exam questions

Exam 312-50v11 All Questions

View all questions & answers for the 312-50v11 exam

Exam 312-50v11 topic 1 question 262 discussion

Actual exam question from ECCouncil's 312-50v11
Question #: 262
Topic #: 1
[All 312-50v11 Questions]

You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible
Intrusion Detection System. What is the best approach?

  • A. Use Alternate Data Streams to hide the outgoing packets from this server.
  • B. Use HTTP so that all traffic can be routed vis a browser, thus evading the internal Intrusion Detection Systems.
  • C. Install Cryptcat and encrypt outgoing packets from this server.
  • D. Install and use Telnet to encrypt all outgoing traffic from this server.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
andrewdh
Highly Voted 2 years, 6 months ago
CryptCat is a simple Unix utility which reads and writes data across network connections, using TCP or UDP protocol while encrypting the data being transmitted.
upvoted 9 times
...
Vincent_Lu
Most Recent 7 months ago
Selected Answer: C
Explanation Cryptcat enables us to communicate between two systems and encrypts the communication between them with twofish
upvoted 1 times
...
Hackeram
10 months, 2 weeks ago
awesome thanks guys
upvoted 1 times
...
Daniel8660
1 year, 6 months ago
Selected Answer: C
Employ a crypter such as BitCrypter to encrypt the Trojan to evade detection by firewalls/IDS. (P.904/888)
upvoted 4 times
...
ANDRESCB1988
2 years, 9 months ago
correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago