Free EC-Council 312-50v13 Practice Exams - Page 12 of 29

Question #111

You are attempting to run an Nmap port scan on a web server.

Which of the following commands would result in a scan of common ports with the least amount of noise In order to evade IDS?

A . nmap -sP- -p-65535-T5
B . nmap-A-host-time 99-T1
C . nmap -A -Pn
D . nmap -sT-O- To

Reveal Solution Hide Solution

Question #112

Which among the following is the best example of the third step (delivery) in the cyber kill chain?

A . An intruder sends a malicious attachment via email to a target.
B . An intruder creates malware to be used as a malicious attachment to an email.
C . An intruder’s malware is triggered when a target opens a malicious email attachment.
D . An intruder’s malware is installed on a target’s machine.

Reveal Solution Hide Solution

Question #113

Morris, a professional hacker, performed a vulnerability scan on a target organization by sniffing the traffic on the network lo identify the active systems, network services, applications, and vulnerabilities. He also obtained the list of the users who are currently accessing the network.

What is the type of vulnerability assessment that Morris performed on the target organization?

A . internal assessment
B . Passive assessment
C . External assessment
D . Credentialed assessment

Reveal Solution Hide Solution

Question #114

This type of injection attack does not show any error message. It is difficult to exploit as it returns information when the application is given SQL payloads that elicit a true or false response from the server. By observing the response, an attacker can extract sensitive information.

What type of attack is this?

A . Time-based SQL injection
B . Union SQL injection
C . Error-based SQL injection
D . Blind SQL injection

Reveal Solution Hide Solution

Question #115

Don, a student, came across a gaming app in a third-party app store and Installed it. Subsequently, all the legitimate apps in his smartphone were replaced by deceptive applications that appeared legitimate. He also received many advertisements on his smartphone after Installing the app.

What is the attack performed on Don in the above scenario?

A . SMS phishing attack
B . SIM card attack
C . Agent Smith attack
D . Clickjacking

Reveal Solution Hide Solution

Question #116

What is a “Collision attack” in cryptography?

A . Collision attacks try to get the public key
B . Collision attacks try to break the hash into three parts to get the plaintext value
C . Collision attacks try to break the hash into two parts, with the same bytes in each part to get the private key
D . Collision attacks try to find two inputs producing the same hash

Reveal Solution Hide Solution

Question #117

What piece of hardware on a computer’s motherboard generates encryption keys and only releases a part of the key so that decrypting a disk on a new piece of hardware is not possible?

A . CPU
B . GPU
C . UEFI
D . TPM

Reveal Solution Hide Solution

Question #118

Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two.

What would you call this attack?

A . Interceptor
B . Man-in-the-middle
C . ARP Proxy
D . Poisoning Attack

Reveal Solution Hide Solution

Question #119

Abel, a security professional, conducts penetration testing in his client organization to check for any security loopholes. He launched an attack on the DHCP servers by broadcasting forged DHCP

requests and leased all the DHCP addresses available in the DHCP scope until the server could not issue any more IP addresses. This led to a Dos attack, and as a result, legitimate employees were unable to access the clients network.

Which of the following attacks did Abel perform in the above scenario?

A . VLAN hopping
B . DHCP starvation
C . Rogue DHCP server attack
D . STP attack

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

A DHCP starvation assault is a pernicious computerized assault that objectives DHCP workers. During a DHCP assault, an unfriendly entertainer floods a DHCP worker with false DISCOVER bundles until the DHCP worker debilitates its stock of IP addresses. When that occurs, the aggressor can deny genuine organization clients administration, or even stock an other DHCP association that prompts a Man-in-the-Middle (MITM) assault.

In a DHCP Starvation assault, a threatening entertainer sends a huge load of false DISCOVER parcels until the DHCP worker thinks they’ve used their accessible pool. Customers searching for IP tends to find that there are no IP addresses for them, and they’re refused assistance. Furthermore, they may search for an alternate DHCP worker, one which the unfriendly entertainer may give.

What’s more, utilizing a threatening or sham IP address, that unfriendly entertainer would now be able to peruse all the traffic that customer sends and gets.

In an unfriendly climate, where we have a malevolent machine running some sort of an instrument like Yersinia, there could be a machine that sends DHCP DISCOVER bundles. This malevolent customer doesn’t send a modest bunch C it sends a great many vindictive DISCOVER bundles utilizing sham, made-up MAC addresses as the source MAC address for each solicitation.

In the event that the DHCP worker reacts to every one of these false DHCP DISCOVER parcels, the whole IP address pool could be exhausted, and that DHCP worker could trust it has no more IP delivers to bring to the table to legitimate DHCP demands.

When a DHCP worker has no more IP delivers to bring to the table, ordinarily the following thing to happen would be for the aggressor to get their own DHCP worker. This maverick DHCP worker at that point starts giving out IP addresses.

The advantage of that to the assailant is that if a false DHCP worker is distributing IP addresses, including default DNS and door data, customers who utilize those IP delivers and begin to utilize that default passage would now be able to be directed through the aggressor’s machine. That is all that an unfriendly entertainer requires to play out a man-in-the-center (MITM) assault.

Question #120

in this form of encryption algorithm, every Individual block contains 64-bit data, and three keys are used, where each key consists of 56 bits.

Which is this encryption algorithm?

A . IDEA
B . Triple Data Encryption standard
C . MDS encryption algorithm
D . AES

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

Triple DES is another mode of DES operation. It takes three 64-bit keys, for an overall key length of

192 bits. In Stealth, you merely type within the entire 192-bit (24 character) key instead of entering

each of the three keys individually. The Triple DES DLL then breaks the user-provided key into three

subkeys, padding the keys if necessary in order that they are each 64 bits long. The procedure for

encryption is strictly an equivalent as regular DES, but it’s repeated 3 times, hence the name

Triple DES. the info is encrypted with the primary key, decrypted with the second key, and eventually

encrypted again with the third key.

Triple DES runs 3 times slower than DES, but is far safer if used properly. The procedure for

decrypting something is that the same because the procedure for encryption, except it’s executed in

reverse. Like DES, data is encrypted and decrypted in 64-bit chunks. Although the input key for DES is

64 bits long, the particular key employed by DES is merely 56 bits long. the smallest amount

significant (right-most) bit in each byte may be a parity, and will be set in order that there are always

an odd number of 1s in every byte. These parity bits are ignored, so only the seven most vital bits of

every byte are used, leading to a key length of 56 bits. this suggests that the effective key strength for

Triple DES is really 168 bits because each of the three keys contains 8 parity bits that aren’t used

during the encryption process.

Triple DES Modes

Triple ECB (Electronic Code Book)

• This variant of Triple DES works precisely the same way because the ECB mode of DES.

• this is often the foremost commonly used mode of operation.

Triple CBC (Cipher Block Chaining)

• This method is extremely almost like the quality DES CBC mode.

• like Triple ECB, the effective key length is 168 bits and keys are utilized in an equivalent manner, as described above, but the chaining features of CBC mode also are employed.

• the primary 64-bit key acts because the Initialization Vector to DES.

• Triple ECB is then executed for one 64-bit block of plaintext.

• The resulting ciphertext is then XORed with subsequent plaintext block to be encrypted, and therefore the procedure is repeated.

• This method adds an additional layer of security to Triple DES and is therefore safer than Triple ECB, although it’s not used as widely as Triple ECB.