ECCouncil 312-50v12 Exam Dumps

Clickjacking attack

Explanation: https://en.wikipedia.org/wiki/Clickjacking
Clickjacking is an attack that tricks a user into clicking a webpage element which is invisible
or disguised as another element. This can cause users to unwittingly download malware, visit malicious web pages, provide credentials or sensitive information, transfer money, or
purchase products online.
Typically, clickjacking is performed by displaying an invisible page or HTML element, inside
an iframe, on top of the page the user sees. The user believes they are clicking the visible
page but in fact they are clicking an invisible element in the additional page transposed on
top of it.

Stealth virus

Single sign-on

The service is LDAP. and you must change it to 636. which is LDPAPS.

Explanation: https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol
LDAP, the Lightweight Directory Access Protocol, is a mature, flexible, and well supported
standards-based mechanism for interacting with directory servers. It’s often used for
authentication and storing information about users, groups, and applications, but an LDAP
directory server is a fairly general-purpose data store and can be used in a wide variety of
applications.
The LDAP protocol can deal in quite a bit of sensitive data: Active Directory usernames,
login attempts, failed-login notifications, and more. If attackers get ahold of that data in
flight, they might be able to compromise data like legitimate AD credentials and use it to
poke around your network in search of valuable assets.
Encrypting LDAP traffic in flight across the network can help prevent credential theft and
other malicious activity, but it's not a failsafe—and if traffic is encrypted, your own team
might miss the signs of an attempted attack in progress.
While LDAP encryption isn't standard, there is a nonstandard version of LDAP called
Secure LDAP, also known as "LDAPS" or "LDAP over SSL" (SSL, or Secure Socket Layer,
being the now-deprecated ancestor of Transport Layer Security).
LDAPS uses its own distinct network port to connect clients and servers. The default port
for LDAP is port 389, but LDAPS uses port 636 and establishes TLS/SSL upon connecting
with a client.

Worm