[Apr-2023] CEH v12 312-50v12 Exam Practice Dumps
2023 312-50v12 Premium Files Test pdf - Free Dumps Collection
The ECCouncil 312-50v12 Certified Ethical Hacker exam is a valuable certification for professionals who want to demonstrate their expertise in ethical hacking. The exam assesses the candidate's knowledge and skills in various areas of ethical hacking, and the certification is recognized by many organizations in the cybersecurity industry. The certification is valid for three years, and candidates must renew their certification by taking a recertification exam or earning CEUs.
The CEH Certification Exam is an important credential for individuals looking to pursue careers in information security. It is widely recognized by employers and can help individuals stand out in a competitive job market. The certification can also lead to new job opportunities and higher salaries.
The ECCouncil 312-50v12 exam, also known as the Certified Ethical Hacker (CEH) exam, is an internationally recognized certification for cybersecurity professionals. The exam tests a candidate's knowledge and skills in areas such as network scanning, enumeration, system hacking, and vulnerability assessment. Passing the exam shows that a candidate has the skills and knowledge necessary to ethically hack into systems and identify potential security vulnerabilities.
NEW QUESTION # 133
Tony wants to integrate a 128-bit symmetric block cipher with key sizes of 128,192, or 256 bits into a software program, which involves 32 rounds of computational operations that include substitution and permutation operations on four 32-bit word blocks using 8-variable S-boxes with 4-bit entry and 4-bit exit. Which of the following algorithms includes all the above features and can be integrated by Tony into the software program?
- A. CAST-128
- B. TEA
- C. RC5
- D. serpent
Answer: D
NEW QUESTION # 134
Jack, a disgruntled ex-employee of Incalsol Ltd., decided to inject fileless malware into Incalsol's systems. To deliver the malware, he used the current employees' email IDs to send fraudulent emails embedded with malicious links that seem to be legitimate. When a victim employee clicks on the link, they are directed to a fraudulent website that automatically loads Flash and triggers the exploit. What is the technique used byjack to launch the fileless malware on the target systems?
- A. Phishing
- B. In-memory exploits
- C. Script-based injection
- D. Legitimate applications
Answer: A
NEW QUESTION # 135
Jake, a professional hacker, installed spyware on a target iPhone to spy on the target user's activities. He can take complete control of the target mobile device by jailbreaking the device remotely and record audio, capture screenshots, and monitor all phone calls and SMS messages. What is the type of spyware that Jake used to infect the target device?
- A. Zscaler
- B. Androrat
- C. Trident
- D. DroidSheep
Answer: B
NEW QUESTION # 136
Scenario1:
1. Victim opens the attacker's web site.
2. Attacker sets up a web site which contains interesting and attractive content like 'Do you want to make
$1000 in a day?'.
3. Victim clicks to the interesting and attractive content URL.
4. Attacker creates a transparent 'iframe' in front of the URL which victim attempts to click, so victim thinks that he/she clicks to the 'Do you want to make $1000 in a day?' URL but actually he/she clicks to the content or URL that exists in the transparent 'iframe' which is setup by the attacker.
What is the name of the attack which is mentioned in the scenario?
- A. Clickjacking Attack
- B. HTTP Parameter Pollution
- C. Session Fixation
- D. HTML Injection
Answer: A
Explanation:
https://en.wikipedia.org/wiki/Clickjacking
Clickjacking is an attack that tricks a user into clicking a webpage element which is invisible or disguised as another element. This can cause users to unwittingly download malware, visit malicious web pages, provide credentials or sensitive information, transfer money, or purchase products online.
Typically, clickjacking is performed by displaying an invisible page or HTML element, inside an iframe, on top of the page the user sees. The user believes they are clicking the visible page but in fact they are clicking an invisible element in the additional page transposed on top of it.
NEW QUESTION # 137
James is working as an ethical hacker at Technix Solutions. The management ordered James to discover how vulnerable its network is towards footprinting attacks. James took the help of an open-source framework for performing automated reconnaissance activities. This framework helped James in gathering information using free tools and resources. What is the framework used by James to conduct footprinting and reconnaissance activities?
- A. WebSploit Framework
- B. OSINT framework
- C. SpeedPhish Framework
- D. Browser Exploitation Framework
Answer: B
NEW QUESTION # 138
User A is writing a sensitive email message to user B outside the local network. User A has chosen to use PKI to secure his message and ensure only user B can read the sensitive email. At what layer of the OSI layer does the encryption and decryption of the message take place?
- A. Application
- B. Transport
- C. Session
- D. Presentation
Answer: D
Explanation:
https://en.wikipedia.org/wiki/Presentation_layer
In the seven-layer OSI model of computer networking, the presentation layer is layer 6 and serves as the data translator for the network. It is sometimes called the syntax layer. The presentation layer is responsible for the formatting and delivery of information to the application layer for further processing or display.
