312-50v12 Exam Study Guide Free Practice Test LAST UPDATED DATE May 21, 2023

The New 312-50v12 2023 Updated Verified Study Guides & Best Courses

NEW QUESTION # 156
What would you enter if you wanted to perform a stealth scan using Nmap?

• A. nmap -sS
• B. nmap -sM
• C. nmap -sT
• D. nmap -sU

Answer: A

NEW QUESTION # 157
What is the purpose of DNS AAAA record?

• A. Address database record
• B. Authorization, Authentication and Auditing record
• C. IPv6 address resolution record
• D. Address prefix record

Answer: C

NEW QUESTION # 158
Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities. Which type of virus detection method did Chandler use in this context?

• A. Scanning
• B. Heuristic Analysis
• C. Integrity checking
• D. Code Emulation

Answer: D

NEW QUESTION # 159
Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?

• A. Macro virus
• B. Stealth/Tunneling virus
• C. Cavity virus
• D. Polymorphic virus

Answer: B

NEW QUESTION # 160
Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company. The phishing message will often use the name of the company CEO, President, or Managers. The time a hacker spends performing research to locate this information about a company is known as?

• A. Investigation
• B. Reconnaissance
• C. Exploration
• D. Enumeration

Answer: B

NEW QUESTION # 161
Techno Security Inc. recently hired John as a penetration tester. He was tasked with identifying open ports in the target network and determining whether the ports are online and any firewall rule sets are encountered. John decided to perform a TCP SYN ping scan on the target network. Which of the following Nmap commands must John use to perform the TCP SYN ping scan?

• A. nmap -sn -PS < target IP address >
• B. nmap -sn -PA < target IP address >
• C. nmap -sn -pp < target ip address >
• D. nmap -sn -PO < target IP address >

Answer: A

Explanation:
https://hub.packtpub.com/discovering-network-hosts-with-tcp-syn-and-tcp-ack-ping-scans-in-nmaptutorial/

NEW QUESTION # 162
You have compromised a server on a network and successfully opened a shell. You aimed to identify all operating systems running on the network. However, as you attempt to fingerprint all machines in the network using the nmap syntax below, it is not going through.
invictus@victim_server.~$ nmap -T4 -O 10.10.0.0/24 TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxx. QUITTING!
What seems to be wrong?

• A. The outgoing TCP/IP fingerprinting is blocked by the host firewall.
• B. OS Scan requires root privileges.
• C. The nmap syntax is wrong.
• D. This is a common behavior for a corrupted nmap application.

Answer: B

NEW QUESTION # 163
While using your bank's online servicing you notice the following string in the URL bar:
"http: // www. MyPersonalBank. com/ account?id=368940911028389&Damount=10980&Camount=21" You observe that if you modify the Damount & Camount values and submit the request, that data on the web page reflects the changes.
Which type of vulnerability is present on this site?

• A. Cookie Tampering
• B. SQL Injection
• C. Web Parameter Tampering
• D. XSS Reflection

Answer: C

NEW QUESTION # 164
This type of injection attack does not show any error message. It is difficult to exploit as it returns information when the application is given SQL payloads that elicit a true or false response from the server. By observing the response, an attacker can extract sensitive information. What type of attack is this?

• A. Blind SQL injection
• B. Time-based SQL injection
• C. Union SQL injection
• D. Error-based SQL injection

Answer: A

NEW QUESTION # 165
A user on your Windows 2000 network has discovered that he can use L0phtcrack to sniff the SMB exchanges which carry user logons. The user is plugged into a hub with 23 other systems.
However, he is unable to capture any logons though he knows that other users are logging in.
What do you think is the most likely reason behind this?

• A. Kerberos is preventing it.
• B. There is a NIDS present on that segment.
• C. Windows logons cannot be sniffed.
• D. L0phtcrack only sniffs logons to web servers.

Answer: A

Explanation:
Explanation:

NEW QUESTION # 166
You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible Intrusion Detection System. What is the best approach?

• A. Install Cryptcat and encrypt outgoing packets from this server.
• B. Use HTTP so that all traffic can be routed vis a browser, thus evading the internal Intrusion Detection Systems.
• C. Install and use Telnet to encrypt all outgoing traffic from this server.
• D. Use Alternate Data Streams to hide the outgoing packets from this server.

Answer: A

Explanation:
https://linuxsecurityblog.com/2018/12/23/create-a-backdoor-with-cryptcat/ Cryptcat enables us to communicate between two systems and encrypts the communication between them with twofish, one of many excellent encryption algorithms from Bruce Schneier et al. Twofish's encryption is on par with AES encryption, making it nearly bulletproof. In this way, the IDS can't detect the malicious behavior taking place even when its traveling across normal HTTP ports like 80 and 443.

NEW QUESTION # 167
Larry, a security professional in an organization, has noticed some abnormalities In the user accounts on a web server. To thwart evolving attacks, he decided to harden the security of the web server by adopting a countermeasures to secure the accounts on the web server.
Which of the following countermeasures must Larry implement to secure the user accounts on the web server?

