Free 312-50 Exam Braindumps
Ethical Hacker Certified Questions 151–155 (page: 32)

Updated On: 10-Feb-2026

Which of the following tools are used for enumeration? (Choose three.)

  1. SolarWinds
  2. USER2SID
  3. Cheops
  4. SID2USER
  5. DumpSec

Answer(s): B,D,E

Explanation:

USER2SID, SID2USER, and DumpSec are three of the tools used for system enumeration. Others are tools such as NAT and Enum. Knowing which tools are used in each step of the hacking methodology is an important goal of the CEH exam. You should spend a portion of your time preparing for the test practicing with the tools and learning to understand their output.



What did the following commands determine?

C : user2sid \earth guest
S-1-5-21-343818398-789336058-1343024091-501
C:sid2user 5 21 343818398 789336058 1343024091 500
Name is Joe Domain is EARTH

  1. That the Joe account has a SID of 500
  2. These commands demonstrate that the guest account has NOT been disabled
  3. These commands demonstrate that the guest account has been disabled
  4. That the true administrator is Joe
  5. Issued alone, these commands prove nothing

Answer(s): D

Explanation:

One important goal of enumeration is to determine who the true administrator is. In the example above, the true administrator is Joe.



Which definition among those given below best describes a covert channel?

  1. A server program using a port that is not well known.
  2. Making use of a protocol in a way it is not intended to be used.
  3. It is the multiplexing taking place on a communication link.
  4. It is one of the weak channels used by WEP which makes it insecure.

Answer(s): B

Explanation:

A covert channel is described as: "any communication channel that can be exploited by a process to transfer information in a manner that violates the systems security policy." Essentially, it is a method of communication that is not part of an actual computer system design, but can be used to transfer information to users or system processes that normally would not be allowed access to the information.



Susan has attached to her company’s network. She has managed to synchronize her boss’s sessions with that of the file server. She then intercepted his traffic destined for the server, changed it the way she wanted to and then placed it on the server in his home directory. What kind of attack is Susan carrying on?

  1. A sniffing attack
  2. A spoofing attack
  3. A man in the middle attack
  4. A denial of service attack

Answer(s): C

Explanation:

A man-in-the-middle attack (MITM) is an attack in which an attacker is able to read, insert and modify at will, messages between two parties without either party knowing that the link between them has been compromised.



Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two.
What would you call this attack?

  1. Interceptor
  2. Man-in-the-middle
  3. ARP Proxy
  4. Poisoning Attack

Answer(s): B

Explanation:

A man-in-the-middle attack (MITM) is an attack in which an attacker is able to read, insert and modify at will, messages between two parties without either party knowing that the link between them has been compromised.



Viewing page 32 of 154
Viewing questions 156 - 160 out of 765 questions


Post your Comments and Discuss EC-Council 312-50 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!