the sessions will be susceptible to malicious data theft by attackers. The IDS will not log any attack attempt after a successful splicing attack. Attackers can use tools such as Nessus for session splicing attacks.
Did you know that the EC-Council exam shows how well you know their official book? So, there is no “Whisker” in it. In the chapter “Evading IDS” -> “Session Splicing”, the recommended tool for performing a session-splicing attack is Nessus. Where Wisker came from is not entirely clear, but I will assume the author of the question found it while copying Wikipedia.
https://en.wikipedia.org/wiki/Intrusion_detection_system_evasion_techniques One basic technique is to split the attack payload into multiple small packets so that the IDS must reassemble the packet stream to detect the attack. A simple way of splitting packets is by fragmenting them, but an adversary can also simply craft packets with small payloads. The ‘whisker’ evasion tool calls crafting packets with small payloads ‘session splicing’.
By itself, small packets will not evade any IDS that reassembles packet streams. However, small packets can be further modified in order to complicate reassembly and detection. One evasion technique is to pause between sending parts of the attack, hoping that the IDS will time out before the target computer does. A second evasion technique is to send the packets out of order, confusing simple packet re-assemblers but not the target computer.
NOTE: Yes, I found scraps of information about the tool that existed in 2012, but I can not give you unverified information. According to the official tutorials, the correct answer is Nessus, but if you know anything about Wisker, please write in the QA section. Maybe this question will be updated soon, but I’m not sure about that.

NO.186 Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?

Cavity virus

Stealth/Tunneling virus

Polymorphic virus

Macro virus

NO.187 Mary, a penetration tester, has found password hashes in a client system she managed to breach. She needs to use these passwords to continue with the test, but she does not have time to find the passwords that correspond to these hashes. Which type of attack can she implement in order to continue?

LLMNR/NBT-NS poisoning

Internal monologue attack

Pass the ticket

Pass the hash

NO.188 Study the following log extract and identify the attack.

Hexcode Attack

Cross Site Scripting

Multiple Domain Traversal Attack

Unicode Directory Traversal Attack

NO.189 What is a NULL scan?

A scan in which all flags are turned off

A scan in which certain flags are off

A scan in which all flags are on

A scan in which the packet size is set to zero

A scan with an illegal packet size

NO.190 A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?

Perform a vulnerability scan of the system.

Determine the impact of enabling the audit feature.

Perform a cost/benefit analysis of the audit feature.

Allocate funds for staffing of audit log review.

NO.191 jane, an ethical hacker. Is testing a target organization’s web server and website to identity security loopholes. In this process, she copied the entire website and its content on a local drive to view the complete profile of the site’s directory structure, file structure, external links, images, web pages, and so on. This information helps jane map the website’s directories and gain valuable information. What is the attack technique employed by Jane in the above scenario?

website mirroring

Session hijacking

Web cache poisoning

Website defacement

NO.192 An attacker utilizes a Wi-Fi Pineapple to run an access point with a legitimate-looking SSID for a nearby business in order to capture the wireless password. What kind of attack is this?

MAC spoofing attack

Evil-twin attack

War driving attack

Phishing attack

NO.193 Bobby, an attacker, targeted a user and decided to hijack and intercept all their wireless communications. He installed a fake communication tower between two authentic endpoints to mislead the victim. Bobby used this virtual tower to interrupt the data transmission between the user and real tower, attempting to hijack an active session, upon receiving the users request. Bobby manipulated the traffic with the virtual tower and redirected the victim to a malicious website. What is the attack performed by Bobby in the above scenario?

Wardriving

KRACK attack

jamming signal attack

aLTEr attack

NO.194 Which tier in the N-tier application architecture is responsible for moving and processing data between the tiers?

Presentation tier

Application Layer

Logic tier

Data tier

NO.195 Which system consists of a publicly available set of databases that contain domain name registration contact information?

WHOIS

CAPTCHA

IANA

IETF

NO.196 Juliet, a security researcher in an organization, was tasked with checking for the authenticity of images to be used in the organization’s magazines. She used these images as a search query and tracked the original source and details of the images, which included photographs, profile pictures, and memes. Which of the following footprinting techniques did Rachel use to finish her task?

Reverse image search

Meta search engines

Advanced image search

Google advanced search

NO.197 Password cracking programs reverse the hashing process to recover passwords. (True/False.)

True

False

NO.198 Nedved is an IT Security Manager of a bank in his country. One day. he found out that there is a security breach to his company’s email server based on analysis of a suspicious connection from the email server to an unknown IP Address.
What is the first thing that Nedved needs to do before contacting the incident response team?

Leave it as it Is and contact the incident response te3m right away

Block the connection to the suspicious IP Address from the firewall

Disconnect the email server from the network

Migrate the connection to the backup email server

NO.199 Calvin, a grey-hat hacker, targets a web application that has design flaws in its authentication mechanism. He enumerates usernames from the login form of the web application, which requests users to feed data and specifies the incorrect field in case of invalid credentials. Later, Calvin uses this information to perform social engineering.
Which of the following design flaws in the authentication mechanism is exploited by Calvin?

Insecure transmission of credentials

Verbose failure messages

User impersonation

Password reset mechanism

Valid 312-50v12 Exam Updates – 2023 Study Guide: https://www.prepawayexam.com/ECCouncil/braindumps.312-50v12.ete.file.html

Prepaway Exam Dumps

Tag: 312-50v12 exam overviews

312-50v12 Certification Overview – [Feb 28, 2023] Latest 312-50v12 PDF Dumps [Q175-Q199]

ECCouncil 312-50v12 Exam Syllabus Topics:

Tag Archives: 312-50v12 exam overviews

ECCouncil 312-50v12 Exam Syllabus Topics: