312-50 practice questions 561–570

1. Question 561 · 888 in bank

   Why would an attacker want to perform a scan on port 137?

   • ATo discover proxy servers on a network
   • BTo disrupt the NetBIOS SMB service on the target host
   • CTo check for file and print sharing on Windows systems
   • DTo discover information about a target host using NBTSTAT

   Show answer

   Answer: D

   Next question

2. Question 562 · 888 in bank

   A company recently experienced a debilitating social engineering attack that led to substantial identity theft. An inquiry found that the employee inadvertently provided critical information during an innocuous phone conversation. Considering the specific guidelines issued by the company to thwart social engineering attacks, which countermeasure would have been the most successful in averting the incident?

   • AConduct comprehensive training sessions for employees on various social engineering methodologies and the risks associated with revealing confidential data.
   • BImplement a well-documented change management process for modifications related to hardware or software.
   • CAdopt a robust software policy that restricts the installation of unauthorized applications.
   • DReinforce physical security measures to limit access to sensitive zones within the company premises, thereby warding off unauthorized intruders.

   Show answer

   Answer: A

   Next question

3. Question 563 · 888 in bank

   Select 2

   SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts. Which of the following features makes this possible? (Choose two.)

   • AIt used TCP as the underlying protocol.
   • BIt uses community string that is transmitted in clear text.
   • CIt is susceptible to sniffing.
   • DIt is used by all network devices on the market.

   Show answer

   Answer: BC

   Explanation

   We cannot say that D is true. Not all network devices use SNMP. However, it's susceptible to sniffing, especially in its version 1 and 2

   Source: Adapted from community discussion — salei

   Next question

4. Question 564 · 888 in bank

   Steven connected his iPhone to a public computer that had been infected by Clark, an attacker. After establishing the connection with the public computer, Steven enabled iTunes Wi-Fi sync on the computer so that the device could continue communication with that computer even after being physically disconnected. Now, Clark gains access to Steven's iPhone through the infected computer and is able to monitor and read all of Steven's activity on the iPhone, even after the device is out of the communication zone. Which of the following attacks is performed by Clark in the above scenario?

   • AMan-in-the-disk attack
   • BiOS jailbreaking
   • CiOS trustjacking
   • DExploiting SS7 vulnerability

   Show answer

   Answer: C

   Next question

5. Question 565 · 888 in bank

   An IT company has just implemented new security controls to their network and system setup. As a Certified Ethical Hacker, your responsibility is to assess the possible vulnerabilities in the new setup. You are given the information that the network and system are adequately patched with the latest updates, and all employees have gone through recent cybersecurity awareness training. Considering the potential vulnerability sources, what is the best initial approach to vulnerability assessment?

   • AConducting social engineering tests to check if employees can be tricked into revealing sensitive information
   • BChecking for hardware and software misconfigurations to identify any possible loopholes
   • CEvaluating the network for inherent technology weaknesses prone to specific types of attacks
   • DInvestigating if any ex-employees still have access to the company's system and data

   Show answer

   Answer: B

   Next question

6. Question 566 · 888 in bank

   Peter extracts the SIDs list from Windows 2000 Server machine using the hacking tool "SIDExtractor". Here is the output of the SIDs:

   

   From the above list identify the user account with System Administrator privileges.

   • AJohn
   • BRebecca
   • CSheela
   • DShawn
   • ESomia
   • FChang
   • GMicah F

   Show answer

   Answer: F

   Next question

7. Question 567 · 888 in bank

   An ethical hacker has been tasked with assessing the security of a major corporation's network. She suspects the network uses default SNMP community strings. To exploit this, she plans to extract valuable network information using SNMP enumeration. Which tool could best help her to get the information without directly modifying any parameters within the SNMP agent’s management information base (MIB)?

   • ASnmpWalk, with a command to change an OID to a different value
   • Bsnmp-check (snmp_enum Module) to gather a wide array of information about the target
   • CNmap, with a script to retrieve all running SNMP processes and associated ports
   • DOpUtils, are mainly designed for device management and not SNMP enumeration

   Show answer

   Answer: B

   Next question

8. Question 568 · 888 in bank

   One of your team members has asked you to analyze the following SOA record. What is the TTL? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.)

   • A200303028
   • B3600
   • C604800
   • D2400
   • E60
   • F4800

   Show answer

   Answer: D

   Next question

9. Question 569 · 888 in bank

   During a recent vulnerability assessment of a major corporation's IT systems, the security team identified several potential risks. They want to use a vulnerability scoring system to quantify and prioritize these vulnerabilities. They decide to use the Common Vulnerability Scoring System (CVSS). Given the characteristics of the identified vulnerabilities, which of the following statements is the most accurate regarding the metric types used by CVSS to measure these vulnerabilities?

   • ATemporal metric represents the inherent qualities of a vulnerability.
   • BBase metric represents the inherent qualities of a vulnerability.
   • CTemporal metric involves measuring vulnerabilities based on a specific environment or implementation.
   • DEnvironmental metric involves the features that change during the lifetime of the vulnerability.

   Show answer

   Answer: B

   Next question

10. Question 570 · 888 in bank

    One of your team members has asked you to analyze the following SOA record. What is the version? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.) (Choose four.)

    • A200303028
    • B3600
    • C604800
    • D2400
    • E60
    • F4800

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 561. 888 questions available.