312-50v12 practice test

1. Question 1 · 1

   In this form of encryption algorithm, every individual block contains 64-bit data, and three keys are used, where each key consists of 56 bits. Which is this encryption algorithm?

   Choose one answer.

   • IDEA
   • Triple Data Encryption Standard
   • AES
   • MD5 encryption algorithm

2. Question 2 · 1

   You are a penetration tester working to test the user awareness of the employees of the client XYZ. You harvested two employees’ emails from some public sources and are creating a client-side backdoor to send it to the employees via email. Which stage of the cyber kill chain are you at?

   Choose one answer.

   • Reconnaissance
   • Weaponization
   • Command and control
   • Exploitation

3. Question 3 · 1

   Emily, an extrovert obsessed with social media, posts a large amount of private information, photographs, and location tags of recently visited places. Realizing this, James, a professional hacker, targets Emily and her acquaintances, conducts a location search to detect their geolocation by using an automated tool, and gathers information to perform other sophisticated attacks. What is the tool employed by James in the above scenario?

   Choose one answer.

   • ophcrack
   • VisualRoute
   • Hootsuite
   • HULK

4. Question 4 · 1

   Alice needs to send a confidential document to her coworker, Bryan. Their company has public key infrastructure set up. Therefore, Alice both encrypts the message and digitally signs it. Alice uses _______________ to encrypt the message, and Bryan uses _______________ to confirm the digital signature.

   Choose one answer.

   • Bryan’s public key; Bryan’s public key
   • Alice’s public key; Alice’s public key
   • Bryan’s private key; Alice’s public key
   • Bryan’s public key; Alice’s public key

5. Question 5 · 1

   What is the file that determines the basic configuration (specifically activities, services, broadcast receivers, etc.) in an Android application?

   Choose one answer.

   • AndroidManifest.xml
   • classes.dex
   • APK.info
   • resources.asrc

6. Question 6 · 1

   Mason, a professional hacker, targets an organization and spreads Emotet malware through malicious script. After infecting the victim's device, Mason further used Emotet to spread the infection across local networks and beyond to compromise as many machines as possible. In this process, he used a tool, which is a self-extracting RAR file, to retrieve information related to network resources such as writable share drives. What is the tool employed by Mason in the above scenario?

   Choose one answer.

   • NetPass.exe
   • Outlook scraper
   • WebBrowserPassView
   • Credential enumerator

7. Question 7 · 1

   Which of the following Bluetooth hacking techniques refers to the theft of information from a wireless device through Bluetooth?

   Choose one answer.

   • Bluesmacking
   • Bluesnarfing
   • Bluejacking
   • Bluebugging

8. Question 8 · 1

   While browsing his Facebook feed, Matt sees a picture one of his friends posted with the caption, “Learn more about your friends!”, as well as a number of personal questions. Matt is suspicious and texts his friend, who confirms that he did indeed post it. With assurance that the post is legitimate, Matt responds to the questions on the post. A few days later, Matt’s bank account has been accessed, and the password has been changed. What most likely happened?

   Choose one answer.

   • Matt inadvertently provided the answers to his security questions when responding to the post.
   • Matt inadvertently provided his password when responding to the post.
   • Matt’s computer was infected with a keylogger.
   • Matt’s bank-account login information was brute forced.

9. Question 9 · 1

   Attacker Simon targeted the communication network of an organization and disabled the security controls of NetNTLMv1 by modifying the values of LMCompatibilityLevel, NTLMMinClientSec, and RestrictSendingNTLMTraffic. He then extracted all the non-network logon tokens from all the active processes to masquerade as a legitimate user to launch further attacks. What is the type of attack performed by Simon?

   Choose one answer.

   • Combinator attack
   • Dictionary attack
   • Rainbow table attack
   • Internal monologue attack

10. Question 10 · 1

    Steve, an attacker, created a fake profile on a social media website and sent a request to Stella. Stella was enthralled by Steve’s profile picture and the description given for his profile, and she initiated a conversation with him soon after accepting the request. After a few days, Steve started asking about her company details and eventually gathered all the essential information regarding her company. What is the social engineering technique Steve employed in the above scenario?

    Choose one answer.

    • Baiting
    • Piggybacking
    • Diversion theft
    • Honey trap

11. Question 11 · 1

    Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company. The phishing message will often use the name of the company CEO, President, or Managers. The time a hacker spends performing research to locate this information about a company is known as?

    Choose one answer.

    • Exploration
    • Investigation
    • Reconnaissance
    • Enumeration

12. Question 12 · 1

    Attacker Lauren has gained the credentials of an organization’s internal server system, and she was often logging in during irregular times to monitor the network activities. The organization was skeptical about the login times and appointed security professional Robert to determine the issue. Robert analyzed the compromised device to find incident details such as the type of attack, its severity, target, impact, method of propagation, and vulnerabilities exploited. What is the incident handling and response (IH&R) phase, in which Robert has determined these issues?

    Choose one answer.

    • Incident triage
    • Preparation
    • Incident recording and assignment
    • Eradication

13. Question 13 · 1

    While performing an Nmap scan against a host, Paola determines the existence of a firewall. In an attempt to determine whether the firewall is stateful or stateless, which of the following options would be best to use?

    Choose one answer.

    • -sA
    • -sX
    • -sT
    • -sF

14. Question 14 · 1

    At what stage of the cyber kill chain theory model does data exfiltration occur?

    Choose one answer.

    • Weaponization
    • Actions on objectives
    • Command and control
    • Installation

15. Question 15 · 1

    Johnson, an attacker, performed online research for the contact details of reputed cybersecurity firms. He found the contact number of sibertech.org and dialed the number, claiming himself to represent a technical support team from a vendor. He warned that a specific server is about to be compromised and requested sibertech.org to follow the provided instructions. Consequently, he prompted the victim to execute unusual commands and install malicious files, which were then used to collect and pass critical information to Johnson’s machine. What is the social engineering technique Steve employed in the above scenario?

    Choose one answer.

    • Diversion theft
    • Quid pro quo
    • Elicitation
    • Phishing

Paid access to all 312 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.