[2022] Use Valid New Free 312-50v10 Exam Dumps & Answers [Q286-Q300]

Posted byadminApril 19, 2022Leave a Comment on [2022] Use Valid New Free 312-50v10 Exam Dumps & Answers [Q286-Q300]

Rate this post

[2022] Use Valid New Free 312-50v10 Exam Dumps & Answers

312-50v10 Braindumps PDF, EC-COUNCIL 312-50v10 Exam Cram

How much 312-50v10 Exam Cost

The price of the 312-50v10 exam is $550 USD.

NEW QUESTION 286
Port scanning can be used as part of a technical assessment to determine network vulnerabilities. The TCP XMAS scan is used to identify listening ports on the targeted system.
If a scanned port is open, what happens?

The port will ignore the packets.

The port will send an RST.

The port will send an ACK.

The port will send a SYN.

Explanation
An attacker uses a TCP XMAS scan to determine if ports are closed on the target machine. This scan type is accomplished by sending TCP segments with the all flags sent in the packet header, generating packets that are illegal based on RFC 793. The RFC 793 expected behavior is that any TCP segment with an out-of-state Flag sent to an open port is discarded, whereas segments with out-of-state flags sent to closed ports should be handled with a RST in response. This behavior should allow an attacker to scan for closed ports by sending certain types of rule-breaking packets (out of sync or disallowed by the TCB) and detect closed ports via RST packets.
References: https://capec.mitre.org/data/definitions/303.html

NEW QUESTION 287
A company’s Web development team has become aware of a certain type of security vulnerability in their Web software. To mitigate the possibility of this vulnerability being exploited, the team wants to modify the software requirements to disallow users from entering HTML as input into their Web application.
What kind of Web application vulnerability likely exists in their software?

Cross-site scripting vulnerability

Session management vulnerability

SQL injection vulnerability

Cross-site Request Forgery vulnerability

NEW QUESTION 288
A certified ethical hacker (CEH) completed a penetration test of the main headquarters of a company almost two months ago, but has yet to get paid. The customer is suffering from financial problems, and the CEH is worried that the company will go out of business and end up not paying. What actions should the CEH take?

Threaten to publish the penetration test results if not paid.

Follow proper legal procedures against the company to request payment.

Tell other customers of the financial problems with payments from this company.

Exploit some of the vulnerabilities found on the company webserver to deface it.

NEW QUESTION 289
First thing you do every office day is to check your email inbox. One morning, you received an email from your best friend and the subject line is quite strange. What should you do?

Delete the email and pretend nothing happened.

Forward the message to your supervisor and ask for her opinion on how to handle the situation.

Forward the message to your company’s security response team and permanently delete the messagefrom your computer.

Reply to the sender and ask them for more information about the message contents.

NEW QUESTION 290
A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24. Which of the following has occurred?

The computer is not using a private IP address.

The gateway is not routing to a public IP address.

The gateway and the computer are not on the same network.

The computer is using an invalid IP address.

NEW QUESTION 291
What is the process of logging, recording, and resolving events that take place in an organization?

Incident Management Process

Security Policy

Internal Procedure

Metrics

NEW QUESTION 292
Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?

Netstat WMI Scan

Silent Dependencies

Consider unscanned ports as closed

Reduce parallel connections on congestion

NEW QUESTION 293
Which of the following processes evaluates the adherence of an organization to its stated security policy?

Vulnerability assessment

Penetration testing

Risk assessment

Security auditing

NEW QUESTION 294
You are analyzing a traffic on the network with Wireshark. You want to routinely run a cron job which will
run the capture against a specific set of IPs. – 192.168.8.0/24. What command you would use?

tshark -net 192.255.255.255 mask 192.168.8.0

wireshark -capture -local -masked 192.168.8.0 -range 24

sudo tshark -f “net 192.168.8.0/24”

wireshark -fetch “192.168.8/*”

NEW QUESTION 295
Eve stole a file named secret.txt, transferred it to her computer and she just entered these commands:

What is she trying to achieve?

She is encrypting the file.

She is using John the Ripper to view the contents of the file.

She is using ftp to transfer the file to another hacker named John.

She is using John the Ripper to crack the passwords in the secret.txt file.

NEW QUESTION 296
A penetration tester is hired to do a risk assessment of a company’s DMZ. The rules of engagement states that the penetration test be done from an external IP address with no prior knowledge of the internal IT systems.
What kind of test is being performed?

white box

grey box

red box

black box

NEW QUESTION 297
Switches maintain a CAM Table that maps individual MAC addresses on the network to physical ports on the switch.

In MAC flooding attack, a switch is fed with many Ethernet frames, each containing different source MAC addresses, by the attacker. Switches have a limited memory for mapping various MAC addresses to physical ports. What happens when the CAM table becomes full?

Switch then acts as hub by broadcasting packets to all machines on the network

The CAM overflow table will cause the switch to crash causing Denial of Service

The switch replaces outgoing frame switch factory default MAC address of FF:FF:FF:FF:FF:FF

Every packet is dropped and the switch sends out SNMP alerts to the IDS port

NEW QUESTION 298

What does the option * indicate?

NEW QUESTION 299
Which Intrusion Detection System is the best applicable for large environments where critical assets on the
network need extra security and is ideal for observing sensitive network segments?

Honeypots

Firewalls

Network-based intrusion detection system (NIDS)

Host-based intrusion detection system (HIDS)

NEW QUESTION 300
Using Windows CMD, how would an attacker list all the shares to which the current user context has access?

NET USE

NET CONFIG

NET FILE

NET VIEW

Connects a computer to or disconnects a computer from a shared resource, or displays information about computer connections. The command also controls persistent net connections. Used without parameters, net use retrieves a list of network connections.
References: https://technet.microsoft.com/en-us/library/bb490717.aspx

Loading …