Free 312-50 Exam Braindumps
Ethical Hacker Certified Questions 321–325 (page: 66)

Updated On: 10-Feb-2026

John is using tokens for the purpose of strong authentication. He is not confident that his security is considerably strong.
In the context of Session hijacking why would you consider this as a false sense of security?

  1. The token based security cannot be easily defeated.
  2. The connection can be taken over after authentication.
  3. A token is not considered strong authentication.
  4. Token security is not widely used in the industry.

Answer(s): B

Explanation:

A token will give you a more secure authentication, but the tokens will not help against attacks that are directed against you after you have been authenticated.



What is the key advantage of Session Hijacking?

  1. It can be easily done and does not require sophisticated skills.
  2. You can take advantage of an authenticated connection.
  3. You can successfully predict the sequence number generation.
  4. You cannot be traced in case the hijack is detected.

Answer(s): B

Explanation:

As an attacker you don’t have to steal an account and password in order to take advantage of an authenticated connection.



What type of cookies can be generated while visiting different web sites on the Internet?

  1. Permanent and long term cookies.
  2. Session and permanent cookies.
  3. Session and external cookies.
  4. Cookies are all the same, there is no such thing as different type of cookies.

Answer(s): B

Explanation:

There are two types of cookies: a permanent cookie that remains on a visitor's computer for a given time and a session cookie the is temporarily saved in the visitor's computer memory during the time that the visitor is using the Web site. Session cookies disappear when you close your Web browser.



Which is the right sequence of packets sent during the initial TCP three way handshake?

  1. FIN, FIN-ACK, ACK
  2. SYN, URG, ACK
  3. SYN, ACK, SYN-ACK
  4. SYN, SYN-ACK, ACK

Answer(s): D

Explanation:

A TCP connection always starts with a request for synchronization, a SYN, the reply to that would be another SYN together with a ACK to acknowledge that the last package was delivered successfully and the last part of the three way handshake should be only an ACK to acknowledge that the SYN reply was recived.



What is Hunt used for?

  1. Hunt is used to footprint networks
  2. Hunt is used to sniff traffic
  3. Hunt is used to hack web servers
  4. Hunt is used to intercept traffic i.e. man-in-the-middle traffic
  5. Hunt is used for password cracking

Answer(s): D

Explanation:

Hunt can be used to intercept traffic. It is useful with telnet, ftp, and others to grab traffic between two computers or to hijack sessions.



Viewing page 66 of 154
Viewing questions 326 - 330 out of 765 questions


Post your Comments and Discuss EC-Council 312-50 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!