312-50 practice questions 451–460

1. Question 451 · 888 in bank

   Which vital role does the U.S. Computer Security Incident Response Team (CSIRT) provide?

   • AIncident response services to any user, company, government agency, or organization in partnership with the Department of Homeland Security
   • BMaintenance of the nation’s Internet infrastructure, builds out new Internet infrastructure, and decommissions old Internet infrastructure
   • CRegistration of critical penetration testing for the Department of Homeland Security and public and private sectors
   • DMeasurement of key vulnerability assessments on behalf of the Department of Defense (DOD) and State Department, as well as private sectors A

   Show answer

   Answer: A

   Explanation

   A. Incident response services to any user, company, government agency, or organization in partnership with the Department of Homeland Security

   Source: Adapted from community discussion — Bright07

   Next question

2. Question 452 · 888 in bank

   Sam is working as a system administrator in an organization. He captured the principal characteristics of a vulnerability and produced a numerical score to reflect its severity using CVSS v3.0 to properly assess and prioritize the organization's vulnerability management processes. The base score that Sam obtained after performing CVSS rating was 4.0. What is the CVSS severity level of the vulnerability discovered by Sam in the above scenario?

   • ACritical
   • BMedium
   • CHigh
   • DLow

   Show answer

   Answer: B

   Next question

3. Question 453 · 888 in bank

   Your company has been receiving regular alerts from its IDS about potential intrusions. On further investigation, you notice that these alerts have been false positives triggered by certain goodware files. In response, you are planning to enhance the IDS with YARA rules, reducing these false positives while improving the detection of real threats. Based on the scenario and the principles of YARA and IDS, which of the following strategies would best serve your purpose?

   • AWriting YARA rules specifically to identify the goodware files triggering false positives
   • BImplementing YARA rules that focus solely on known malware signatures
   • CCreating YARA rules to examine only the private database for intrusions
   • DIncorporating YARA rules to detect patterns in all files regardless of their nature

   Show answer

   Answer: A

   Next question

4. Question 454 · 888 in bank

   A Certificate Authority (CA) generates a key pair that will be used for encryption and decryption of email. The integrity of the encrypted email is dependent on the security of which of the following?

   • APublic key
   • BPrivate key
   • CModulus length
   • DEmail server certificate

   Show answer

   Answer: B

   Next question

5. Question 455 · 888 in bank

   Jake, a network security specialist, is trying to prevent network-level session hijacking attacks in his company. While studying different types of such attacks, he learns about a technique where an attacker inserts their machine into the communication between a client and a server, making it seem like the packets are flowing through the original path. This technique is primarily used to reroute the packets. Which of the following types of network-level session hijacking attacks is Jake studying?

   • ATCP/IP Hijacking
   • BRST Hijacking
   • CUDP Hijacking
   • DMan-in-the-middle Attack Using Forged ICMP and ARP Spoofing

   Show answer

   Answer: D

   Next question

6. Question 456 · 888 in bank

   When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true?

   • AThe key entered is a symmetric key used to encrypt the wireless data.
   • BThe key entered is a hash that is used to prove the integrity of the wireless data.
   • CThe key entered is based on the Diffie-Hellman method.
   • DThe key is an RSA key used to encrypt the wireless data. A

   Show answer

   Answer: A

   Explanation

   WEP/WPA/WPA2 do not use RSA. Moreover, encryption (such as that of a wireless network) deals with confidentiality and not integrity. Finally, the "based on D-H" option is ruled out in that Diffie-Hellman is an asymmetric protocol, which RC4/TKIP/CCMP are not.

   Source: Adapted from community discussion — dorinh

   Next question

7. Question 457 · 888 in bank

   The network users are complaining because their systems are slowing down. Further, every time they attempt to go to a website, they receive a series of pop-ups with advertisements. What type of malware have the systems been infected with?

   • ATrojan
   • BSpyware
   • CVirus
   • DAdware

   Show answer

   Answer: D

   Next question

8. Question 458 · 888 in bank

   Given the complexities of an organization’s network infrastructure, a threat actor has exploited an unidentified vulnerability, leading to a major data breach. As a Certified Ethical Hacker (CEH). you are tasked with enhancing the organization's security stance. To ensure a comprehensive security defense, you recommend a certain security strategy. Which of the following best represents the strategy you would likely suggest and why?

   • ADevelop an in-depth Risk Management process, involving identification, assessment, treatment, tracking, and review of risks to control the potential effects on the organization.
   • BEstablish a Defense-in-Depth strategy, incorporating multiple layers of security measures to increase the complexity and decrease the likelihood of a successful attack.
   • CImplement an Information Assurance (IA) policy focusing on ensuring the integrity, availability, confidentiality, and authenticity of information systems.
   • DAdopt a Continual/Adaptive Security Strategy involving ongoing prediction, prevention, detection, and response actions to ensure comprehensive computer network defense.

   Show answer

   Answer: D

   Next question

9. Question 459 · 888 in bank

   An attacker has captured a target file that is encrypted with public key cryptography. Which of the attacks below is likely to be used to crack the target file?

   • ATiming attack
   • BReplay attack
   • CMemory trade-off attack
   • DChosen plain-text attack

   Show answer

   Answer: D

   Explanation

   A chosen-plaintext attack (CPA) is a model for cryptanalysis which assumes that the attacker can choose random plaintexts to be encrypted and obtain the corresponding ciphertexts. The goal of the attack is to gain some further information which reduces the security of the encryption scheme. In the worst case, a chosen-plaintext attack could expose secret information after calculating the secret key.

   Source: Adapted from community discussion — PennyTester

   Next question

10. Question 460 · 888 in bank

    A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering that NMAP result below, which of the following is likely to be installed on the target machine by the OS? Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/tcp open netbios-ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:8

    • AThe host is likely a Linux machine.
    • BThe host is likely a printer.
    • CThe host is likely a router.
    • DThe host is likely a Windows machine.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 451. 888 questions available.