Encryption is typically done at this level too, although it can be done on the application, session, transport, or network layers, each having its own advantages and disadvantages. Decryption is also handled at the presentation layer. For example, when logging on to bank account sites the presentation layer will decrypt the data as it is received.
NEW QUESTION # 139
Which of these is capable of searching for and locating rogue access points?
- A. WIPS
- B. NIDS
- C. WISS
- D. HIDS
Answer: A
Explanation:
A Wireless Intrusion Prevention System (WIPS) is a network device that monitors the radio spectrum for the presence of unauthorized access points (intrusion detection), and can automatically take countermeasures (intrusion prevention).
NEW QUESTION # 140
which of the following Bluetooth hacking techniques refers to the theft of information from a wireless device through Bluetooth?
- A. Bluesmacking
- B. Bluebugging
- C. Bluejacking
- D. Bluesnarfing
Answer: D
Explanation:
Bluesnarfing is the unauthorized access of information from a wireless device through a Bluetooth connection, often between phones, desktops, laptops, and PDAs (personal digital assistant).
NEW QUESTION # 141
In order to tailor your tests during a web-application scan, you decide to determine which web-server version is hosting the application. On using the sV flag with Nmap. you obtain the following response:
80/tcp open http-proxy Apache Server 7.1.6
what Information-gathering technique does this best describe?
- A. Brute forcing
- B. Dictionary attack
- C. Banner grabbing
- D. WhOiS lookup
Answer: C
Explanation:
Banner grabbing is a technique wont to gain info about a computer system on a network and the services running on its open ports. administrators will use this to take inventory of the systems and services on their network. However, an to find will use banner grabbing so as to search out network hosts that are running versions of applications and operating systems with known exploits.
Some samples of service ports used for banner grabbing are those used by Hyper Text Transfer Protocol (HTTP), File Transfer Protocol (FTP), and Simple Mail Transfer Protocol (SMTP); ports 80, 21, and 25 severally. Tools normally used to perform banner grabbing are Telnet, nmap and Netcat.
For example, one may establish a connection to a target internet server using Netcat, then send an HTTP request. The response can usually contain info about the service running on the host:
This information may be used by an administrator to catalog this system, or by an intruder to narrow down a list of applicable exploits. To prevent this, network administrators should restrict access to services on their networks and shut down unused or unnecessary services running on network hosts. Shodan is a search engine for banners grabbed from portscanning the Internet.
NEW QUESTION # 142
John, a disgruntled ex-employee of an organization, contacted a professional hacker to exploit the organization. In the attack process, the professional hacker Installed a scanner on a machine belonging to one of the vktims and scanned several machines on the same network to Identify vulnerabilities to perform further exploitation. What is the type of vulnerability assessment tool employed by John in the above scenario?
- A. Network-based scanner
- B. Agent-based scanner
- C. Cluster scanner
- D. Proxy scanner
Answer: A
Explanation:
Network-based scanner
A network-based vulnerability scanner, in simplistic terms, is the process of identifying loopholes on a computer's network or IT assets, which hackers and threat actors can exploit. By implementing this process, one can successfully identify their organization's current risk(s). This is not where the buck stops; one can also verify the effectiveness of your system's security measures while improving internal and external defenses. Through this review, an organization is well equipped to take an extensive inventory of all systems, including operating systems, installed software, security patches, hardware, firewalls, anti-virus software, and much more.
Agent-based scanner
Agent-based scanners make use of software scanners on each and every device; the results of the scans are reported back to the central server. Such scanners are well equipped to find and report out on a range of vulnerabilities.
NOTE: This option is not suitable for us, since for it to work, you need to install a special agent on each computer before you start collecting data from them.
NEW QUESTION # 143
Which of the following is the primary objective of a rootkit?
- A. It creates a buffer overflow
- B. It opens a port to provide an unauthorized service
- C. It provides an undocumented opening in a program
- D. It replaces legitimate programs
Answer: D
NEW QUESTION # 144
Ralph, a professional hacker, targeted Jane, who had recently bought new systems for her company. After a few days, Ralph contacted Jane while masquerading as a legitimate customer support executive, informing that her systems need to be serviced for proper functioning and that customer support will send a computer technician. Jane promptly replied positively. Ralph entered Jane's company using this opportunity and gathered sensitive information by scanning terminals for passwords, searching for important documents in desks, and rummaging bins. What is the type of attack technique Ralph used on jane?
- A. Eavesdropping
- B. Shoulder surfing
- C. impersonation
- D. Dumpster diving
Answer: C
NEW QUESTION # 145
Which of the following allows attackers to draw a map or outline the target organization's network infrastructure to know about the actual environment that they are going to hack.
- A. Scanning networks
- B. Enumeration
- C. Vulnerability analysis
- D. Malware analysis
Answer: A
Explanation:
Objectives of Footprinting Draw Network Map - Combining footprinting techniques with tools such as Tracert allows the attacker to create diagrammatic representations of the target organization's network presence. Specficially, it allows attackers to draw a map or outline of the target organization's network infrastructure to know about the actual environment that they are going to break into. These network diagrams can guide the attacker in performing an attack. (P.114/98)
NEW QUESTION # 146
What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?
