Question 411 · 888 in bank
Which of the following is a common Service Oriented Architecture (SOA) vulnerability?
Show answer
Answer: D
312-50ProfessionalEC-CouncilAll questions freePage 42 of 89
312-50 practice questions 411–420
Certified Ethical Hacker (CEH)888 questions across 89 pages are complete and free, with no account or card.
Official study references
888 questions in this bank
Free access · progress saved on this device
Question 412 · 888 in bank
You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration?
Show answer
Answer: D
Question 413 · 888 in bank
Juliet, a security researcher in an organization, was tasked with checking for the authenticity of images to be used in the organization's magazines. She used these images as a search query and tracked the original source and details of the images, which included photographs, profile pictures, and memes. Which of the following footprinting techniques did Rachel use to finish her task?
Show answer
Answer: C
Question 414 · 888 in bank
An IT security engineer notices that the company’s web server is currently being hacked. What should the engineer do next?
Show answer
Answer: A
Explanation
In the above scenario, the company’s web server is hacked. As an IT security engineer, your first task is to unplug the network connection (cable) on the company’s web server from the router and modem in order to prevent further attacks.
Source: Adapted from community discussion — salei
Question 415 · 888 in bank
Mary, a penetration tester, has found password hashes in a client system she managed to breach. She needs to use these passwords to continue with the test, but she does not have time to find the passwords that correspond to these hashes. Which type of attack can she implement in order to continue?
Show answer
Answer: A
Question 416 · 888 in bank
Cross-site request forgery involves:
Show answer
Answer: C
Question 417 · 888 in bank
Morris, a professional hacker, performed a vulnerability scan on a target organization by sniffing the traffic on the network to identify the active systems, network services, applications, and vulnerabilities. He also obtained the list of the users who are currently accessing the network. What is the type of vulnerability assessment that Morris performed on the target organization?
Show answer
Answer: D
Question 418 · 888 in bank
Which of the following network attacks takes advantage of weaknesses in the fragment reassembly functionality of the TCP/IP protocol stack?
Show answer
Answer: A
Explanation
A teardrop attack is a denial-of-service (DoS) attack that involves sending fragmented packets to a target machine. Since the machine receiving such packets cannot reassemble them due to a bug in TCP/IP fragmentation reassembly, the packets overlap one another, crashing the target network device.
Source: Adapted from community discussion — Joker20
Question 419 · 888 in bank
What does the option * indicate?
Show answer
Answer: C
Question 420 · 888 in bank
An Intrusion Detection System (IDS) has alerted the network administrator to a possibly malicious sequence of packets sent to a Web server in the network's external DMZ. The packet traffic was captured by the IDS and saved to a PCAP file. What type of network tool can be used to determine if these packets are genuinely malicious or simply a false positive?
Show answer
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
312-50 practice, question 411. 888 questions available.
About this question bank
Version 1.0.0. How we source questions