You are guaranteed a fantastic achievement by using Ucertify EC-Council 312-50 free simulated dumps. Get certified this week and download EC-Council EC-Council 312-50 exam questions along with answers on your PC these days. You will become on the means towards accomplishment soon! In the event you have simply no ideas concerning the EC-Council 312-50 exam preparation or are unable to find just what youre searching for, please contact the 7/24 customer service or email in order to support@Ucertify.com with regard to further assistance.

2021 Oct 312-50 exam engine

Q121. Which of the following would be the best reason for sending a single SMTP message to an address that does not exist within the target company? 

A. To create a denial of service attack. 

B. To verify information about the mail administrator and his address. 

C. To gather information about internal hosts used in email treatment. 

D. To gather information about procedures that are in place to deal with such messages. 

Answer: C 

Explanation: The replay from the email server that states that there is no such recipient will also give you some information about the name of the email server, versions used and so on. 


Q122. An nmap command that includes the host specification of 202.176.56-57.* will scan _______ number of hosts. 

A. 2 

B. 256 

C. 512 

D. Over 10,000 

Answer: C

Explanation: The hosts with IP address 202.176.56.0-255 & 202.176.56.0-255 will be scanned (256+256=512) 


Q123. Exhibit: 


You have captured some packets in Ethereal. You want to view only packets sent from 

10.0.0.22. What filter will you apply? 

A. ip = 10.0.0.22 

B. ip.src == 10.0.0.22 

C. ip.equals 10.0.0.22 

D. ip.address = 10.0.0.22 

Answer: B 

Explanation: ip.src tells the filter to only show packets with 10.0.0.22 as the source. 


Q124. If you come across a sheepdip machine at your client’s site, what should you do? 

A. A sheepdip computer is used only for virus-checking. 

B. A sheepdip computer is another name for a honeypot 

C. A sheepdip coordinates several honeypots. 

D. A sheepdip computers defers a denial of service attack. 

Answer: A

Explanation: Also known as a footbath, a sheepdip is the process of checking physical media, such as floppy disks or CD-ROMs, for viruses before they are used in a computer. Typically, a computer that sheepdips is used only for that process and nothing else and is isolated from the other computers, meaning it is not connected to the network. Most sheepdips use at least two different antivirus programs in order to increase effectiveness. 


Q125. MX record priority increases as the number increases.(True/False. 

A. True 

B. False 

Answer: B 

Explanation: The highest priority MX record has the lowest number. 


312-50 practice

Updated 312-50 rapidshare:

Q126. What are the different between SSL and S-HTTP? 

A. SSL operates at the network layer and S-HTTP operates at the application layer 

B. SSL operates at the application layer and S-HTTP operates at the network layer 

C. SSL operates at transport layer and S-HTTP operates at the application layer 

D. SSL operates at the application layer and S-HTTP operates at the transport layer 

Answer: C

Explanation: Whereas SSL is designed to establish a secure connection between two computers, S-HTTP is designed to send individual messages securely. S-HTTP is defined in RFC 2660 


Q127. ou are footprinting Acme.com to gather competitive intelligence. You visit the acme.com websire for contact information and telephone number numbers but do not find it listed there. You know that they had the entire staff directory listed on their website 12 months ago but now it is not there. How would it be possible for you to retrieve information from the website that is outdated? 

A. Visit google search engine and view the cached copy. 

B. Visit Archive.org site to retrieve the Internet archive of the acme website. 

C. Crawl the entire website and store them into your computer. 

D. Visit the company’s partners and customers website for this information. 

Answer: B

Explanation: The Internet Archive (IA) is a non-profit organization dedicated to maintaining an archive of Web and multimedia resources. Located at the Presidio in San Francisco, California, this archive includes "snapshots of the World Wide Web" (archived copies of pages, taken at various points in time), software, movies, books, and audio recordings (including recordings of live concerts from bands that allow it). This site is found at www.archive.org. 


Q128. Reflective DDoS attacks do not send traffic directly at the targeted host. Instead, they usually spoof the originating IP addresses and send the requests at the reflectors. These reflectors (usually routers or high-powered servers with a large amount of network resources at their disposal) then reply to the spoofed targeted traffic by sending loads and loads of data to the final target. 

How would you detect these reflectors on your network? 

A. Run floodnet tool to detect these reflectors 

B. Look for the banner text by running Zobbie Zappers tools 

C. Run Vulnerability scanner on your network to detect these reflectors 

D. Scan the network using Nmap for the services used by these reflectors 

Answer: A

Explanation: http://www.exterminate-it.com/malpedia/remove-floodnet 


Q129. Matthew re-injects a captured wireless packet back onto the network. He does this hundreds of times within a second. The packet is correctly encrypted and Matthew assumes it is an ARP request packet. The wireless host responds with a stream of responses, all individually encrypted with different IVs. What is this attack most appropriately called? 

A. Spoof attack 

B. Replay attack 

C. Injection attack 

D. Rebound attack 

Answer: B

Explanation: A replay attack is a form of network attack in which a valid data transmission is maliciously or fraudulently repeated or delayed. This is carried out either by the originator or by an adversary who intercepts the data and retransmits it, possibly as part of a masquerade attack by IP packet substitution (such as stream cipher attack). 


Q130. What does the following command achieve? 

Telnet <IP Address> <Port 80> 

HEAD /HTTP/1.0 

<Return> 

<Return> 

A. This command returns the home page for the IP address specified 

B. This command opens a backdoor Telnet session to the IP address specified 

C. This command returns the banner of the website specified by IP address 

D. This command allows a hacker to determine the sites security 

E. This command is bogus and will accomplish nothing 

Answer: C

Explanation: This command is used for banner grabbing. Banner grabbing helps identify the service and version of web server running.