- A. All are tools that are only effective against Linux
- B. All are tools that can be used not only by hackers, but also security personnel
- C. All are tools that are only effective against Windows
- D. All are DDOS tools
- E. All are hacking tools developed by the legion of doom
Answer: D
NEW QUESTION # 147
Jim, a professional hacker, targeted an organization that is operating critical Industrial Infrastructure. Jim used Nmap to scan open pons and running services on systems connected to the organization's OT network. He used an Nmap command to identify Ethernet/IP devices connected to the Internet and further gathered Information such as the vendor name, product code and name, device name, and IP address. Which of the following Nmap commands helped Jim retrieve the required information?
- A. nmap -Pn -sT -p 46824 < Target IP >
- B. nmap -Pn -sU -p 44818 --script enip-info < Target IP >
- C. nmap -Pn -sT -p 102 --script s7-info < Target IP >
- D. nmap -Pn -sT --scan-delay 1s --max-parallelism 1 -p < Port List > < Target IP >
Answer: B
Explanation:
https://nmap.org/nsedoc/scripts/enip-info.html
Example Usage enip-info:
- nmap --script enip-info -sU -p 44818 <host>
This NSE script is used to send a EtherNet/IP packet to a remote device that has TCP 44818 open. The script will send a Request Identity Packet and once a response is received, it validates that it was a proper response to the command that was sent, and then will parse out the data. Information that is parsed includes Device Type, Vendor ID, Product name, Serial Number, Product code, Revision Number, status, state, as well as the Device IP.
This script was written based of information collected by using the the Wireshark dissector for CIP, and EtherNet/IP, The original information was collected by running a modified version of the ethernetip.py script (https://github.com/paperwork/pyenip)
NEW QUESTION # 148
A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firm's public facing web servers. The engineer decides to start by using netcat to port 80.
The engineer receives this output:
HTTP/1.1 200 OK
Server: Microsoft-IIS/6
Expires: Tue, 17 Jan 2011 01:41:33 GMT
Date: Mon, 16 Jan 2011 01:41:33 GMT
Content-Type: text/html
Accept-Ranges: bytes
Last Modified: Wed, 28 Dec 2010 15:32:21 GMT
ETag:"b0aac0542e25c31:89d"
Content-Length: 7369
Which of the following is an example of what the engineer performed?
- A. SQL injection
- B. Banner grabbing
- C. Cross-site scripting
- D. Whois database query
Answer: B
NEW QUESTION # 149
Mason, a professional hacker, targets an organization and spreads Emotet malware through malicious script. After infecting the victim's device. Mason further used Emotet to spread the infection across local networks and beyond to compromise as many machines as possible. In this process, he used a tool, which is a self-extracting RAR file, to retrieve information related to network resources such as writable share drives. What is the tool employed by Mason in the above scenario?
- A. WebBrowserPassView
- B. Outlook scraper
- C. Credential enumerator
- D. NetPass.exe
Answer: C
Explanation:
https://us-cert.cisa.gov/ncas/alerts/TA18-201A
Currently, Emotet uses five known spreader modules: NetPass.exe, WebBrowserPassView, Mail PassView, Outlook scraper, and a credential enumerator. Credential enumerator is a self-extracting RAR file containing two components: a bypass component and a service component. The bypass component is used for the enumeration of network resources and either finds writable share drives using Server Message Block (SMB) or tries to brute force user accounts, including the administrator account. Once an available system is found, Emotet writes the service component on the system, which writes Emotet onto the disk. Emotet's access to SMB can result in the infection of entire domains (servers and clients).
NEW QUESTION # 150
You are using a public Wi-Fi network inside a coffee shop. Before surfing the web, you use your VPN to prevent intruders from sniffing your traffic. If you did not have a VPN, how would you identify whether someone is performing an ARP spoofing attack on your laptop?
- A. You should check your ARP table and see if there is one IP address with two different MAC addresses.
- B. You should use netstat to check for any suspicious connections with another IP address within the LAN.
- C. You should scan the network using Nmap to check the MAC addresses of all the hosts and look for duplicates.
- D. You cannot identify such an attack and must use a VPN to protect your traffic, r
Answer: A
Explanation:
ARP Spoofing Attack ARP packets can be forged to send data to the attacker's machine.Attackers flood a target computer's ARP cache with forged entries, which is also known as poisoning. (P.1143/1127)
NEW QUESTION # 151
......
Get ready to pass the 312-50v12 Exam right now using our CEH v12 Exam Package: https://www.lead2passed.com/ECCouncil/312-50v12-practice-exam-dumps.html
A fully updated 2023 312-50v12 Exam Dumps exam guide from training expert Lead2Passed: https://drive.google.com/open?id=1VkI8M0C1MnAhkxgyZXXMz2GVblIv3WWR
