Eccouncil 312-50v12 Practice Exam Questions

Eccouncil 312-50v12 Sample Question Answers

Question # 1

Mike, a security engineer, was recently hired by BigFox Ltd. The company recently experienced disastrous DoS attacks. The management had instructed Mike to build defensive strategies for the company's IT infrastructure to thwart DoS/DDoS attacks. Mike deployed some countermeasures to handle jamming and scrambling attacks. What is the countermeasure Mike applied to defend against jamming and scrambling attacks?

A. Allow the usage of functions such as gets and strcpy 
B. Allow the transmission of all types of addressed packets at the ISP level 
C. Implement cognitive radios in the physical layer 
D. A Disable TCP SYN cookie protection 

Show Answer

Question # 2

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 no response TCP port 22 no response TCP port 23 Time-to-live exceeded

A. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server 
B. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error 
C. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall 
D. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host 

Show Answer

Question # 3

Which of the following statements is TRUE?

A. Packet Sniffers operate on the Layer 1 of the OSI model. 
B. Packet Sniffers operate on Layer 2 of the OSI model.
 C. Packet Sniffers operate on both Layer 2 & Layer 3 of the OSI model. 
D. Packet Sniffers operate on Layer 3 of the OSI model. 

Show Answer

Question # 4

An organization has automated the operation of critical infrastructure from a remote location. For this purpose, all the industrial control systems are connected to the Internet. To empower the manufacturing process, ensure the reliability of industrial networks, and reduce downtime and service disruption, the organization deckled to install an OT security tool that further protects against security incidents such as cyber espionage, zero-day attacks, and malware. Which of the following tools must the organization employ to protect its critical infrastructure?

A. Robotium 
B. BalenaCloud 
C. Flowmon 
D. IntentFuzzer

Show Answer

Question # 5

Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections. Which of the following attack techniques is used by Stella to compromise the web services?

A. XML injection 
B. WS-Address spoofing 
C. SOAPAction spoofing
D. Web services parsing attacks

Show Answer

Question # 6

What type of a vulnerability/attack is it when the malicious person forces the user’s browser to send an authenticated request to a server?

A. Session hijacking 
B. Server side request forgery 
C. Cross-site request forgery 
D. Cross-site scripting

Show Answer

Question # 7

Which of the following provides a security professional with most information about the system’s security posture?

A. Phishing, spamming, sending trojans 
B. Social engineering, company site browsing tailgating 
C. Wardriving, warchalking, social engineering 
D. Port scanning, banner grabbing service identification 

Show Answer

Question # 8

Attempting an injection attack on a web server based on responses to True/False QUESTION NO:s is called which of the following?

A. Compound SQLi 
B. Blind SQLi 
C. Classic SQLi 
D. DMS-specific SQLi 

Show Answer

Question # 9

John, a professional hacker, performs a network attack on a renowned organization and gains unauthorized access to the target network. He remains in the network without being detected for a long time and obtains sensitive information without sabotaging the organization. Which of the following attack techniques is used by John?

A. Advanced persistent theft 
B. threat Diversion theft 
C. Spear-phishing sites 
D. insider threat

Show Answer

Question # 10

The security team of Debry Inc. decided to upgrade Wi-Fi security to thwart attacks such as dictionary attacks and key recovery attacks. For this purpose, the security team started implementing cutting-edge technology that uses a modern key establishment protocol called the simultaneous authentication of equals (SAE), also known as dragonfly key exchange, which replaces the PSK concept. What is the Wi-Fi encryption technology implemented by Debry Inc.?

A. WEP 
B. WPA 
C. WPA2 
D. WPA3 

Show Answer