EC-COUNCIL Certified Ethical Hacker Exam (CEH v11) - 312-50v11 Exam Practice Test
Consider the following Nmap output:
what command-line parameter could you use to determine the type and version number of the web server?
what command-line parameter could you use to determine the type and version number of the web server?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network.
Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.
Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.
Correct Answer: B,D,E
Vote an answer
Which of the following statements is FALSE with respect to Intrusion Detection Systems?
Correct Answer: C
Vote an answer
What tool can crack Windows SMB passwords simply by listening to network traffic?
Correct Answer: D
Vote an answer
What is one of the advantages of using both symmetric and asymmetric cryptography in SSL/TLS?
Correct Answer: A
Vote an answer
Which type of sniffing technique is generally referred as MiTM attack?
Correct Answer: B
Vote an answer
PGP, SSL, and IKE are all examples of which type of cryptography?
Correct Answer: B
Vote an answer
A "Server-Side Includes" attack refers to the exploitation of a web application by injecting scripts in HTML pages or executing arbitrary code remotely.
Which web-page file type, if it exists on the web server, is a strong indication that the server is vulnerable to this kind of attack?
Which web-page file type, if it exists on the web server, is a strong indication that the server is vulnerable to this kind of attack?
Correct Answer: D
Vote an answer
Which command can be used to show the current TCP/IP connections?
Correct Answer: A
Vote an answer
Richard, an attacker, targets an MNC. in this process, he uses a footprinting technique to gather as much information as possible. Using this technique, he gathers domain information such as the target domain name, contact details of its owner, expiry date, and creation date. With this information, he creates a map of the organization's network and misleads domain owners with social engineering to obtain internal details of its network. What type of footprinting technique is employed by Richard?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
What would be the purpose of running "wget 192.168.0.15 -q -S" against a web server?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
When conducting a penetration test, it is crucial to use all means to get all available information about the target network. One of the ways to do that is by sniffing the network. Which of the following cannot be performed by the passive network sniffing?
Correct Answer: A
Vote an answer
This kind of password cracking method uses word lists in combination with numbers and special characters:
Correct Answer: D
Vote an answer
What tool can crack Windows SMB passwords simply by listening to network traffic?
Correct Answer: D
Vote an answer