EC-COUNCIL Certified Ethical Hacker v13 - 312-50 Exam Practice Test
Attackers persisted by modifying legitimate system utilities and services. What key step helps prevent similar threats?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
A university's online registration system is disrupted by a combined DNS reflection and HTTP Slowloris DDoS attack. Standard firewalls cannot mitigate the attack without blocking legitimate users. What is the best mitigation strategy?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
You have been asked to perform a penetration test for a local company. You have had several meetings with the client and are now almost ready to begin the assessment. Which of the following is the document that would contain verbiage which describes what type of testing is allowed and when you will perform testing and limits your liabilities as a penetration tester?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Which of the following best describes an attack that altered the contents of two critical files?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
A competing technology firm begins releasing products that closely mirror the design, pricing strategy, and feature roadmap of ApexDynamics Inc. An internal review reveals that detailed information about ApexDynamics' upcoming initiatives had been gradually collected through publicly available sources and external disclosures before product launch.
Which footprinting-related threat does this scenario best represent?
Which footprinting-related threat does this scenario best represent?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
A penetration tester performing a mobile security assessment for a fintech company in Chicago, Illinois installs a seemingly harmless utility application on a test Android smartphone.
During testing, the official banking application downloads account statements and stores them temporarily in the device's shared storage directory. The utility application, which has access to the same storage area, automatically detects the files and reads their contents before the banking application can retrieve and display the data.
The entire process occurs locally without intercepting any network traffic or requiring root privileges.
Which Android exploitation technique does this scenario describe?
During testing, the official banking application downloads account statements and stores them temporarily in the device's shared storage directory. The utility application, which has access to the same storage area, automatically detects the files and reads their contents before the banking application can retrieve and display the data.
The entire process occurs locally without intercepting any network traffic or requiring root privileges.
Which Android exploitation technique does this scenario describe?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
A security analyst investigates unusual east-west traffic on a corporate network. A rogue device has been physically inserted between a workstation and the switch, enabling unauthorized access while inheriting the workstation's authenticated network state. Which evasion technique is being used?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
An attacker, using a rogue wireless AP, performed an MITM attack and injected an HTML code to embed a malicious applet in all HTTP connections. When users accessed any page, the applet ran and exploited many machines. Which one of the following tools the hacker probably used to inject HTML code?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).