Certified Ethical Hacker Exam (CEHv12) 312-50v12 Exam Study Guides

We all know that the CEH exam (312-50) is available at the ECC exam center and Pearson VUE testing centers. The new Certified Ethical Hacker exam (CEHv12) 312-50v12 exam study guides are here for you to test all your skills. There are 125 multiple-choice questions in the real 312-50v12 exam, and you have 4 hours to finish the test. The cut score can range from 60%-85%. Free Certified Ethical Hacker exam (CEHv12) 312-50v12 exam study guides are below.

1. What is the role of test automation in security testing?

It can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.

It should be used exclusively. Manual testing is outdated because of low speed and possible test setup inconsistencies.

It is an option but it tends to be very expensive.

Test automation is not usable in security due to the complexity of the tests.

2. John, a professional hacker, decided to use DNS to perform data exfiltration on a target network, in this process, he embedded malicious data into the DNS protocol packets that even DNSSEC cannot detect. Using this technique. John successfully injected malware to bypass a firewall and maintained communication with the victim machine and C&C server. What is the technique employed by John to bypass the firewall?

DNS cache snooping

DNS enumeration

DNSSEC zone walking

DNS tunneling method

3. In the context of Windows Security, what is a 'null' user?

An account that has been suspended by the admin

A user that has no skills

A pseudo account that was created for security administration purpose

A pseudo account that has no username and password

4. George is a security professional working for iTech Solutions. He was tasked with securely transferring sensitive data of the organization between industrial systems. In this process, he used a short-range communication protocol based on the IEEE 203.15.4 standard. This protocol is used in devices that transfer data infrequently at a low rate in a restricted area, within a range of 10-100 m. What is the short-range wireless communication technology George employed in the above scenario?

LPWAN

MQTT

NB-IoT

Zigbee

5. What would you enter if you wanted to perform a stealth scan using Nmap?

nmap -sT

nmap -sU

nmap -sS

nmap -sM

6. John, a professional hacker, targeted CyberSol Inc., an MNC. He decided to discover the loT devices connected in the target network that are using default credentials and are vulnerable to various hijacking attacks. For this purpose, he used an automated tool to scan the target network for specific types of loT devices and detect whether they are using the default, factory-set credentials. What is the tool employed by John in the above scenario?

loT Inspector

loTSeeker

Azure loT Central

AT&T loT Platform

7. Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two. What would you call this attack?

Poisoning Attack

ARP Proxy

Man-in-the-middle

Interceptor

8. A large mobile telephony and data network operator has a data center that houses network elements. These are essentially large computers running on Linux. The perimeter of the data center is secured with firewalls and IPS systems. What is the best security policy concerning this setup?

Network elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.

There is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.

The operator knows that attacks and down time are inevitable and should have a backup site.

As long as the physical access to the network elements is restricted, there is no need for additional measures.

9. Bob, an attacker, has managed to access a target loT device. He employed an online tool to gather information related to the model of the loT device and the certifications granted to it. Which of the following tools did Bob employ to gather the above Information?

EarthExplorer

search.com

FCC ID search

Google image search

10. Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?

Data-driven firewall

Stateful firewall

Web application firewall

Packet firewall

11. You are analysing traffic on the network with Wireshark. You want to routinely run a cron job which will run the capture against a specific set of IPs - 192.168.8.0/24. What command you would use?

sudo tshark -f''net 192 .68.8.0/24''

tshark -net 192.255.255.255 mask 192.168.8.0

wireshark --capture --local masked 192.168.8.0 ---range 24

wireshark --fetch ''192.168.8*''

12. There are multiple cloud deployment options depending on how isolated a customer's resources are from those of other customers. Shared environments share the costs and allow each customer to enjoy lower operations expenses. One solution Is for a customer to Join with a group of users or organizations to share a cloud environment. What is this cloud deployment option called?

Hybrid

Public

Community

Private

13. Calvin, a grey-hat hacker, targets a web application that has design flaws in its authentication mechanism. He enumerates usernames from the login form of the web application, which requests users to feed data and specifies the incorrect field in case of invalid credentials. Later, Calvin uses this information to perform social engineering. Which of the following design flaws in the authentication mechanism is exploited by Calvin?

Password reset mechanism

Insecure transmission of credentials

User impersonation

Verbose failure messages

14. Why should the security analyst disable/remove unnecessary ISAPI filters?

To defend against social engineering attacks

To defend against jailbreaking

To defend against webserver attacks

To defend against wireless attacks

15. In this attack, a victim receives an e-mail claiming from PayPal stating that their account has been disabled and confirmation is required before activation. The attackers then scam to collect not one but two credit card numbers, ATM PIN number and other personal details. Ignorant users usually fall prey to this scam. Which of the following statement is incorrect related to this attack?

