合格できるEC-COUNCIL 312-50v11のPDF問題集！最近更新された525問あります
更新されたテストエンジン312-50v11練習問題集と練習試験合格させます
312-50V11認証試験は、米国国防総省、国家安全保障局、国家安全保障システム委員会など、多くの政府および民間組織によって世界中で認められています。この試験では、ネットワークセキュリティ、浸透テスト、脆弱性評価、リスク管理における候補者のスキルと知識を検証します。この認定は、情報セキュリティ、ネットワークセキュリティ、ITリスク管理、サイバーセキュリティで働く専門家にとって特に重要です。
EC-Council 312-50V11（認定倫理ハッカー試験（CEH V11））は、倫理的ハッキングの分野における専門家のスキルと知識を検証するグローバルに認められた認定プログラムです。認定試験は、コンピューターシステム、ネットワーク、およびアプリケーションの脆弱性を特定して活用する候補者の能力をテストするように設計されています。 CEH V11認定試験では、ネットワークセキュリティ、暗号化、Webアプリケーションセキュリティ、ワイヤレスセキュリティなど、幅広いトピックをカバーしています。
質問 # 67
What is the proper response for a NULL scan if the port is closed?
- A. SYN
- B. RST
- C. PSH
- D. ACK
- E. FIN
- F. No response
正解：B
質問 # 68
Leverox Solutions hired Arnold, a security professional, for the threat intelligence process. Arnold collected information about specific threats against the organization. From this information, he retrieved contextual information about security events and incidents that helped him disclose potential risks and gain insight into attacker methodologies. He collected the information from sources such as humans, social media, and chat rooms as well as from events that resulted in cyberattacks. In this process, he also prepared a report that includes identified malicious activities, recommended courses of action, and warnings for emerging attacks.
What is the type of threat intelligence collected by Arnold in the above scenario?
- A. Operational threat intelligence
- B. Strategic threat intelligence
- C. Technical threat intelligence
- D. Tactical threat intelligence
正解：A
質問 # 69
Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397-1872883824-861252104-501. What needs to happen before Matthew has full administrator access?
- A. He already has admin privileges, as shown by the "501" at the end of the SID.
- B. He must perform privilege escalation.
- C. He needs to disable antivirus protection.
- D. He needs to gain physical access.
正解：B
質問 # 70
env x='(){ :;};echo exploit' bash -c 'cat/etc/passwd'
What is the Shellshock bash vulnerability attempting to do on a vulnerable Linux host?
- A. Changes all passwords in passwd
- B. Display passwd content to prompt
- C. Removes the passwd file
- D. Add new user to the passwd file
正解：B
質問 # 71
Password cracking programs reverse the hashing process to recover passwords. (True/False.)
- A. True
- B. False
正解：B
質問 # 72
A network administrator discovers several unknown files in the root directory of his Linux FTP server. One of the files is a tarball, two are shell script files, and the third is a binary file is named "nc." The FTP server's access logs show that the anonymous user account logged in to the server, uploaded the files, and extracted the contents of the tarball and ran the script using a function provided by the FTP server's software. The "ps" command shows that the "nc" file is running as process, and the netstat command shows the "nc" process is listening on a network port.
What kind of vulnerability must be present to make this remote attack possible?
- A. Brute force login
- B. Directory traversal
- C. File system permissions
- D. Privilege escalation
正解：C
質問 # 73
Dorian Is sending a digitally signed email to Polly, with which key is Dorian signing this message and how is Poly validating It?
- A. Dorian is signing the message with Polys private key. and Poly will verify mat the message came from Dorian by using Dorian's public key.
- B. Dorian is signing the message with his private key. and Poly will verify that the message came from Dorian by using Dorian's public key.
- C. Dorian is signing the message with his public key. and Poly will verify that the message came from Dorian by using Dorian's private key.
- D. Dorian Is signing the message with Polys public key. and Poly will verify that the message came from Dorian by using Dorian's public key.
