Online 312-50v10 Test Brain Dump Question and Test Engine [Q267-Q288]

NEW QUESTION 267
Which mode of IPSec should you use to assure security and confidentiality of data within the same LAN?

AH promiscuous

ESP confidential

AH Tunnel mode

ESP transport mode

NEW QUESTION 268
Which of the following is designed to identify malicious attempts to penetrate systems?

Intrusion Detection System

Firewall

Proxy

Router

NEW QUESTION 269
(Note: the student is being tested on concepts learnt during passive OS fingerprinting, basic TCP/IP connection concepts and the ability to read packet signatures from a sniff dump.). Snort has been used to capture packets on the network. On studying the packets, the penetration tester finds it to be abnormal. If you were the penetration tester, why would you find this abnormal?
What is odd about this attack? Choose the best answer.

This is not a spoofed packet as the IP stack has increasing numbers for the three flags.

This is back orifice activity as the scan comes from port 31337.

The attacker wants to avoid creating a sub-carries connection that is not normally valid.

These packets were crafted by a tool, they were not created by a standard IP stack.

NEW QUESTION 270
Some passwords are stored using specialized encryption algorithms known as hashes. Why is this an appropriate method?

It is impossible to crack hashed user passwords unless the key used to encrypt them is obtained.

If a user forgets the password, it can be easily retrieved using the hash key stored by administrators.

Hashing is faster compared to more traditional encryption algorithms.

Passwords stored using hashes are non-reversible, making finding the password much more difficult.

NEW QUESTION 271
The practical realities facing organizations today make risk response strategies essential.
Which of the following is NOT one of the five basic responses to risk?

Accept

Mitigate

Delegate

Avoid

NEW QUESTION 272
What is the role of test automation in security testing?

It is an option but it tends to be very expensive.

It should be used exclusively. Manual testing is outdated because of low spend and possible test setup inconsistencies.

Test automation is not usable in security due to the complexity of the tests.

It can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.

NEW QUESTION 273
Which of the following open source tools would be the best choice to scan a network for potential targets?

NMAP

NIKTO

CAIN

John the Ripper

NEW QUESTION 274
What is a “Collision attack” in cryptography?

Collision attacks try to get the public key

Collision attacks try to break the hash into three parts to get the plaintext value

Collision attacks try to break the hash into two parts, with the same bytes in each part to get the private
key

Collision attacks try to find two inputs producing the same hash

NEW QUESTION 275
What is the most common method to exploit the “Bash Bug” or “ShellShock” vulnerability?

Through Web servers utilizing CGI (Common Gateway Interface) to send a malformed environment variable to a vulnerable Web server

Manipulate format strings in text fields

SSH

SYN Flood

NEW QUESTION 276
In 2007, this wireless security algorithm was rendered useless by capturing packets and discovering the passkey in a matter of seconds. This security flaw led to a network invasion of TJ Maxx and data theft through a technique known as wardriving.
Which Algorithm is this referring to?

Wired Equivalent Privacy (WEP)

Wi-Fi Protected Access (WPA)

Wi-Fi Protected Access 2 (WPA2)

Temporal Key Integrity Protocol (TKIP)

NEW QUESTION 277
An Internet Service Provider (ISP) has a need to authenticate users connecting via analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network.
Which AAA protocol is the most likely able to handle this requirement?

DIAMETER

RADIUS

TACACS+

Kerberos

NEW QUESTION 278
Which security strategy requires using several, varying methods to protect IT systems against attacks?

Defense in depth

Three-way handshake

Covert channels

Exponential backoff algorithm

NEW QUESTION 279
An IT employee got a call from one of our best customers. The caller wanted to know about the company’s network infrastructure, systems, and team. New opportunities of integration are in sight for both company and customer. What should this employee do?

The employees cannot provide any information; but, anyway, he/she will provide the name of the person in charge.

Since the company’s policy is all about Customer Service, he/she will provide information.

Disregarding the call, the employee should hang up.

The employee should not provide any information without previous management authorization.

NEW QUESTION 280
You have the SOA presented below in your Zone.
Your secondary servers have not been able to contact your primary server to synchronize information. How long will the secondary servers attempt to contact the primary server before it considers that zone is dead and stops responding to queries?
collegae.edu.SOA, cikkye.edu ipad.college.edu. (200302028 3600 3600 604800 3600)

One day

One hour

One week

One month

NEW QUESTION 281
A company’s Web development team has become aware of a certain type of security vulnerability in their
Web software. To mitigate the possibility of this vulnerability being exploited, the team wants to modify the
software requirements to disallow users from entering HTML as input into their Web application.
What kind of Web application vulnerability likely exists in their software?

Cross-site scripting vulnerability

Web site defacement vulnerability

SQL injection vulnerability

Cross-site Request Forgery vulnerability

NEW QUESTION 282
What is the approximate cost of replacement and recovery operation per year of a hard drive that has a value of $300 given that the technician who charges $10/hr would need 10 hours to restore OS and Software and needs further 4 hours to restore the database from the last backup to the new hard disk? Calculate the SLE, ARO, and ALE. Assume the EF = 1 (100%).

$440

$100

$1320

$146

NEW QUESTION 283
The establishment of a TCP connection involves a negotiation called three-way handshake.
What type of message does the client send to the server in order to begin this negotiation?

ACK

SYN

RST

SYN-ACK

NEW QUESTION 284
The fundamental difference between symmetric and asymmetric key cryptographic systems is that symmetric key cryptography uses which of the following?

Multiple keys for non-repudiation of bulk data

Different keys on both ends of the transport medium

Bulk encryption for data transmission over fiber

The same key on each end of the transmission medium

NEW QUESTION 285
When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should you implement?

AH Tunnel mode

AH promiscuous

ESP transport mode

ESP confidential

NEW QUESTION 286
Which of the following is a command line packet analyzer similar to GUI-based Wireshark?

Nessus

Jack the ripper

Tcpdump

Ethereal

NEW QUESTION 287
You have successfully gained access to your client’s internal network and successfully comprised a Linux server which is part of the internal IP network. You want to know which Microsoft Windows workstations have file sharing enabled.
Which port would you see listening on these Windows machines in the network?

445

3389

161

1433

NEW QUESTION 288
Which of the following Nmap commands will produce the following output?
Output:

nmap -sN -Ps -T4 192.168.1.1

nmap -sT -sX -Pn -p 1-65535 192.168.1.1

nmap -sS -Pn 192.168.1.1

nmap -sS -sU -Pn -p 1-65535 192.168.1.1

Related posts:

admin

You might also like

Leave a Reply Cancel reply