Certified Ethical Hacker Exam (CEH v11) - 312-50v11 Exam Practice Test

Question 1

Louis, a professional hacker, had used specialized tools or search engines to encrypt all his browsing activity and navigate anonymously to obtain sensitive/hidden information about official government or federal databases. After gathering the Information, he successfully performed an attack on the target government organization without being traced. Which of the following techniques is described in the above scenario?

A. VoIP footpnnting

B. VPN footprinting

C. website footprinting

D. Dark web footprinting

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company. The phishing message will often use the name of the company CEO, President, or Managers. The time a hacker spends performing research to locate this information about a company is known as?

A. Enumeration

B. Investigation

C. Reconnaissance

D. Exploration

Correct Answer: C

Question 3

Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities. Which type of virus detection method did Chandler use in this context?

A. Code Emulation

B. Integrity checking

C. Scanning

D. Heuristic Analysis

Correct Answer: A

Question 4

Which of the following describes the characteristics of a Boot Sector Virus?

A. Modifies directory table entries so that directory entries point to the virus code instead of the actual program.

B. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR.

C. Overwrites the original MBR and only executes the new virus code.

D. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR.

Correct Answer: B

Question 5

Which results will be returned with the following Google search query? site:target.com - site:Marketing.target.com accounting

A. Results for matches on target.com and Marketing.target.com that include the word "accounting"

B. Results matching "accounting" in domain target.com but not on the site Marketing.target.com

C. Results from matches on the site marketing.target.com that are in the domain target.com but do not include the word accounting.

D. Results matching all words in the query.

Correct Answer: B

Question 6

This TCP flag instructs the sending system to transmit all buffered data immediately.

A. RST

B. URG

C. PSH

D. FIN

E. SYN

Correct Answer: C

Question 7

What is the BEST alternative if you discover that a rootkit has been installed on one of your computers?

A. Reload from known good media

B. Reload from a previous backup

C. Delete the files and try to determine the source

D. Perform a trap and trace

E. Copy the system files from a known good system

Correct Answer: A

Question 8

How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?

A. The right most portion of the hash is always the same

B. There is no way to tell because a hash cannot be reversed

C. The hash always starts with AB923D

D. A portion of the hash will be all 0's

E. The left most portion of the hash is always the same

Correct Answer: A

Question 9

if you send a TCP ACK segment to a known closed port on a firewall but it does not respond with an RST. what do you know about the firewall you are scanning?

A. This event does not tell you encrypting about the firewall.

B. It is a stateful firewall

C. There is no firewall in place.

D. It Is a non-stateful firewall.

Correct Answer: A

Question 10

There are multiple cloud deployment options depending on how isolated a customer's resources are from those of other customers. Shared environments share the costs and allow each customer to enjoy lower operations expenses. One solution Is for a customer to Join with a group of users or organizations to share a cloud environment. What is this cloud deployment option called?

A. Hybrid

B. Public

C. Community

D. Private

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 11

Kate dropped her phone and subsequently encountered an issue with the phone's internal speaker. Thus, she is using the phone's loudspeaker for phone calls and other activities. Bob, an attacker, takes advantage of this vulnerability and secretly exploits the hardware of Kate's phone so that he can monitor the loudspeaker's output from data sources such as voice assistants, multimedia messages, and audio files by using a malicious app to breach speech privacy. What is the type of attack Bob performed on Kate in the above scenario?

A. Man-in-the-disk attack

B. aLTEr attack

C. SIM card attack

D. Spearphone attack

Correct Answer: D

Question 12

While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an attack or other wrong doing. However, you are concerned about affecting the normal functionality of the email server. From the following options choose how best you can achieve this objective?

A. Force all connections to use a username and password.

B. Shut off the SMTP service on the server.

C. None of the above.

D. Block port 25 at the firewall.

E. Switch from Windows Exchange to UNIX Sendmail.

Correct Answer: C

Question 13

Attacker Simon targeted the communication network of an organization and disabled the security controls of NetNTLMvl by modifying the values of LMCompatibilityLevel, NTLMMinClientSec, and RestrictSendingNTLMTraffic. He then extracted all the non-network logon tokens from all the active processes to masquerade as a legitimate user to launch further attacks. What is the type of attack performed by Simon?

A. Combinator attack

B. Internal monologue attack

C. Rainbow table attack

D. Dictionary attack

Correct Answer: B

EC-COUNCIL Certified Ethical Hacker Exam (CEH v11) - 312-50v11 Exam Practice Test

Latest Update

Useful Links

Contact Us