正解：B
質問 # 74
A user on your Windows 2000 network has discovered that he can use L0phtcrack to sniff the SMB exchanges which carry user logons. The user is plugged into a hub with 23 other systems.
However, he is unable to capture any logons though he knows that other users are logging in.
What do you think is the most likely reason behind this?
- A. Windows logons cannot be sniffed.
- B. There is a NIDS present on that segment.
- C. L0phtcrack only sniffs logons to web servers.
- D. Kerberos is preventing it.
正解：D
質問 # 75
Steve, an attacker, created a fake profile on a social media website and sent a request to Stella. Stella was enthralled by Steve's profile picture and the description given for his profile, and she initiated a conversation with him soon after accepting the request. After a few days. Sieve started asking about her company details and eventually gathered all the essential information regarding her company. What is the social engineering technique Steve employed in the above scenario?
- A. Honey trap
- B. Piggybacking
- C. Baiting
- D. Diversion theft
正解：A
解説：
Explanation
The honey trap is a technique where an attacker targets a person online by pretending to be an attractive person and then begins a fake online relationship to obtain confidential information about the target company. In this technique, the victim is an insider who possesses critical information about the target organization.
Baiting is a technique in which attackers offer end users something alluring in exchange for important information such as login details and other sensitive data. This technique relies on the curiosity and greed of the end-users. Attackers perform this technique by leaving a physical device such as a USB flash drive containing malicious files in locations where people can easily find them, such as parking lots, elevators, and bathrooms. This physical device is labeled with a legitimate company's logo, thereby tricking end-users into trusting it and opening it on their systems. Once the victim connects and opens the device, a malicious file downloads. It infects the system and allows the attacker to take control.
For example, an attacker leaves some bait in the form of a USB drive in the elevator with the label "Employee Salary Information 2019" and a legitimate company's logo. Out of curiosity and greed, the victim picks up the device and opens it up on their system, which downloads the bait. Once the bait is downloaded, a piece of malicious software installs on the victim's system, giving the attacker access.
質問 # 76
You have been authorized to perform a penetration test against a website. You want to use Google dorks to footprint the site but only want results that show file extensions. What Google dork operator would you use?
- A. site
- B. filetype
- C. inurl
- D. ext
正解：B
質問 # 77
Infecting a system with malware and using phishing to gain credentials to a system or web application are examples of which phase of the ethical hacking methodology?
- A. Reconnaissance
- B. Gaining access
- C. Maintaining access
- D. Scanning
正解：B
質問 # 78
What is the following command used for?
sqlmap.py-u ,,http://10.10.1.20/?p=1&forumaction=search" -dbs
- A. Creating backdoors using SQL injection
- B. Searching database statements at the IP address given
- C. Retrieving SQL statements being executed on the database
- D. A Enumerating the databases in the DBMS for the URL
正解：A
質問 # 79
What would be the fastest way to perform content enumeration on a given web server by using the Gobuster tool?
- A. Performing content enumeration using a wordlist
- B. Performing content enumeration using the bruteforce mode and 10 threads
- C. Skipping SSL certificate verification
- D. Performing content enumeration using the bruteforce mode and random file extensions
正解：A
質問 # 80
During the enumeration phase. Lawrence performs banner grabbing to obtain information such as OS details and versions of services running. The service that he enumerated runs directly on TCP port 445.
Which of the following services is enumerated by Lawrence in this scenario?
- A. Server Message Block (SMB)
- B. Telnet
- C. Remote procedure call (RPC)
- D. Network File System (NFS)
正解：A
解説：
Worker Message Block (SMB) is an organization document sharing and information texture convention. SMB is utilized by billions of gadgets in a different arrangement of working frameworks, including Windows, MacOS, iOS , Linux, and Android. Customers use SMB to get to information on workers. This permits sharing of records, unified information the board, and brought down capacity limit needs for cell phones. Workers additionally use SMB as a feature of the Software-characterized Data Center for outstanding burdens like grouping and replication.
