312-50 practice questions 631–640

1. Question 631 · 888 in bank

   Using Windows CMD, how would an attacker list all the shares to which the current user context has access?

   • ANET USE
   • BNET CONFIG
   • CNET FILE
   • DNET VIEW

   Show answer

   Answer: D

   Next question

2. Question 632 · 888 in bank

   Which of the following is a passive wireless packet analyzer that works on Linux-based systems?

   • AOpenVAS
   • BBurp Suite
   • Ctshark
   • DKismet

   Show answer

   Answer: D

   Next question

3. Question 633 · 888 in bank

   You have been given the responsibility to ensure the security of your school's web server. As a step towards this, you plan to restrict unnecessary services running on the server. In the context of web server security, why is this step considered important?

   • AUnnecessary services eat up server memory; save memory resources.
   • BUnnecessary services could contain vulnerabilities; minimize the attack surface.
   • CUnnecessary services reveal server software; hide software details.
   • DUnnecessary services slow down the server; optimize server speed.

   Show answer

   Answer: B

   Next question

4. Question 634 · 888 in bank

   Which of the following is the successor of SSL?

   • ATLS
   • BRSA
   • CGRE
   • DIPSec

   Show answer

   Answer: A

   Explanation

   Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), both of which are frequently referred to as 'SSL', are cryptographic protocols that provide communications security over a computer network. References: https://en.wikipedia.org/wiki/Transport_Layer_Security

   Next question

5. Question 635 · 888 in bank

   An ethical hacker is hired to evaluate the defenses of an organization's database system which is known to employ a signature-based IDS. The hacker knows that some SQL Injection evasion techniques may allow him to bypass the system's signatures. During the operation, he successfully retrieved a list of usernames from the database without triggering an alarm by employing an advanced evasion technique. Which of the following could he have used?

   • AUtilizing the char encoding function to convert hexadecimal and decimal values into characters that pass-through SQL engine parsing
   • BImplementing sophisticated matches such as "OR john' = 'john'" in place of classical matches like "OR 1=1"
   • CManipulating white spaces in SQL queries to bypass signature detection
   • DUsing the URL encoding method to replace characters with their ASCII codes in hexadecimal form

   Show answer

   Answer: A

   Next question

6. Question 636 · 888 in bank

   It is a short-range wireless communication technology intended to replace the cables connecting portable of fixed devices while maintaining high levels of security. It allows mobile phones, computers and other devices to connect and communicate using a short-range wireless connection. Which of the following terms best matches the definition?

   • ABluetooth
   • BRadio-Frequency Identification
   • CWLAN
   • DInfraRed

   Show answer

   Answer: D

   Explanation

   Bluetooth is a standard for the short-range wireless interconnection of mobile phones, computers, and other electronic devices. References: http://www.bbc.co.uk/webwise/guides/about-bluetooth

   Next question

7. Question 637 · 888 in bank

   While browsing his Facebook feed, Matt sees a picture one of his friends posted with the caption, `Learn more about your friends!`, as well as a number of personal questions. Matt is suspicious and texts his friend, who confirms that he did indeed post it. With assurance that the post is legitimate, Matt responds to the questions on the post. A few days later, Matt's bank account has been accessed, and the password has been changed. What most likely happened?

   • AMatt inadvertently provided the answers to his security questions when responding to the post.
   • BMatt inadvertently provided his password when responding to the post.
   • CMatt's computer was infected with a keylogger.
   • DMatt's bank-account login information was brute forced.

   Show answer

   Answer: A

   Next question

8. Question 638 · 888 in bank

   As the Chief Information Security Officer (CISO) at a large university, you are responsible for the security of a campus-wide Wi-Fi network that serves thousands of students, faculty, and staff. Recently, there has been a rise in reports of unauthorized network access, and you suspect that some users are sharing their login credentials. You are considering deploying an additional layer of security that could effectively mitigate this issue. What would be the most suitable measure to implement in this context?

   • AImplement network segmentation
   • BDeploy a VPN for the entire campus
   • CEnforce a policy of regularly changing Wi-Fi passwords
   • DImplement 802.1X authentication

   Show answer

   Answer: D

   Next question

9. Question 639 · 888 in bank

   Which of the following parameters describe LM Hash (see exhibit): Exhibit:

   

   • AI, II, and III
   • BI
   • CII
   • DI and II

   Show answer

   Answer: A

   Explanation

   The LM hash is computed as follows: 1. The user's password is restricted to a maximum of fourteen characters. 2. The users password is converted to uppercase. Etc. 14 character Windows passwords, which are stored with LM Hash, can be cracked in five seconds. References: https://en.wikipedia.org/wiki/LM_hash

   Next question

10. Question 640 · 888 in bank

    Robin, an attacker, is attempting to bypass the firewalls of an organization through the DNS tunneling method in order to exfiltrate data. He is using the NSTX tool for bypassing the firewalls. On which of the following ports should Robin run the NSTX tool?

    • APort 50
    • BPort 23
    • CPort 53
    • DPort 80

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 631. 888 questions available.