Refined of 312-50 exam guide materials and torrent for EC-Council certification for client, Real Success Guaranteed with Updated 312-50 pdf dumps vce Materials. 100% PASS Ethical Hacking and Countermeasures (CEHv6) exam Today!


♥♥ 2021 NEW RECOMMEND ♥♥

Free VCE & PDF File for EC-Council 312-50 Real Exam (Full Version!)

★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions

Free Instant Download NEW 312-50 Exam Dumps (PDF & VCE):
Available on: http://www.surepassexam.com/312-50-exam-dumps.html

2021 Apr 312-50 exams

Q21. Jackson discovers that the wireless AP transmits 128 bytes of plaintext, and the station responds by encrypting the plaintext. It then transmits the resulting ciphertext using the same key and cipher that are used by WEP to encrypt subsequent network traffic. What authentication mechanism is being followed here? 

A. no authentication 

B. single key authentication 

C. shared key authentication 

D. open system authentication 

Answer: C 

Explantion: The following picture shows how the WEP authentication procedure: 


Q22. Which of the following Registry location does a Trojan add entries to make it persistent on Windows 7? (Select 2 answers) 

A. HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun 

B. HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsSystem32CurrentVersion Run 

C. HKEY_CURRENT_USERSoftwareMicrosoftWindowsSystem32CurrentVersionRun 

D. HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun 

Answer: AD


Q23. Exhibit 

You receive an e-mail with the message displayed in the exhibit. 

From this e-mail you suspect that this message was sent by some hacker since you have using their e-mail services for the last 2 years and they never sent out an e-mail as this. You also observe the URL in the message and confirm your suspicion about 340590649. You immediately enter the following at the Windows 2000 command prompt. 

ping 340590649 

You get a response with a valid IP address. What is the obstructed IP address in the e-mail URL? 

A. 192.34.5.9 

B. 10.0.3.4 

C. 203.2.4.5 

D. 199.23.43.4 

Answer: C

Explanation: Convert the number in binary, then start from last 8 bits and convert them to decimal to get the last octet (in this case .5) 


Q24. On a default installation of Microsoft IIS web server, under which privilege does the web server software execute? 

A. Everyone 

B. Guest 

C. System 

D. Administrator 

Answer: C

Explanation: If not changed during the installation, IIS will execute as Local System with way to high privileges. 


Q25. You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c 

What is the hexadecimal value of NOP instruction? 

A. 0x60 

B. 0x80 

C. 0x70 

D. 0x90 

Answer: D


Most recent 312-50 free practice questions:

Q26. Joe Hacker is going wardriving. He is going to use PrismStumbler and wants it to go to a GPS mapping software application. What is the recommended and well-known GPS mapping package that would interface with PrismStumbler? 

Select the best answer. 

A. GPSDrive 

B. GPSMap 

C. WinPcap 

D. Microsoft Mappoint 

Answer: A

Explanations: 

GPSDrive is a Linux GPS mapping package. It recommended to be used to send PrismStumbler data to so that it can be mapped. GPSMap is a generic term and not a real software package. WinPcap is a packet capture library for Windows. It is used to capture packets and deliver them to other programs for analysis. As it is for Windows, it isn't going to do what Joe Hacker is wanting to do. Microsoft Mappoint is a Windows application. PrismStumbler is a Linux application. Thus, these two are not going to work well together. 


Q27. The network administrator at Spears Technology, Inc has configured the default gateway Cisco Router’s access-list as below: 

You are tried to conduct security testing on their network. You successfully brute-force for SNMP community string using a SNMP crack tool. The access-list configured at the router prevents you from establishing a successful connection. 

You want to retrieve the Cisco Configuration from the router. How would you proceed? 

A. Send a customized SNMP set request with spoofed source IP Address in the range-

192.168.1.0 

B. Run a network sniffer and capture the returned traffic with the configuration file from the router 

C. Run Generic Routing Encapsulation (GRE) tunneling protocol from your computer to the router masking your IP address 

D. Use the Cisco’s TFTP default password to connect and download the configuration file 

Answer: AB

Explanation: SNMP is allowed only by access-list 1. Therefore you need to spoof a 192.168.1.0/24 address and then sniff the reply from the gateway. 


Q28. One of your team members has asked you to analyze the following SOA record. What is the version? 

Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400. 

A. 200303028 

B. 3600 

C. 604800 

D. 2400 

E. 60 

F. 4800 

Answer: A 

Explanation: The SOA starts with the format of YYYYMMDDVV where VV is the version. 


Q29. John wishes to install a new application onto his Windows 2000 server. 

He wants to ensure that any application he uses has not been Trojaned. 

What can he do to help ensure this? 

A. Compare the file's MD5 signature with the one published on the distribution media 

B. Obtain the application via SSL 

C. Compare the file's virus signature with the one published on the distribution media 

D. Obtain the application from a CD-ROM disc 

Answer: A

Explanation: MD5 was developed by Professor Ronald L. Rivest of MIT. What it does, to quote the executive summary of rfc1321, is: 

[The MD5 algorithm] takes as input a message of arbitrary length and produces as output a 128-bit "fingerprint" or "message digest" of the input. It is conjectured that it is computationally infeasible to produce two messages having the same message digest, or to produce any message having a given prespecified target message digest. The MD5 algorithm is intended for digital signature applications, where a large file must be "compressed" in a secure manner before being encrypted with a private (secret) key under a public-key cryptosystem such as RSA. 

In essence, MD5 is a way to verify data integrity, and is much more reliable than checksum and many other commonly used methods. 


Q30. What is the proper response for a X-MAS scan if the port is open? 

A. SYN 

B. ACK 

C. FIN 

D. PSH 

E. RST 

F. No response 

Answer: F 

Explanation: Closed ports respond to a X-MAS scan by ignoring the packet.