最新的EC-COUNCIL Certified Ethical Hacker Exam (CEH v11) - 312-50v11免費考試真題
問題1
what firewall evasion scanning technique make use of a zombie system that has low network activity as well as its fragment identification numbers?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題2
Internet Protocol Security IPsec is actually a suite pf protocols. Each protocol within the suite provides different functionality. Collective IPsec does everything except.
正確答案: C
說明：（僅 VCESoft 成員可見）
問題3
What would you enter if you wanted to perform a stealth scan using Nmap?
正確答案: B
問題4
Stephen, an attacker, targeted the industrial control systems of an organization. He generated a fraudulent email with a malicious attachment and sent it to employees of the target organization. An employee who manages the sales software of the operational plant opened the fraudulent email and clicked on the malicious attachment. This resulted in the malicious attachment being downloaded and malware being injected into the sales software maintained in the victim's system. Further, the malware propagated itself to other networked systems, finally damaging the industrial automation components. What is the attack technique used by Stephen to damage the industrial systems?
正確答案: C
問題5
You want to do an ICMP scan on a remote computer using hping2. What is the proper syntax?
正確答案: B
問題6
What is not a PCI compliance recommendation?
正確答案: A
問題7
An Intrusion Detection System (IDS) has alerted the network administrator to a possibly malicious sequence of packets sent to a Web server in the network's external DMZ. The packet traffic was captured by the IDS and saved to a PCAP file. What type of network tool can be used to determine if these packets are genuinely malicious or simply a false positive?
正確答案: C
問題8
After an audit, the auditors Inform you that there is a critical finding that you must tackle Immediately. You read the audit report, and the problem is the service running on port 389. Which service Is this and how can you tackle the problem?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題9
Which of the following incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an organization?
正確答案: B
問題10
One of your team members has asked you to analyze the following SOA record.
What is the TTL? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.)
What is the TTL? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.)
正確答案: C
問題11
Study the following log extract and identify the attack.
正確答案: B
問題12
While testing a web application in development, you notice that the web server does not properly ignore the "dot dot slash" (../) character string and instead returns the file listing of a folder structure of the server.
What kind of attack is possible in this scenario?
What kind of attack is possible in this scenario?
正確答案: B
說明：（僅 VCESoft 成員可見）
