Prepare with ECCouncil 312-50v13 exam practice material, pass for sure

During a red-team exercise for a healthcare network in Boston, Massachusetts, penetration tester Jordan deploys a covert data-capture mechanism on a target endpoint. The mechanism is embedded as a modified system component that operates at the core processing level, intercepting input signals directly through driver- level overrides without relying on user-space applications.
Further review indicates that the mechanism remains hidden from standard detection utilities and stores captured keystroke sequences in a concealed file for later retrieval.
Based on the described deployment, identify the type of keystroke logger being simulated.

• A. Kernel-Mode Keylogger
• B. Form-Grabbing-Based Keylogger
• C. Hypervisor-Based Keylogger
• D. Application Keylogger

During a malware propagation simulation for a government agency in Washington, DC, ethical hacker Mia Lopez tests how threats could identify additional targets within a network. In the controlled environment, the initial system first compiles a predefined inventory of potentially susceptible devices based on reconnaissance data, then systematically probes each for exploitable weaknesses to expand the infection.
This approach allows the simulated malware to prioritize high-likelihood victims, reducing random scanning noise and accelerating propagation without relying on real-time discoveries from infected hosts or local- subnet exploration.
What scanning method for finding vulnerable machines is demonstrated in this scenario?

• A. Local Subnet Scanning
• B. Topological Scanning
• C. Hit-List Scanning
• D. Random Scanning

In a private exploit-development laboratory in Boston, Massachusetts, ethical hacker Elena Vasquez was refining a custom buffer-overflow exploit for a legacy application during the system-hacking phase of an advanced red-team engagement. To increase the reliability of the exploit and create a larger landing area for the shellcode, she needed to insert a sequence of safe instructions that would not alter the program's execution flow.
She loaded a specific Metasploit module that allowed her to generate this padding sequence in an arbitrary length and format it for inclusion in the exploit code.
What Metasploit module was Elena most likely using?

• A. Metasploit NOPS Module
• B. Metasploit Auxiliary Module
• C. Metasploit Encoder Module
• D. Metasploit Payload Module

A penetration tester is investigating a web server that allows unrestricted file uploads without validating file types. Which technique should be used to exploit this vulnerability and potentially gain control of the server?

• A. Upload a shell script disguised as an image file to execute commands on the server
• B. Conduct a brute-force attack on the server ' s FTP service to gain access
• C. Perform a SQL injection attack to extract sensitive database information
• D. Use a Cross-Site Scripting (XSS) attack to steal user session cookies

During a high-stakes engagement, a penetration tester abuses MS-EFSRPC to force a domain controller to authenticate to an attacker-controlled server. The tester captures the NTLM hash and relays it to AD CS to obtain a certificate granting domain admin privileges. Which network-level hijacking technique is illustrated?

• A. Hijacking sessions using a PetitPotam relay attack
• B. Employing a session donation method to transfer tokens
• C. Exploiting vulnerabilities in TLS compression via a CRIME attack
• D. Stealing session tokens using browser-based exploits