312-50 practice questions 171–180

1. Question 171 · 888 in bank

   One way to defeat a multi-level security solution is to leak data via

   • Aa bypass regulator.
   • Bsteganography.
   • Ca covert channel.
   • Dasymmetric routing.

   Show answer

   Answer: C

   Next question

2. Question 172 · 888 in bank

   What is attempting an injection attack on a web server based on responses to True/False questions called?

   • ADMS-specific SQLi
   • BCompound SQLi
   • CBlind SQLi
   • DClassic SQLi

   Show answer

   Answer: C

   Next question

3. Question 173 · 888 in bank

   A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering that NMAP result below, which of the following is likely to be installed on the target machine by the OS?

   

   • AThe host is likely a Linux machine.
   • BThe host is likely a printer.
   • CThe host is likely a router.
   • DThe host is likely a Windows machine.

   Show answer

   Answer: B

   Next question

4. Question 174 · 888 in bank

   Infecting a system with malware and using phishing to gain credentials to a system or web application are examples of which phase of the ethical hacking methodology?

   • AScanning
   • BGaining access
   • CMaintaining access
   • DReconnaissance

   Show answer

   Answer: B

   Next question

5. Question 175 · 888 in bank

   Which of the following conditions must be given to allow a tester to exploit a Cross-Site Request Forgery (CSRF) vulnerable web application?

   • AThe victim user must open the malicious link with an Internet Explorer prior to version 8.
   • BThe session cookies generated by the application do not have the HttpOnly flag set.
   • CThe victim user must open the malicious link with a Firefox prior to version 3.
   • DThe web application should not use random tokens.

   Show answer

   Answer: D

   Next question

6. Question 176 · 888 in bank

   When purchasing a biometric system, one of the considerations that should be reviewed is the processing speed. Which of the following best describes what it is meant by processing?

   • AThe amount of time and resources that are necessary to maintain a biometric system
   • BHow long it takes to setup individual user accounts
   • CThe amount of time it takes to be either accepted or rejected from when an individual provides identification and authentication information
   • DThe amount of time it takes to convert biometric data into a template on a smart card

   Show answer

   Answer: C

   Next question

7. Question 177 · 888 in bank

   Larry, a security professional in an organization, has noticed some abnormalities in the user accounts on a web server. To thwart evolving attacks, he decided to harden the security of the web server by adopting a few countermeasures to secure the accounts on the web server. Which of the following countermeasures must Larry implement to secure the user accounts on the web server?

   • ARetain all unused modules and application extensions.
   • BLimit the administrator or root-level access to the minimum number of users.
   • CEnable all non-interactive accounts that should exist but do not require interactive login.
   • DEnable unused default user accounts created during the installation of an OS.

   Show answer

   Answer: B

   Next question

8. Question 178 · 888 in bank

   At a Windows Server command prompt, which command could be used to list the running services?

   • ASc query type= running
   • BSc query \\servername
   • CSc query
   • DSc config

   Show answer

   Answer: C

   References

   • Microsoft Learn

   Next question

9. Question 179 · 888 in bank

   You need a tool that can do network intrusion prevention and intrusion detection, function as a network sniffer, and record network activity. What tool would you most likely select?

   • ASnort
   • BNmap
   • CCain & Abel
   • DNessus

   Show answer

   Answer: A

   Next question

10. Question 180 · 888 in bank

    There are multiple cloud deployment options depending on how isolated a customer’s resources are from those of other customers. Shared environments share the costs and allow each customer to enjoy lower operations expenses. One solution is for a customer to join with a group of users or organizations to share a cloud environment. What is this cloud deployment option called?

    • APrivate
    • BCommunity
    • CPublic
    • DHybrid

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 171. 888 questions available.