Free 312-50 Exam Braindumps
Ethical Hacker Certified Questions 256–260 (page: 53)

Updated On: 10-Feb-2026

When Jason moves a file via NFS over the company's network, you want to grab a copy of it by sniffing. Which of the following tool accomplishes this?

  1. macof
  2. webspy
  3. filesnarf
  4. nfscopy

Answer(s): C

Explanation:

Filesnarf - sniff files from NFS traffic OPTIONS
-i interface
Specify the interface to listen on.
-v "Versus" mode. Invert the sense of matching, to select non-matching files.
pattern
Specify regular expression for filename matching. expression
Specify a tcpdump(8) filter expression to select traffic to sniff.
SEE ALSO
Dsniff, nfsd



What port number is used by Kerberos protocol?

  1. 44
  2. 88
  3. 419
  4. 487

Answer(s): B

Explanation:

Kerberos traffic uses UDP/TCP protocol source and destination port 88.



Which of the following is not considered to be a part of active sniffing?

  1. MAC Flooding
  2. ARP Spoofing
  3. SMAC Fueling
  4. MAC Duplicating

Answer(s): C



What is the command used to create a binary log file using tcpdump?

  1. tcpdump -r log
  2. tcpdump -w ./log
  3. tcpdump -vde -r log
  4. tcpdump -l /var/log/

Answer(s): B

Explanation:

tcpdump [ -adeflnNOpqStvx ] [ -c count ] [ -F file ] [ -i interface ] [ -r file ] [ -s snaplen ] [ -T type ] [ -w file ] [ expression ]
-w Write the raw packets to file rather than parsing and printing them out.



ARP poisoning is achieved in _____ steps

  1. 1
  2. 2
  3. 3
  4. 4

Answer(s): B

Explanation:

The hacker begins by sending a malicious ARP "reply" (for which there was no previous request) to your router, associating his computer's MAC address with your IP Address. Now your router thinks the hacker's computer is your computer. Next, the hacker sends a malicious ARP reply to your computer, associating his MAC Address with the routers IP Address. Now your machine thinks the hacker's computer is your router. The hacker has now used ARP poisoning to accomplish a MitM attack.



Viewing page 53 of 154
Viewing questions 261 - 265 out of 765 questions


Post your Comments and Discuss EC-Council 312-50 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!