Since SMB is a far off record framework, it requires security from assaults where a Windows PC may be fooled into reaching a pernicious worker running inside a confided in organization or to a far off worker outside the organization edge. Firewall best practices and arrangements can upgrade security keeping malevolent traffic from leaving the PC or its organization.
For Windows customers and workers that don't have SMB shares, you can obstruct all inbound SMB traffic utilizing the Windows Defender Firewall to keep far off associations from malignant or bargained gadgets. In the Windows Defender Firewall, this incorporates the accompanying inbound principles.
You should also create a new blocking rule to override any other inbound firewall rules. Use the following suggested settings for any Windows clients or servers that do not host SMB Shares:
Name: Block all inbound SMB 445
Description: Blocks all inbound SMB TCP 445 traffic. Not to be applied to domain controllers or computers that host SMB shares.
Action: Block the connection
Programs: All
Remote Computers: Any
Protocol Type: TCP
Local Port: 445
Remote Port: Any
Profiles: All
Scope (Local IP Address): Any
Scope (Remote IP Address): Any
Edge Traversal: Block edge traversal
You must not globally block inbound SMB traffic to domain controllers or file servers. However, you can restrict access to them from trusted IP ranges and devices to lower their attack surface. They should also be restricted to Domain or Private firewall profiles and not allow Guest/Public traffic.
質問 # 81
Louis, a professional hacker, had used specialized tools or search engines to encrypt all his browsing activity and navigate anonymously to obtain sensitive/hidden information about official government or federal databases. After gathering the information, he successfully performed an attack on the target government organization without being traced.
Which of the following techniques is described in the above scenario?
- A. VPN footprinting
- B. Website footprinting
- C. VoIP footprinting
- D. Dark web footprinting
正解：A
質問 # 82
Tony wants to integrate a 128-bit symmetric block cipher with key sizes of 128,192, or 256 bits into a software program, which involves 32 rounds of computational operations that include substitution and permutation operations on four 32-bit word blocks using 8-variable S-boxes with 4-bit entry and 4-bit exit. Which of the following algorithms includes all the above features and can be integrated by Tony into the software program?
- A. TEA
- B. serpent
- C. CAST-128
- D. RC5
正解：B
質問 # 83
Steve, a scientist who works in a governmental security agency, developed a technological solution to identify people based on walking patterns and implemented this approach to a physical control access.
A camera captures people walking and identifies the individuals using Steve's approach.
After that, people must approximate their RFID badges. Both the identifications are required to open the door.
In this case, we can say:
- A. The solution will have a high level of false positives
- B. Although the approach has two phases, it actually implements just one authentication factor
- C. The solution implements the two authentication factors: physical object and physical characteristic
- D. Biological motion cannot be used to identify people
正解：C
質問 # 84
Annie, a cloud security engineer, uses the Docker architecture to employ a client/server model in the application she is working on. She utilizes a component that can process API requests and handle various Docker objects, such as containers, volumes. Images, and networks. What is the component of the Docker architecture used by Annie in the above scenario?
- A. Docker registries
- B. Docker objects
- C. Docker client
- D. Docker daemon
正解：B
解説：
Explanation
When you use docker, you're making and using pictures, containers, networks, volumes, plugins, and alternative objects. This section could be a brief summary of some of those objects.
IMAGESAn image is a read-only template with instructions for making a docker container. Often, a picture relies on another image, with some further customization. for instance, you'll build a picture that relies on the ubuntu image, however installs the Apache internet server and your application, still because the configuration details required to create your application run.
You may produce your own pictures otherwise you might solely use those created by others and printed in a registry. to create your own image, you produce a Dockerfile with a simple syntax for defining the steps needed to make the image and run it. every instruction in a Dockerfile creates a layer within the image. once you change the Dockerfile and rebuild the image, solely those layers that have modified square measure remodeled. this is often a part of what makes pictures therefore light-weight, small, and fast, when put next to alternative virtualization technologies.
