V12
1-10
https://www.examtopics.com/exams/eccouncil/312-50v12/view/
5
https://www.examtopics.com/discussions/eccouncil/view/105093-exam-312-50v12-topic-1-question-5-discussion/
WPA3-personal-128bit
WPA3-enterprise-192bit
11-20
https://www.examtopics.com/exams/eccouncil/312-50v12/view/2/
17
Initial intrusion 初始入侵
18
https://www.examtopics.com/discussions/eccouncil/view/105106-exam-312-50v12-topic-1-question-18-discussion/
B. STP attack (Spanning Tree Protocol attack)
This is a type of STP attack, which manipulates the Spanning Tree Protocol to create a loop in the network topology, allowing the attacker to intercept and inspect network traffic.
21-30
https://www.examtopics.com/exams/eccouncil/312-50v12/view/3/
28
https://www.examtopics.com/discussions/eccouncil/view/105119-exam-312-50v12-topic-1-question-28-discussion/
C. Hit-list scanning technique.
31-40
https://www.examtopics.com/exams/eccouncil/312-50v12/view/4/
41-50
https://www.examtopics.com/exams/eccouncil/312-50v12/view/5/
49
https://www.examtopics.com/discussions/eccouncil/view/105148-exam-312-50v12-topic-1-question-49-discussion/
NetBIOS code <03>
51-60
https://www.examtopics.com/exams/eccouncil/312-50v12/view/6/
61-70
https://www.examtopics.com/exams/eccouncil/312-50v12/view/7/
https://www.examtopics.com/discussions/eccouncil/view/105171-exam-312-50v12-topic-1-question-69-discussion/
Unspecified Proxy Activities : An adversary can create and configure multiple domains pointing to the same host, thus, allowing an adversary to switch quickly between the domains to avoid detection. Security professionals can find unspecified domains by checking the data feeds that are generated by those domains. Using this data feed, the security professionals can also find any malicious files downloaded and the unsolicited communication with the outside network based on the domains.
71-80
https://www.examtopics.com/exams/eccouncil/312-50v12/view/8/
https://www.examtopics.com/discussions/eccouncil/view/105175-exam-312-50v12-topic-1-question-73-discussion/
D. Infoga: Infoga is an open-source information gathering tool used for gathering email accounts, usernames, and other personal information from various online sources. It can be used for reconnaissance and intelligence gathering in ethical hacking and cybersecurity assessments.
https://www.examtopics.com/discussions/eccouncil/view/105177-exam-312-50v12-topic-1-question-75-discussion/
C. Cloud hopper attack
https://www.examtopics.com/discussions/eccouncil/view/105179-exam-312-50v12-topic-1-question-77-discussion/
D. Time-based and boolean-based
81
https://www.examtopics.com/discussions/eccouncil/view/105185-exam-312-50v12-topic-1-question-81-discussion/
B. Dragonblood
Dragonblood is a set of vulnerabilities in the WPA3 security standard that allows attackers to recover keys, downgrade security mechanisms, and launch various information-theft attacks
https://www.examtopics.com/discussions/eccouncil/view/105187-exam-312-50v12-topic-1-question-83-discussion/
B. Slowloris attack
This is a type of DDoS attack that targets the application layer of the OSI model, where common internet requests occur, such as HTTP GET and HTTP POST. This attack works by sending partial, but not complete, HTTP requests to the target server, and keeping many simultaneous connections open between the attacker and the target.
https://www.examtopics.com/discussions/eccouncil/view/105188-exam-312-50v12-topic-1-question-84-discussion/
B. ARP ping scan
https://www.examtopics.com/discussions/eccouncil/view/105192-exam-312-50v12-topic-1-question-88-discussion/
C. Out-of-band SQLi
In Out-of-Band SQL injection, the attacker needs to communicate with the server and acquire features of the database server used by the web application
https://www.examtopics.com/discussions/eccouncil/view/105194-exam-312-50v12-topic-1-question-90-discussion/
D. KRACK – (K)ey (R)einstallation (A)tta(CK)
https://www.examtopics.com/discussions/eccouncil/view/105196-exam-312-50v12-topic-1-question-92-discussion/
D. Implement cognitive radios in the physical layer.
Cognitive radios can sense the environment, sense other RF devices’ signals, and use different frequencies in response to the sensing results. This makes the device very flexible in terms of being able to adjust to different environments and also to be able to detect and evade jamming or scrambling attacks. By deploying cognitive radios, Mike can mitigate the effects of DoS/DDoS attacks that use jamming or scrambling techniques.
https://www.examtopics.com/discussions/eccouncil/view/105198-exam-312-50v12-topic-1-question-94-discussion/
C. Censys.
Censys is a popular information-gathering tool used to collect information about devices connected to a network, open ports and services, and the attack surface area. It is used to generate statistical reports on broad usage patterns and trends, and to continually monitor every reachable server and device on the Internet, making it an ideal tool for hackers to gather information about their targets.
https://www.examtopics.com/discussions/eccouncil/view/105204-exam-312-50v12-topic-1-question-100-discussion/
C. Hootsuite: Hootsuite is a social media management platform that allows users to manage and schedule posts on multiple social media accounts from a single dashboard. It provides features like content scheduling, social media listening, analytics, and collaboration tools.
https://www.examtopics.com/discussions/eccouncil/view/105276-exam-312-50v12-topic-1-question-104-discussion/
B. Bluesnarfing: Unauthorized access to a Bluetooth device to extract personal information.
https://www.examtopics.com/discussions/eccouncil/view/105279-exam-312-50v12-topic-1-question-106-discussion/
D. Internal monologue attack 內部獨白攻擊
https://www.examtopics.com/discussions/eccouncil/view/105280-exam-312-50v12-topic-1-question-107-discussion/
D. Honey trap 美人計
111
https://www.examtopics.com/discussions/eccouncil/view/105285-exam-312-50v12-topic-1-question-111-discussion/
B. Quid pro quo An exchange where one party provides value in return for a benefit.一方提供價值以換取利益的交換。
https://www.examtopics.com/discussions/eccouncil/view/105286-exam-312-50v12-topic-1-question-112-discussion/
B. Syhunt Hybrid: Web app security testing tool for finding vulnerabilities.
https://www.examtopics.com/discussions/eccouncil/view/105288-exam-312-50v12-topic-1-question-114-discussion/
C. TCP Maimon scan
This scan technique is very similar to NULL, FIN, and Xmas scan, but the probe used here is FIN/ACK. In most cases, to determine if the port is open or closed, the RST packet should be generated as a response to a probe request. However, in many BSD systems, the port is open if the packet gets dropped in response to a probe.
https://www.examtopics.com/discussions/eccouncil/view/105289-exam-312-50v12-topic-1-question-115-discussion/
C. Flowmon
Flowmon is an OT security tool that is designed to protect against security incidents such as cyber espionage, zero-day attacks, and malware in critical infrastructure environments. It can detect and prevent network anomalies and attacks on industrial control systems and help ensure the reliability and availability of industrial networks. Robotium is a mobile app testing framework, BalenaCloud is a container-based platform for building and deploying IoT applications, and IntentFuzzer is an Android app testing tool. None of these tools are designed for OT security or protecting critical infrastructure.
以下為 2024/2 新增