• A. Enable all non-interactive accounts that should exist but do not require interactive login
• B. Enable unused default user accounts created during the installation of an OS
• C. Retain all unused modules and application extensions
• D. Limit the administrator or toot-level access to the minimum number of users

Answer: D

NEW QUESTION # 168
Becky has been hired by a client from Dubai to perform a penetration test against one of their remote offices. Working from her location in Columbus, Ohio, Becky runs her usual reconnaissance scans to obtain basic information about their network. When analyzing the results of her Whois search, Becky notices that the IP was allocated to a location in Le Havre, France. Which regional Internet registry should Becky go to for detailed information?

• A. ARIN
• B. RIPE
• C. APNIC
• D. LACNIC

Answer: B

Explanation:
Regional Internet Registries (RIRs):
ARIN (American Registry for Internet Numbers)
AFRINIC (African Network Information Center)
APNIC (Asia Pacific Network Information Center)
RIPE (Réseaux IP Européens Network Coordination Centre)
LACNIC (Latin American and Caribbean Network Information Center)

NEW QUESTION # 169
An organization is performing a vulnerability assessment tor mitigating threats. James, a pen tester, scanned the organization by building an inventory of the protocols found on the organization's machines to detect which ports are attached to services such as an email server, a web server or a database server. After identifying the services, he selected the vulnerabilities on each machine and started executing only the relevant tests. What is the type of vulnerability assessment solution that James employed in the above scenario?

• A. Service-based solutions
• B. Tree-based assessment
• C. Product-based solutions
• D. inference-based assessment

Answer: D

Explanation:
In an inference-based assessment, scanning starts by building an inventory of the protocols found on the machine. After finding a protocol, the scanning process starts to detect which ports are attached to services, such as an email server, web server, or database server. After finding services, it selects vulnerabilities on each machine and starts to execute only those relevant tests.

NEW QUESTION # 170
What is the following command used for?
net use \targetipc$ "" /u:""

• A. Connecting to a Linux computer through Samba.
• B. Grabbing the etc/passwd file
• C. Enumeration of Cisco routers
• D. Grabbing the SAM
• E. This command is used to connect as a null session

Answer: E

NEW QUESTION # 171
Tess King is using the nslookup command to craft queries to list all DNS information (such as Name Servers, host names, MX records, CNAME records, glue records (delegation for child Domains), zone serial number, TimeToLive (TTL) records, etc) for a Domain.
What do you think Tess King is trying to accomplish? Select the best answer.

• A. A zone transfer
• B. A zone update
• C. A zone harvesting
• D. A zone estimate

Answer: A

NEW QUESTION # 172
You receive an e-mail like the one shown below. When you click on the link contained in the mail, you are redirected to a website seeking you to download free Anti-Virus software.
Dear valued customers,
We are pleased to announce the newest version of Antivirus 2010 for Windows which will probe you with total security against the latest spyware, malware, viruses, Trojans and other online threats. Simply visit the link below and enter your antivirus code:

or you may contact us at the following address:
Media Internet Consultants, Edif. Neptuno, Planta
Baja, Ave. Ricardo J. Alfaro, Tumba Muerto, n/a Panama
How will you determine if this is Real Anti-Virus or Fake Anti-Virus website?

• A. Download and install Anti-Virus software from this suspicious looking site, your Windows 7 will prompt you and stop the installation if the downloaded file is a malware
• B. Look at the website design, if it looks professional then it is a Real Anti-Virus website
• C. Connect to the site using SSL, if you are successful then the website is genuine
• D. Search using the URL and Anti-Virus product name into Google and lookout for suspicious warnings against this site
• E. Download and install Anti-Virus software from this suspicious looking site, your Windows 7 will prompt you and stop the installation if the downloaded file is a malware

Answer: D

NEW QUESTION # 173
Thomas, a cloud security professional, is performing security assessment on cloud services to identify any loopholes. He detects a vulnerability in a bare-metal cloud server that can enable hackers to implant malicious backdoors in its firmware. He also identified that an installed backdoor can persist even if the server is reallocated to new clients or businesses that use it as an laaS.
What is the type of cloud attack that can be performed by exploiting the vulnerability discussed in the above scenario?

• A. Metadata spoofing attack
• B. Cloud cryptojacking
• C. Cloudborne attack
• D. Man-in-the-cloud (MITC) attack

Answer: C

NEW QUESTION # 174
E-mail scams and mail fraud are regulated by which of the following?

• A. 18 U.S.C. par. 1362 Communication Lines, Stations, or Systems
• B. 18 U.S.C. par. 1029 Fraud and Related activity in connection with Access Devices
• C. 18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers
• D. 18 U.S.C. par. 2510 Wire and Electronic Communications Interception and Interception of Oral Communication

Answer: C

NEW QUESTION # 175
......

Get Prepared for Your 312-50v12 Exam With Actual 505 Questions: https://www.braindumpsit.com/312-50v12_real-exam.html

Authentic 312-50v12 Exam Dumps PDF - 2023 Updated: https://drive.google.com/open?id=1Fpkkk9R4Fz6SKJUGYlBeQLkQYHOMLpBw