CONTAINERSA instrumentality could be a runnable instance of a picture. you'll produce, start, stop, move, or delete a instrumentality victimization the docker API or user interface. you'll connect a instrumentality to at least one or a lot of networks, attach storage to that, or perhaps produce a brand new image supported its current state.
By default, a container is relatively well isolated from alternative containers and its host machine. you'll management however isolated a container's network, storage, or alternative underlying subsystems square measure from alternative containers or from the host machine.
A instrumentality is outlined by its image still as any configuration choices you offer to that once you produce or begin it. once a instrumentality is removed, any changes to its state that aren't hold on in persistent storage disappear.
Example docker run commandThe following command runs an ubuntu container, attaches interactively to your native command-line session, and runs /bin/bash.
$ docker run -i -t ubuntu /bin/bash
When you run this command, the subsequent happens (assuming you're victimization the default written account configuration):
* If you are doing not have the ubuntu image locally, docker pulls it from your designed registry, like you had run docker pull ubuntu manually.
* docker creates a new container, like you had run a docker container create command manually.
* docker allocates a read-write filesystem to the container, as its final layer. this permits a running container to make or modify files and directories in its native filesystem.
* dock-walloper creates a network interface to attach the docker to the default network, since you did not specify any networking choices. This includes assigning an IP address to the instrumentality. By default, containers will connect with external networks victimization the host machine's network connection.
* docker starts the container and executes /bin/bash. as a result of the container is running interactively and connected to your terminal (due to the -i and -t flags), you'll offer input using your keyboard whereas the output is logged to your terminal.
* when you type exit to terminate the /bin/bash command, the container stops however isn't removed.
you'll begin it once more or take away it.
SERVICESServices permit you to scale containers across multiple docker daemons, that all work along as a swarm with multiple managers and employees. every member of a swarm could be a docker daemon, and every one the daemons communicate victimization the docker API. A service permits you to outline the desired state, like the quantity of replicas of the service that has to be offered at any given time. By default, the service is load-balanced across all employee nodes. To the consumer, the docker API service seems to be one application. docker Engine supports swarm mode in docker one.12 and better.
質問 # 85
As a securing consultant, what are some of the things you would recommend to a company to ensure DNS security?
- A. Harden DNS servers
- B. Restrict Zone transfers
- C. Have subnet diversity between DNS servers
- D. Use the same machines for DNS and other applications
- E. Use split-horizon operation for DNS servers
正解：A、B、C、E
質問 # 86
While browsing his Facebook teed, Matt sees a picture one of his friends posted with the caption. "Learn more about your friends!", as well as a number of personal questions. Matt is suspicious and texts his friend, who confirms that he did indeed post it. With assurance that the post is legitimate. Matt responds to the questions on the post, a few days later. Mates bank account has been accessed, and the password has been changed. What most likely happened?
- A. Matt's computer was infected with a keylogger.
- B. Matt inadvertently provided the answers to his security questions when responding to the post.
- C. Matt Inadvertently provided his password when responding to the post.
- D. Matt's bank-account login information was brute forced.
正解：B
質問 # 87
Robin, a professional hacker, targeted an organization's network to sniff all the traffic. During this process.
Robin plugged in a rogue switch to an unused port in the LAN with a priority lower than any other switch in the network so that he could make it a root bridge that will later allow him to sniff all the traffic in the network.
What is the attack performed by Robin in the above scenario?
- A. STP attack
- B. VLAN hopping attack
- C. DNS poisoning attack
- D. ARP spoofing attack
正解：C
解説：
Domain Name Server (DNS) spoofing (a.k.a. DNS cache poisoning) is an attack in which altered DNS records are used to redirect online traffic to a fraudulent website that resembles its intended destination.
