[2022年03月15日] 更新された312-50v11試験PDF問題集にはGoShiken合格保証付き [Q34-Q51]

[2022年03月15日] 更新された312-50v11試験PDF問題集にはGoShiken合格保証付き

あなたを合格させるEC-COUNCIL試験には312-50v11試験問題集

質問 34
PGP, SSL, and IKE are all examples of which type of cryptography?

• A. Secret Key
• B. Public Key
• C. Hash Algorithm
• D. Digest

正解: B

 

質問 35
To create a botnet. the attacker can use several techniques to scan vulnerable machines. The attacker first collects Information about a large number of vulnerable machines to create a list. Subsequently, they infect the machines. The list Is divided by assigning half of the list to the newly compromised machines. The scanning process runs simultaneously. This technique ensures the spreading and installation of malicious code in little time.
Which technique is discussed here?

• A. Permutation scanning technique
• B. Topological scanning technique
• C. Hit-list-scanning technique
• D. Subnet scanning technique

正解: C

解説:
One of the biggest problems a worm faces in achieving a very fast rate of infection is "getting off the ground." although a worm spreads exponentially throughout the early stages of infection, the time needed to infect say the first 10,000 hosts dominates the infection time.
There is a straightforward way for an active worm a simple this obstacle, that we term hit-list scanning. Before the worm is free, the worm author collects a listing of say ten,000 to 50,000 potentially vulnerable machines, ideally ones with sensible network connections. The worm, when released onto an initial machine on this hit-list, begins scanning down the list. once it infects a machine, it divides the hit-list in half, communicating half to the recipient worm, keeping the other half.
This fast division ensures that even if only 10-20% of the machines on the hit-list are actually vulnerable, an active worm can quickly bear the hit-list and establish itself on all vulnerable machines in only some seconds. though the hit-list could begin at 200 kilobytes, it quickly shrinks to nothing during the partitioning. This provides a great benefit in constructing a quick worm by speeding the initial infection.
The hit-list needn't be perfect: a simple list of machines running a selected server sort could serve, though larger accuracy can improve the unfold. The hit-list itself is generated victimization one or many of the following techniques, ready well before, typically with very little concern of detection.
Stealthy scans. Portscans are so common and then wide ignored that even a quick scan of the whole net would be unlikely to attract law enforcement attention or over gentle comment within the incident response community. However, for attackers wish to be particularly careful, a randomised sneaky scan taking many months would be not possible to attract much attention, as most intrusion detection systems are not currently capable of detecting such low-profile scans. Some portion of the scan would be out of date by the time it had been used, however abundant of it'd not.
Distributed scanning. an assailant might scan the web using a few dozen to some thousand already-compromised "zombies," the same as what DDOS attackers assemble in a very fairly routine fashion. Such distributed scanning has already been seen within the wild-Lawrence Berkeley National Laboratory received ten throughout the past year.
DNS searches. Assemble a list of domains (for example, by using wide offered spam mail lists, or trolling the address registries). The DNS will then be searched for the science addresses of mail-servers (via mx records) or net servers (by looking for www.domain.com).
Spiders. For net server worms (like Code Red), use Web-crawling techniques the same as search engines so as to produce a list of most Internet-connected web sites. this would be unlikely to draw in serious attention.
Public surveys. for many potential targets there may be surveys available listing them, like the Netcraft survey.
Just listen. Some applications, like peer-to-peer networks, wind up advertising many of their servers. Similarly, many previous worms effectively broadcast that the infected machine is vulnerable to further attack. easy, because of its widespread scanning, during the Code Red I infection it was easy to select up the addresses of upwards of 300,000 vulnerable IIS servers-because each came knock on everyone's door!

 

質問 36
Which of the following DoS tools is used to attack target web applications by starvation of available sessions on the web server?
The tool keeps sessions at halt using never-ending POST transmissions and sending an arbitrarily large content-length header value.

