Download the updated 312-50v10 dumps from leads4pass, the best material for the really valid Certified Ethical Hacking Exam (C|EH v10) exam.
leads4pass’s latest 312-50v10 exam questions and answers are updated to help candidates prepare adequately,
Then you can successfully pass the EC-COUNCIL 312-50v10 exam.
The EC-COUNCIL 312-50v10 exam is the exam code for the C|EH v10 certification exam, the 312-50v10 dumps are also the C|EH v10 dumps, really helping you get a good score
Certified Ethical Hacker Exam (C|EH v10) 312-50v10 Room exam.
Check Online 312-50v10 Free Dumps
Question 1:
An unauthorized individual enters a building following an employee through the employee entrance after the lunch rush. What type of breach has the individual just performed?
A. Reverse Social Engineering
B. Tailgating
C. Piggybacking
D. Announced
Correct Answer: B
Question 2:
If you want only to scan fewer ports than the default scan using the Nmap tool, which option would you use?
A. -sP
B. -P
C. -r
D. -F
Correct Answer: B
Question 3:
In the field of cryptanalysis, what is meant by a “rubber-hose” attack?
A. Attempting to decrypt ciphertext by making logical assumptions about the contents of the original plain text.
B. Extraction of cryptographic secrets through coercion or torture.
C. Forcing the targeted keystream through a hardware-accelerated device such as an ASIC.
D. A backdoor placed into a cryptographic algorithm by its creator.
Correct Answer: B
Question 4:
Which is the first step followed by Vulnerability Scanners for scanning a network?
A. TCP/UDP Port scanning
B. Firewall detection
C. OS Detection
D. Checking if the remote host is alive
Correct Answer: D
Question 5:
The insecure direct object reference is a type of vulnerability where the application does not verify if the user is authorized to access the internal object via its name or key.
Suppose a malicious user Rob tries to get access to the account of a benign user Ned.
Which of the following requests best illustrates an attempt to exploit an insecure direct object reference vulnerability?
A. “GET/restricted/goldtransfer?to=Robandfrom=1 or 1=1\’ HTTP/1.1Host: westbank.com”
B. “GET/restricted/accounts/?name=Ned HTTP/1.1 Host: westbank.com”
C. “GET/restricted/bank.getaccount(`Ned\’) HTTP/1.1 Host: westbank.com”
D. “GET/restricted/\r\n\%00account%00Ned%00access HTTP/1.1 Host: westbank.com”
Correct Answer: B
Question 6:
Bob, your senior colleague, has sent you a mail regarding a deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days. Bob denies that he had ever sent a mail. What do you want to “know” to prove to yourself that it was Bob who had sent a mail?
A. Authentication
B. Confidentiality
C. Integrity
D. Non-Repudiation
Correct Answer: D
Question 7:
Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?
A. –T0
B. –T5
C. -O
D. -A
Correct Answer: B
Question 8:
Sam is working as s pen-tester in an organization in Houston. He performs penetration testing on IDS in order to find the different ways an attacker uses to evade the IDS. Sam sends a large number of packets to the target IDS that generates alerts, which enable Sam to hide the real traffic. What type of method is Sam using to evade IDS?
A. Denial-of-Service
B. False Positive Generation
C. Insertion Attack
D. Obfuscating
Correct Answer: B
Question 9:
Company XYZ has asked you to assess the security of their perimeter email gateway. From your office in New York, you craft a specially formatted email message and send it across the Internet to an employee of Company XYZ. The employee of Company XYZ is aware of your test. Your email message looks like this: From: [email protected] To: [email protected] Subject: Test message Date: 4/3/2017 14:37 The employee of Company XYZ receives your email message. This proves that Company XYZ\’s email gateway doesn\’t prevent what?
A. Email Phishing
B. Email Masquerading
C. Email Spoofing
D. Email Harvesting
Correct Answer: C
Question 10:
You are looking for SQL injection vulnerability by sending a special character to web applications. Which of the following is the most useful for quick validation?
A. Double quotation
B. Backslash
C. Semicolon
D. Single quotation
Correct Answer: D
Question 11:
You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture in terms of server placement?
A. All three servers need to be placed internally
B. A web server facing the Internet, an application server on the internal network, a database server on the internal network
C. A web server and the database server facing the Internet, an application server on the internal network
D. All three servers need to face the Internet so that they can communicate between themselves
Correct Answer: B
Question 12:
Vlady works in a fishing company where the majority of the employees have very little understanding of IT let alone IT Security. Several information security issues that Vlady often found include employees, sharing passwords, writing/her password on a post-it note and sticking it to/her desk, leaving the computer unlocked, didn\’t logging out from emails or other social media accounts, etc.
After discussing with his boss, Vlady decided to make some changes to improve the security environment in his company. The first thing that Vlady wanted to do is to make the employees understand the importance of keeping confidential information, such as password, a secret and they should not share it with other persons.
Which of the following steps should be the first thing that Vlady should do to make the employees in his company understand to importance of keeping confidential information a secret?
A. Warning to those who write the password on a post-it note and put it on/her desk
B. Developing a strict information security policy
C. Information security awareness training
D. Conducting a one to one discussion with the other employees about the importance of information security
Correct Answer: A
Question 13:
Which of the following Secure Hashing Algorithm (SHA) produces a 160-bit digest from a message with a maximum length of (264-1) bits and resembles the MD5 algorithm?
A. SHA-2
B. SHA-3
C. SHA-1
D. SHA-0
Correct Answer: C
Question 14:
Which of the following options represents a conceptual characteristic of an anomaly-based IDS over a signature-based IDS?
A. Produces fewer false positives
B. Can identify unknown attacks
C. Requires vendor updates for a new threat
D. Cannot deal with encrypted network traffic
Correct Answer: B
Question 15:
Which of the following is the best countermeasure to encrypting ransomwares?
A. Use multiple antivirus softwares
B. Keep some generation of off-line backup
C. Analyze the ransomware to get decryption key of encrypted data
D. Pay a ransom
Correct Answer: B
……
The 312-50v10 Dumps https://www.leads4pass.com/312-50v10.html, is an effective material for you to take the Certified Ethical Hacker Exam (C|EH v10) certification exam, helping you to pass the C|EH v10 Exam easily.