Review credit card and bank account statements regularly

Antivirus, anti-spyware, and firewall software can very easily detect these type of attacks

Do not reply to email messages or popup ads asking for personal or financial information

Do not send credit card numbers, and personal or financial information via e-mail

Do not trust telephone numbers in e-mails or popup ads

16. What is GINA?

GUI Installed Network Application CLASS

Global Internet National Authority (G-USA)

Graphical Identification and Authentication DLL

Gateway Interface Network Application

17. Attacker Simon targeted the communication network of an organization and disabled the security controls of NetNTLMvl by modifying the values of LMCompatibilityLevel, NTLMMinClientSec, and RestrictSendingNTLMTraffic. He then extracted all the non-network logon tokens from all the active processes to masquerade as a legitimate user to launch further attacks. What is the type of attack performed by Simon?

Rainbow table attack

Dictionary attack

Combinator attack

Internal monologue attack

18. While scanning with Nmap, Patin found several hosts which have the IP ID of incremental sequences. He then decided to conduct: nmap -Pn -p- -si kiosk.adobe.com www.riaa.com.kiosk.adobe.com is the host with incremental IP ID sequence. What is the purpose of using "-si" with Nmap?

Conduct ICMP scan

Conduct stealth scan

Conduct silent scan

Conduct IDLE scan

19. At what stage of the cyber kill chain theory model does data exfiltration occur?

Command and control

Actions on objectives

Weaponization

installation

20. You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture in terms of server placement?

All three servers need to face the Internet so that they can communicate between themselves

A web server facing the Internet, an application server on the internal network, a database server on the internal network

A web server and the database server facing the Internet, an application server on the internal network

All three servers need to be placed internally

21. Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored?

asymmetric algorithms

integrity algorithms

symmetric algorithms

hashing algorithms

22. DHCP snooping is a great solution to prevent rogue DHCP servers on your network. Which security feature on switchers leverages the DHCP snooping database to help prevent manin-the-middle attacks?

Dynamic ARP Inspection (DAI)

Layer 2 Attack Prevention Protocol (LAPP)

Spanning tree

Port security

23. What is the purpose of DNS AAAA record?

Authorization, Authentication and Auditing record

IPv6 address resolution record

Address database record

Address prefix record

24. An Internet Service Provider (ISP) has a need to authenticate users connecting via analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network. Which AAA protocol is the most likely able to handle this requirement?

RADIUS

TACACS+

Kerberos

DIAMETER

25. Jake, a professional hacker, installed spyware on a target iPhone to spy on the target user's activities. He can take complete control of the target mobile device by jailbreaking the device remotely and record audio, capture screenshots, and monitor all phone calls and SMS messages. What is the type of spyware that Jake used to infect the target device?

Trident

Androrat

DroidSheep

Zscaler

26. The network team has well-established procedures to follow for creating new rules on the firewall. This includes having approval from a manager prior to implementing any new rules. While reviewing the firewall configuration, you notice a recently implemented rule but cannot locate manager approval for it. What would be a good step to have in the procedures for a situation like this?

Have the network team document the reason why the rule was implemented without prior manager approval.

Immediately roll back the firewall rule until a manager can approve it

Monitor all traffic using the firewall rule until a manager can approve it.

Do not roll back the firewall rule as the business may be relying upon it, but try to get manager approval as soon as possible.

27. Juliet, a security researcher in an organization, was tasked with checking for the authenticity of images to be used in the organization's magazines. She used these images as a search query and tracked the original source and details of the images, which included photographs, profile pictures, and memes. Which of the following footprinting techniques did Rachel use to finish her task?

Advanced image search

Google advanced search

Reverse image search

Meta search engines

28. Richard, an attacker, targets an MNC In this process, he uses a footprinting technique to gather as much information as possible. Using this technique, he gathers domain information such as the target domain name, contact details of its owner, expiry date, and creation date. With this information, he creates a map of the organization's network and misleads domain owners with social engineering to obtain internal details of its network. What type of footprinting technique is employed by Richard?

VPN footprinting

Email footprinting

VoIP footprinting

Whois footprinting

29. Your organization has signed an agreement with a web hosting provider that requires you to take full responsibility of the maintenance of the cloud-based resources. Which of the following models covers this?

Platform as a service

Software as a service

Functions as a service

service Infrastructure as a service

30. Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?

Error-based injection

Boolean-based blind SQL injection

Blind SQL injection

Union SQL injection

Certified Ethical Hacker Exam (CEHv12) 312-50v12 Exam Study Guides

Certified Ethical Hacker Exam (CEHv12) 312-50v12 Exam Study Guides

Share this post

Leave a Reply Cancel reply

Related Posts