Once there, users are prompted to login into (what they believe to be) their account, giving the perpetrator the opportunity to steal their access credentials and other types of sensitive information. Furthermore, the malicious website is often used to install worms or viruses on a user's computer, giving the perpetrator long-term access to it and the data it stores.
Methods for executing a DNS spoofing attack include:
Man in the middle (MITM)- The interception of communications between users and a DNS server in order to route users to a different/malicious IP address.
DNS server compromise- The direct hijacking of a DNS server, which is configured to return a malicious IP address.
DNS cache poisoning example
The following example illustrates a DNS cache poisoning attack, in which an attacker (IP 192.168.3.300) intercepts a communication channel between a client (IP 192.168.1.100) and a server computer belonging to the website www.estores.com (IP 192.168.2.200).
In this scenario, a tool (e.g., arpspoof) is used to dupe the client into thinking that the server IP is 192.168.3.300. At the same time, the server is made to think that the client's IP is also 192.168.3.300.
Such a scenario would proceed as follows:
The attacker uses arpspoof to issue the command: arpspoof 192.168.1.100 192.168.2.200. This modifies the MAC addresses in the server's ARP table, causing it to think that the attacker's computer belongs to the client.
The attacker once again uses arpspoof to issue the command: arpspoof 192.168.2.200 192.168.1.100, which tells the client that the perpetrator's computer is the server.
The attacker issues the Linux command: echo 1> /proc/sys/net/ipv4/ip_forward. As a result, IP packets sent between the client and server are forwarded to the perpetrator's computer.
The host file, 192.168.3.300 estores.com is created on the attacker's local computer, which maps the website www.estores.com to their local IP.
The perpetrator sets up a web server on the local computer's IP and creates a fake website made to resemble www.estores.com.
Finally, a tool (e.g., dnsspoof) is used to direct all DNS requests to the perpetrator's local host file. The fake website is displayed to users as a result and, only by interacting with the site, malware is installed on their computers.
質問 # 88
This wireless security protocol allows 192-bit minimum-strength security protocols and cryptographic tools to protect sensitive data, such as GCMP-2S6. MMAC-SHA384, and ECDSA using a 384-bit elliptic curve. Which is this wireless security protocol?
- A. WPA2 Personal
- B. WPA2-Enterprise
- C. WPA3-Personal
- D. WPA3-Enterprise
正解：D
解説：
Enterprise, governments, and financial institutions have greater security with WPA3-Enterprise. WPA3-Enterprise builds upon WPA2 and ensures the consistent application of security protocol across the network. WPA3-Enterprise also offers an optional mode using 192-bit minimum-strength security protocols and cryptographic tools to raised protect sensitive data: * Authenticated encryption: 256-bit Galois/Counter Mode Protocol (GCMP-256) * Key derivation and confirmation: 384-bit Hashed Message Authentication Mode (HMAC) with Secure Hash Algorithm (HMAC-SHA384) * Key establishment and authentication: Elliptic Curve Diffie-Hellman (ECDH) exchange and Elliptic Curve Digital Signature Algorithm (ECDSA) employing a 384-bit elliptic curve * Robust management frame protection: 256-bit Broadcast/Multicast Integrity Protocol Galois Message Authentication Code (BIP-GMAC-256) The 192-bit security mode offered by WPA3-Enterprise ensures the proper combination of cryptographic tools are used and sets a uniform baseline of security within a WPA3 network.
It protects sensitive data using many cryptographic algorithms It provides authenticated encryption using GCMP-256 It uses HMAC-SHA-384 to generate cryptographic keys It uses ECDSA-384 for exchanging keys
質問 # 89
......
EC-COUNCIL 312-50v11問題集でカバー率リアル試験問題：https://www.goshiken.com/EC-COUNCIL/312-50v11-mondaishu.html
問題集お試しセット312-50v11テストエンジン問題集トレーニングには525問あります：https://drive.google.com/open?id=1YKMfsb-fwFIZj3F7UG2mpbnfKo652irL