312-50v12 Free Questions

Question #10

Your company was hired by a small healthcare provider to perform a technical assessment on the network.

What is the best approach for discovering vulnerabilities on a Windows-based computer?

A . Use the built-in Windows Update tool
B . Use a scan tool like Nessus
C . Check MITRE.org for the latest list of CVE findings
D . Create a disk image of a clean Windows installation

Reveal Solution Hide Solution

Question #12

A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the Prometric Online Testing C Reports https://ibt1.prometric.com/users/custom/report_queue/rq_str… corporate network.

What tool should the analyst use to perform a Blackjacking attack?

A . Paros Proxy
B . BBProxy
C . Blooover
D . BBCrack

Reveal Solution Hide Solution

Question #13

Todd has been asked by the security officer to purchase a counter-based authentication system.

Which of the following best describes this type of system?

A . A biometric system that bases authentication decisions on behavioral attributes.
B . A biometric system that bases authentication decisions on physical attributes.
C . An authentication system that creates one-time passwords that are encrypted with secret keys.
D . An authentication system that uses passphrases that are converted into virtual passwords.

Reveal Solution Hide Solution

Question #14

During a black-box pen test you attempt to pass IRC traffic over port 80/TCP from a compromised web enabled host. The traffic gets blocked; however, outbound HTTP traffic is unimpeded.

What type of firewall is inspecting outbound traffic?

A . Circuit
B . Stateful
C . Application
D . Packet Filtering

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

https://en.wikipedia.org/wiki/Internet_Relay_Chat

Internet Relay Chat (IRC) is an application layer protocol that facilitates communication in text. The chat process works on a client/server networking model. IRC clients are computer programs that users can install on their system or web-based applications running either locally in the browser or on a third-party server. These clients communicate with chat servers to transfer messages to other clients.

IRC is a plaintext protocol that is officially assigned port 194, according to IANA. However, running the service on this port requires running it with root-level permissions, which is inadvisable. As a result, the well-known port for IRC is 6667, a high-number port that does not require elevated privileges. However, an IRC server can also be configured to run on other ports as well.

You can’t tell if an IRC server is designed to be malicious solely based on port number.

Still, if you see an IRC server running on port a WKP such as 80, 8080, 53, 443, it’s almost always going to be malicious; the only real reason for IRCD to be running on port 80 is to try to evade firewalls.

https://en.wikipedia.org/wiki/Application_firewall

An application firewall is a form of firewall that controls input/output or system calls of an application or service. It operates by monitoring and blocking communications based on a configured policy, generally with predefined rule sets to choose from. The application firewall can control communications up to the OSI model’s application layer, which is the highest operating layer, and where it gets its name. The two primary categories of application firewalls are network-based and host-based.

Application layer filtering operates at a higher level than traditional security appliances. This allows packet decisions to be made based on more than just source/destination IP Addresses or ports. It can also use information spanning across multiple connections for any given host.

Network-based application firewalls

Network-based application firewalls operate at the application layer of a TCP/IP stack. They can understand certain applications and protocols such as File Transfer Protocol (FTP), Domain Name System (DNS), or Hypertext Transfer Protocol (HTTP). This allows it to identify unwanted applications or services using a non-standard port or detect if an allowed protocol is being abused.

Host-based application firewalls

A host-based application firewall monitors application system calls or other general system communication. This gives more granularity and control but is limited to only protecting the host it is running on. Control is applied by filtering on a per-process basis. Generally, prompts are used to define rules for processes that have not yet received a connection. Further filtering can be done by examining the process ID of the owner of the data packets. Many host-based application firewalls are combined or used in conjunction with a packet filter.

Question #15

Which of the following tools can be used to perform a zone transfer?

A . NSLookup
B . Finger
C . Dig
D . Sam Spade
E . Host
F . Netcat
G . Neotrace

Reveal Solution Hide Solution

Question #16

Bob received this text message on his mobile phone: “Hello, this is Scott Smelby from the

Yahoo Bank. Kindly contact me for a vital transaction on: [email protected]”.

Which

statement below is true?

A . This is a scam as everybody can get a @yahoo address, not the Yahoo customer service employees.
B . This is a scam because Bob does not know Scott.
C . Bob should write to [email protected] to verify the identity of Scott.
D . This is probably a legitimate message as it comes from a respectable organization.

Reveal Solution Hide Solution

Question #17

Which of the following tools are used for enumeration? (Choose three.)

A . SolarWinds
B . USER2SID
C . Cheops
D . SID2USER
E . DumpSec

Reveal Solution Hide Solution

Question #18

Let’s imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B.

How do you prevent DNS spoofing?

A . Install DNS logger and track vulnerable packets
B . Disable DNS timeouts
C . Install DNS Anti-spoofing
D . Disable DNS Zone Transfer

Reveal Solution Hide Solution

Question #18

Let’s imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B.

How do you prevent DNS spoofing?

A . Install DNS logger and track vulnerable packets
B . Disable DNS timeouts
C . Install DNS Anti-spoofing
D . Disable DNS Zone Transfer

Reveal Solution Hide Solution

Question #20

When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator’s Computer to update the router configuration.

What type of an alert is this?

A . False negative
B . True negative
C . True positive
D . False positive

Reveal Solution Hide Solution

[email protected]

Monday - Sunday 9:00am - 6:00pm

EC-Council 312-50v12 Real Exam Questions

The questions for 312-50v12 were last updated at Nov 19,2024.

[email protected]

Monday - Sunday 9:00am - 6:00pm