Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam 312-50v11 topic 1 question 364 discussion

Actual exam question from ECCouncil's 312-50v11
Question #: 364
Topic #: 1
[All 312-50v11 Questions]

Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections.
Which of the following attack techniques is used by Stella to compromise the web services?

  • A. Web services parsing attacks
  • B. WS-Address spoofing
  • C. SOAPAction spoofing
  • D. XML injection
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
beowolf
Highly Voted 2 years, 6 months ago
Answer is B. WS-Address spoofing WS-Address provides additional routing information in the SOAP header to support asynchronous communication. This technique allows the transmission of web service requests and response messages using different TCP connections
upvoted 12 times
...
Mimshack
Highly Voted 2 years, 6 months ago
Indeed B is the answer: CEH V11 Module 14 Page 1896
upvoted 6 times
...
Daniel8660
Most Recent 1 year, 6 months ago
Selected Answer: B
Web Service Attacks: WS-Address Spoofing WS-address provides additional routing information in the SOAP header to support asynchronous communication. In a WS-address spoofing attack, an attacker sends a SOAP message containing fake WS-address information to the server.The <ReplyTo> header consists of the address of the endpoint selected by the attacker rather than the address of the web service client. (P.1907/1891)
upvoted 2 times
...
ritviksharma3
1 year, 9 months ago
Selected Answer: B
Answer B is correct.
upvoted 1 times
...
bolshoibooze
1 year, 11 months ago
Selected Answer: B
CEH courseware page 1896.
upvoted 1 times
...
r4ji
2 years ago
Selected Answer: B
WS-Address Spoofing - refer to CEH courseware page 1896.
upvoted 1 times
...
Tasadar92
2 years ago
Selected Answer: B
WS-Address provides additional routing information in the SOAP header to support asynchronous communication.
upvoted 1 times
...
APOLLO1113
2 years, 2 months ago
Selected Answer: B
according to the offical CEH guide, the answer is B, WS-Adress Spoofing
upvoted 2 times
...
mrhaky
2 years, 3 months ago
WS-Address provides additional routing information in the SOAP header to support asynchronous communication. This technique allows the transmission of web service requests and response messages using different TCP connections
upvoted 1 times
...
TheDark
2 years, 3 months ago
correct answer is B - WS address spoofing. Admin please change the answer
upvoted 1 times
...
Epiphysis_89
2 years, 6 months ago
WS-address provides additional routing information in the SOAP header to support asynchronous communication In a WS-address spoofing attack, an attacker sends a SOAP message containing fake WS-address information to the server. The <ReplyTo> header consists of the address of the endpoint selected by the attacker rather than the address of the web service client Regular
upvoted 4 times
...
serenityy
2 years, 6 months ago
WS-Address Spoofing asynchronous communication
upvoted 2 times
...
jinjection
2 years, 6 months ago
Correct C
upvoted 1 times
jinjection
2 years, 6 months ago
Correct B sorry https://www.google.com/search?client=firefox-b-d&q=WS-Address+spoofing
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...