Exam 312-50v11 All Questions

View all questions & answers for the 312-50v11 exam

Exam 312-50v11 topic 1 question 364 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 364
Topic #: 1

Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections.
Which of the following attack techniques is used by Stella to compromise the web services?

A. Web services parsing attacks
B. WS-Address spoofing
C. SOAPAction spoofing
D. XML injection

Show Suggested Answer

Suggested Answer: B 🗳️

by jinjection at Sept. 28, 2021, 9:34 a.m.

Comments

Submit Cancel

beowolf

Highly Voted 1 year, 9 months ago

Answer is B. WS-Address spoofing WS-Address provides additional routing information in the SOAP header to support asynchronous communication. This technique allows the transmission of web service requests and response messages using different TCP connections

upvoted 12 times

...

Mimshack

Highly Voted 1 year, 9 months ago

Indeed B is the answer: CEH V11 Module 14 Page 1896

upvoted 6 times

...

Daniel8660

Most Recent 8 months, 3 weeks ago

Selected Answer: B

Web Service Attacks: WS-Address Spoofing WS-address provides additional routing information in the SOAP header to support asynchronous communication. In a WS-address spoofing attack, an attacker sends a SOAP message containing fake WS-address information to the server.The <ReplyTo> header consists of the address of the endpoint selected by the attacker rather than the address of the web service client. (P.1907/1891)

upvoted 2 times

...

ritviksharma3

11 months, 2 weeks ago

Selected Answer: B

Answer B is correct.

upvoted 1 times

...

bolshoibooze

1 year, 1 month ago

Selected Answer: B

CEH courseware page 1896.

upvoted 1 times

...

r4ji

1 year, 2 months ago

Selected Answer: B

WS-Address Spoofing - refer to CEH courseware page 1896.

upvoted 1 times

...

Tasadar92

1 year, 3 months ago

Selected Answer: B

WS-Address provides additional routing information in the SOAP header to support asynchronous communication.

upvoted 1 times

...

APOLLO1113

1 year, 5 months ago

Selected Answer: B

according to the offical CEH guide, the answer is B, WS-Adress Spoofing

upvoted 2 times

...

mrhaky

1 year, 5 months ago

WS-Address provides additional routing information in the SOAP header to support asynchronous communication. This technique allows the transmission of web service requests and response messages using different TCP connections

upvoted 1 times

...

TheDark

1 year, 6 months ago

correct answer is B - WS address spoofing. Admin please change the answer

upvoted 1 times

...

Epiphysis_89

1 year, 8 months ago

WS-address provides additional routing information in the SOAP header to support asynchronous communication In a WS-address spoofing attack, an attacker sends a SOAP message containing fake WS-address information to the server. The <ReplyTo> header consists of the address of the endpoint selected by the attacker rather than the address of the web service client Regular

upvoted 4 times

...

serenityy

1 year, 8 months ago

WS-Address Spoofing asynchronous communication

upvoted 2 times

...

jinjection

1 year, 9 months ago

Correct C

upvoted 1 times

jinjection

1 year, 9 months ago

Correct B sorry https://www.google.com/search?client=firefox-b-d&q=WS-Address+spoofing

upvoted 1 times

...