• A. Astacheldraht
• B. LOIC
• C. R-U-Dead-Yet?(RUDY)
• D. My Doom

正解: C

 

質問 37
John wants to send Marie an email that includes sensitive information, and he does not trust the network that he is connected to. Marie gives him the idea of using PGP. What should John do to communicate correctly using this type of encryption?

• A. Use his own private key to encrypt the message.
• B. Use his own public key to encrypt the message.
• C. Use Mane's public key to encrypt the message.
• D. Use Marie's private key to encrypt the message.

正解: C

 

質問 38
_________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.

• A. Trojan
• B. DoS tool
• C. RootKit
• D. Scanner
• E. Backdoor

正解: C

 

質問 39
Henry is a cyber security specialist hired by BlackEye - Cyber Security Solutions. He was tasked with discovering the operating system (OS) of a host. He used the Unicornscan tool to discover the OS of the target system. As a result, he obtained a TTL value, which indicates that the target system is running a Windows OS.
Identify the TTL value Henry obtained, which indicates that the target OS is Windows.

• A. 0
• B. 1
• C. 2
• D. 3

正解: D

 

質問 40
Which type of sniffing technique is generally referred as MiTM attack?

• A. Mac Flooding
• B. Password Sniffing
• C. ARP Poisoning
• D. DHCP Sniffing

正解: C

 

質問 41
A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the Prometric Online Testing - Reports https://ibt1.prometric.com/users/custom/report_queue/rq_str... corporate network. What tool should the analyst use to perform a Blackjacking attack?

• A. BBCrack
• B. Blooover
• C. BBProxy
• D. Paros Proxy

正解: C

 

質問 42
An organization is performing a vulnerability assessment for mitigating threats. James, a pen tester, scanned the organization by building an inventory of the protocols found on the organization's machines to detect which ports are attached to services such as an email server, a web server, or a database server. After identifying the services, he selected the vulnerabilities on each machine and started executing only the relevant tests.
What is the type of vulnerability assessment solution that James employed in the above scenario?

• A. Product-based solutions
• B. Inference-based assessment
• C. Service-based solutions
• D. Tree-based assessment

正解: B

 

質問 43
Johnson, an attacker, performed online research for the contact details of reputed cybersecurity firms. He found the contact number of sibertech.org and dialed the number, claiming himself to represent a technical support team from a vendor. He warned that a specific server is about to be compromised and requested sibertech.org to follow the provided instructions. Consequently, he prompted the victim to execute unusual commands and install malicious files, which were then used to collect and pass critical Information to Johnson's machine. What is the social engineering technique Steve employed in the above scenario?

• A. Elicitation
• B. Quid pro quo
• C. Diversion theft
• D. Phishing

正解: A

解説:
Explanation
Elicitation may be a lively effort to extract project-related information from all relevant stakeholders. the target is to obviously define the business or project objectives. Requirements elicitation uses various analytics and techniques that leave complete, concise and clear requirements to be gathered. A Standish Group report lists "incomplete requirements" because the leading explanation for software project failure and divulges that poor requirements account for 50% of project failures. Poor requirements are a results of sub-standard elicitation which can also cause scope creep, budget overrun and inadequate process redesign.
Elicitation is vital as many stakeholders are unable to accurately articulate the business problem. Therefore, analysts performing the elicitation got to make sure that the wants produced are clearly understandable, useful and relevant. A well defined problem and clear requirements will go an extended thanks to creating the right solution that adds value to the business.

 

質問 44
Jason, an attacker, targeted an organization to perform an attack on its Internet-facing web server with the intention of gaining access to backend servers, which are protected by a firewall. In this process, he used a URL https://xyz.com/feed.php?url:externaIsile.com/feed/to to obtain a remote feed and altered the URL input to the local host to view all the local resources on the target server. What is the type of attack Jason performed In the above scenario?

• A. Web server misconfiguration
• B. web cache poisoning attack
• C. website defacement
• D. Server-side request forgery (SSRF) attack

正解: D

解説:
Explanation
Server-side request forgery (also called SSRF) is a net security vulnerability that allows an assaulter to induce the server-side application to make http requests to associate arbitrary domain of the attacker's choosing.
In typical SSRF examples, the attacker might cause the server to make a connection back to itself, or to other web-based services among the organization's infrastructure, or to external third-party systems.
Another type of trust relationship that often arises with server-side request forgery is where the application server is able to interact with different back-end systems that aren't directly reachable by users. These systems typically have non-routable private informatics addresses. Since the back-end systems normally ordinarily protected by the topology, they typically have a weaker security posture. In several cases, internal back-end systems contain sensitive functionality that may be accessed while not authentication by anyone who is able to act with the systems.
In the preceding example, suppose there's an body interface at the back-end url https://192.168.0.68/admin.
Here, an attacker will exploit the SSRF vulnerability to access the executive interface by submitting the following request:
POST /product/stock HTTP/1.0
Content-Type: application/x-www-form-urlencoded
Content-Length: 118
stockApi=http://192.168.0.68/admin

 

質問 45
In Trojan terminology, what is a covert channel?

• A. It is Reverse tunneling technique that uses HTTPS protocol instead of HTTP protocol to establish connections
• B. A channel that transfers information within a computer system or network in a way that violates the security policy
• C. It is a kernel operation that hides boot processes and services to mask detection
• D. A legitimate communication path within a computer system or network for transfer of data

正解: B

 

質問 46
What would be the fastest way to perform content enumeration on a given web server by using the Gobuster tool?

• A. Performing content enumeration using the bruteforce mode and 10 threads
• B. Shipping SSL certificate verification
• C. Performing content enumeration using the bruteforce mode and random file extensions
• D. Performing content enumeration using a wordlist

正解: D

 

質問 47
Bob is going to perform an active session hijack against Brownies Inc. He has found a target that allows session oriented connections (Telnet) and performs the sequence prediction on the target operating system. He manages to find an active session due to the high level of traffic on the network. What is Bob supposed to do next?

• A. Reverse sequence prediction
• B. Guess the sequence numbers
• C. Take one of the parties offline
• D. Take over the session

正解: B

 

質問 48
Identify the correct terminology that defines the above statement.

• A. Vulnerability Scanning
• B. Penetration Testing
• C. Security Policy Implementation
• D. Designing Network Security

正解: B

 

質問 49
When you are testing a web application, it is very useful to employ a proxy tool to save every request and response. You can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers manually to get more precise results than if using web vulnerability scanners.
What proxy tool will help you find web vulnerabilities?

• A. Maskgen
• B. Dimitry
• C. Burpsuite
• D. Proxychains

正解: C

 

質問 50
You went to great lengths to install all the necessary technologies to prevent hacking attacks, such as expensive firewalls, antivirus software, anti-spam systems and intrusion detection/prevention tools in your company's network. You have configured the most secure policies and tightened every device on your network. You are confident that hackers will never be able to gain access to your network with complex security system in place.
Your peer, Peter Smith who works at the same department disagrees with you.
He says even the best network security technologies cannot prevent hackers gaining access to the network because of presence of "weakest link" in the security chain.
What is Peter Smith talking about?

• A. "zero-day" exploits are the weakest link in the security chain since the IDS will not be able to detect these attacks
• B. "Polymorphic viruses" are the weakest link in the security chain since the Anti-Virus scanners will not be able to detect these attacks
• C. Untrained staff or ignorant computer users who inadvertently become the weakest link in your security chain
• D. Continuous Spam e-mails cannot be blocked by your security system since spammers use different techniques to bypass the filters in your gateway

正解: C

 

質問 51
......

最新でリアルな312-50v11試験問題集解答：https://www.goshiken.com/EC-COUNCIL/312-50v11-mondaishu.html

312-50v11試験問題集でEC-COUNCIL練習テスト問題：https://drive.google.com/open?id=1i9YK9W0PYb2h4e8NvUMaI8sGe9PNkcR_