EC-Council 312-50v11 Certified Ethical Hacker Exam – C|EH v11 Online Training

EC-Council 312-50v11 Online Training

The questions for 312-50v11 were last updated at Dec 25,2024.

Exam Code: 312-50v11
Exam Name: Certified Ethical Hacker Exam - C|EH v11
Certification Provider: EC-Council
Latest update: Dec 25,2024

Question #21

Joel, a professional hacker, targeted a company and identified the types of websites frequently visited by its employees. Using this information, he searched for possible loopholes in these websites and injected a malicious script that can redirect users from the web page and download malware onto a victim’s machine. Joel waits for the victim to access the infected web application so as to compromise the victim’s machine .

Which of the following techniques is used by Joel in the above scenario?

A . DNS rebinding attack
B . Clickjacking attack
C . MarioNet attack
D . Watering hole attack

Reveal Solution Hide Solution

Question #22

John is investigating web-application firewall logs and observers that someone is attempting to inject the following:

char buff[10];

buff[>o] – ‘a’:

What type of attack is this?

A . CSRF
B . XSS
C . Buffer overflow
D . SQL injection

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

Buffer overflow this attack is an anomaly that happens when software writing data to a buffer overflows the buffer’s capacity, leading to adjacent memory locations being overwritten. In other words, an excessive amount of information is being passed into a container that doesn’t have enough space, which information finishes up replacing data in adjacent containers. Buffer overflows are often exploited by attackers with a goal of modifying a computer’s memory so as to undermine or take hold of program execution.

What’s a buffer? A buffer, or data buffer, is a neighborhood of physical memory storage wont to temporarily store data while it’s being moved from one place to a different. These buffers typically sleep in RAM memory. Computers frequently use buffers to assist improve performance; latest hard drives cash in of buffering to efficiently access data, and lots of online services also use buffers. for instance, buffers are frequently utilized in online video streaming to stop interruption. When a video is streamed, the video player downloads and stores perhaps 20% of the video at a time during a buffer then streams from that buffer. This way, minor drops in connection speed or quick service disruptions won’t affect the video stream performance. Buffers are designed to contain specific amounts of knowledge. Unless the program utilizing the buffer has built-in instructions to discard data when an excessive amount of is shipped to the buffer, the program will overwrite data in memory adjacent to the buffer. Buffer overflows are often exploited by attackers to corrupt software. Despite being well-understood, buffer overflow attacks are still a serious security problem that torment cyber-security teams. In 2014 a threat referred to as ‘heartbleed’ exposed many many users to attack due to a buffer overflow vulnerability in SSL software.

How do attackers exploit buffer overflows? An attacker can deliberately feed a carefully crafted input into a program which will cause the program to undertake and store that input during a buffer that isn’t large enough, overwriting portions of memory connected to the buffer space. If the memory layout of the program is well-defined, the attacker can deliberately overwrite areas known to contain executable code. The attacker can then replace this code together with his own executable code, which may drastically change how the program is meant to figure .For example if the overwritten part in memory contains a pointer (an object that points to a different place in memory) the attacker’s code could replace that code with another pointer that points to an exploit payload. this will transfer control of the entire program over to the attacker’s code.

Question #23

In an internal security audit, the white hat hacker gains control over a user account and attempts to acquire access to another account’s confidential files and information .

How can he achieve this?

A . Privilege Escalation
B . Shoulder-Surfing
C . Hacking Active Directory
D . Port Scanning

Reveal Solution Hide Solution

Question #24

Which is the first step followed by Vulnerability Scanners for scanning a network?

A . OS Detection
B . Firewall detection
C . TCP/UDP Port scanning
D . Checking if the remote host is alive

Reveal Solution Hide Solution

Question #25

Which of these is capable of searching for and locating rogue access points?

A . HIDS
B . WISS
C . WIPS
D . NIDS

Reveal Solution Hide Solution

Question #26

John, a security analyst working for an organization, found a critical vulnerability on the

organization’s LAN that allows him to view financial and personal information about the rest of the employees. Before reporting the vulnerability, he examines the information shown by the vulnerability for two days without disclosing any information to third parties or other internal employees. He does so out of curiosity about the other employees and may take advantage of this information later .

What would John be considered as?

A . Acybercriminal
B . Black hat
C . White hat
D . Gray hat

Reveal Solution Hide Solution

Question #27

During an Xmas scan what indicates a port is closed?

A . No return response
B . RST
C . ACK
D . SYN

Reveal Solution Hide Solution

Question #28

You work for Acme Corporation as Sales Manager. The company has tight network security restrictions. You are trying to steal data from the company’s Sales database (Sales.xls) and transfer them to your home computer. Your company filters and monitors traffic that leaves from the internal network to the Internet .

How will you achieve this without raising suspicion?

A . Encrypt the Sales.xls using PGP and e-mail it to your personal gmail account
B . Package the Sales.xls using Trojan wrappers and telnet them back your home computer
C . You can conceal the Sales.xls database in another file like photo.jpg or other files and send it out in an innocent looking email or file transfer using Steganography techniques
D . Change the extension of Sales.xls to sales.txt and upload them as attachment to your hotmail account

Reveal Solution Hide Solution

Question #29

Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company. The phishing message will often use the name of the company CEO, President, or Managers.

The time a hacker spends performing research to locate this information about a company is known as?