312-50 practice questions 131–140

1. Question 131 · 888 in bank

   A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area. Which type of attack did the consultant perform?

   • AMan trap
   • BTailgating
   • CShoulder surfing
   • DSocial engineering

   Show answer

   Answer: B

   Explanation

   [Tailgating] In short, it is entering places that you are not authorized to enter through the trick of tracking an employee or person who has the right to enter this area.

   Source: Adapted from community discussion — amani0987

   Next question

2. Question 132 · 888 in bank

   Which of the following Secure Hashing Algorithm (SHA) produces a 160-bit digest from a message with a maximum length of (264-1) bits and resembles the MD5 algorithm?

   • ASHA-2
   • BSHA-3
   • CSHA-1
   • DSHA-0

   Show answer

   Answer: C

   Next question

3. Question 133 · 888 in bank

   Jim's company regularly performs backups of their critical servers. But the company cannot afford to send backup tapes to an off-site vendor for long-term storage and archiving. Instead, Jim's company keeps the backup tapes in a safe in the office. Jim's company is audited each year, and the results from this year's audit show a risk because backup tapes are not stored off-site. The Manager of Information Technology has a plan to take the backup tapes home with him and wants to know what two things he can do to secure the backup tapes while in transit?

   • AEncrypt the backup tapes and transport them in a lock box.
   • BDegauss the backup tapes and transport them in a lock box.
   • CHash the backup tapes and transport them in a lock box.
   • DEncrypt the backup tapes and use a courier to transport them.

   Show answer

   Answer: A

   Next question

4. Question 134 · 888 in bank

   Scenario: Joe turns on his home computer to access personal online banking. When he enters the URL www.bank.com, the website is displayed, but it prompts him to re-enter his credentials as if he has never visited the site before. When he examines the website URL closer, he finds that the site is not secure and the web address appears different. What type of attack he is experiencing?

   • ADHCP spoofing
   • BDoS attack
   • CARP cache poisoning
   • DDNS hijacking

   Show answer

   Answer: D

   Next question

5. Question 135 · 888 in bank

   A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti-virus and E-mail gateway. This approach can be used to mitigate which kind of attack?

   • AForensic attack
   • BARP spoofing attack
   • CSocial engineering attack
   • DScanning attack

   Show answer

   Answer: B

   Explanation

   Should be C. An email gateway is a type of email server that protects an organizations or users internal email servers. This server acts as a gateway through which every incoming and outgoing email passes through. A Secure Email Gateway (SEG) is a device or software used for email monitoring that are being sent and received. Email gateway protection is designed to prevent unwanted email and deliver good email. Messages that are unwanted include spam, phishing attacks, malware or fraudulent content. Outgoing messages can be analyzed to prevent sensitive data from leaving the organization or to automatically encrypt emails that contain sensitive information.

   Source: Adapted from community discussion — WZ1122

   Next question

6. Question 136 · 888 in bank

   When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

   • AAt least twice a year or after any significant upgrade or modification
   • BAt least once a year and after any significant upgrade or modification
   • CAt least once every two years and after any significant upgrade or modification
   • DAt least once every three years or after any significant upgrade or modification

   Show answer

   Answer: B

   Next question

7. Question 137 · 888 in bank

   You are the Network Admin, and you get a complaint that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL. What may be the problem?

   • ATraffic is Blocked on UDP Port 53
   • BTraffic is Blocked on TCP Port 80
   • CTraffic is Blocked on TCP Port 54
   • DTraffic is Blocked on UDP Port 80

   Show answer

   Answer: A

   Next question

8. Question 138 · 888 in bank

   Boney, a professional hacker, targets an organization for financial benefits. He performs an attack by sending his session ID using an MITM attack technique. Boney first obtains a valid session ID by logging into a service and later feeds the same session ID to the target employee. The session ID links the target employee to Boney’s account page without disclosing any information to the victim. When the target employee clicks on the link, all the sensitive payment details entered in a form are linked to Boney’s account. What is the attack performed by Boney in the above scenario?

   • AForbidden attack
   • BCRIME attack
   • CSession donation attack
   • DSession fixation attack

   Show answer

   Answer: C

   Next question

9. Question 139 · 888 in bank

   Which of the following resources does NMAP need to be used as a basic vulnerability scanner covering several vectors like SMB, HTTP and FTP?

   • AMetasploit scripting engine
   • BNessus scripting engine
   • CNMAP scripting engine
   • DSAINT scripting engine

   Show answer

   Answer: C

   Next question

10. Question 140 · 888 in bank

    Which of the following tools is used to detect wireless LANs using the 802.11a/b/g/n WLAN standards on a Linux platform?

    • AKismet
    • BAbel
    • CNetstumbler
    • DNessus

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 131. 888 questions available.