312-50 practice questions 651–660

1. Question 651 · 888 in bank

   The security concept of "separation of duties" is most similar to the operation of which type of security device?

   • AFirewall
   • BBastion host
   • CIntrusion Detection System
   • DHoneypot

   Show answer

   Answer: B

   Explanation

   In most enterprises the engineer making a firewall change is also the one reviewing the firewall metrics for unauthorized changes. What if the firewall administrator wanted to hide something? How would anyone ever find out? This is where the separation of duties comes in to focus on the responsibilities of tasks within security. References: http://searchsecurity.techtarget.com/tip/Modern-security-management-strategy-requires-security-separation-of-duties

   Next question

2. Question 652 · 888 in bank

   A penetration test was done at a company. After the test, a report was written and given to the company's IT authorities. A section from the report is shown below: ✑ Access List should be written between VLANs. ✑ Port security should be enabled for the intranet. ✑ A security solution which filters data packets should be set between intranet (LAN) and DMZ. ✑ A WAF should be used in front of the web applications. According to the section from the report, which of the following choice is true?

   • AA stateful firewall can be used between intranet (LAN) and DMZ.
   • BThere is access control policy between VLANs.
   • CMAC Spoof attacks cannot be performed.
   • DPossibility of SQL Injection attack is eliminated.

   Show answer

   Answer: A

   Next question

3. Question 653 · 888 in bank

   This wireless security protocol allows 192-bit minimum-strength security protocols and cryptographic tools to protect sensitive data, such as GCMP-256, HMAC- SHA384, and ECDSA using a 384-bit elliptic curve. Which is this wireless security protocol?

   • AWPA3-Personal
   • BWPA3-Enterprise
   • CWPA2-Enterprise
   • DWPA2-Personal

   Show answer

   Answer: B

   Next question

4. Question 654 · 888 in bank

   While working as an intern for a small business, you have been tasked with managing the company's web server. The server is being bombarded with requests, and the company's website is intermittently going offline. You suspect that this could be a Distributed Denial of Service (DDoS) attack. As an ethical hacker, which of the following steps would be your first course of action to mitigate the issue?

   • AContact your Internet Service Provider (ISP) for assistance
   • BInstall a newer version of the server software
   • CImplement IP address whitelisting
   • DIncrease the server's bandwidth

   Show answer

   Answer: A

   Next question

5. Question 655 · 888 in bank

   In IPv6 what is the major difference concerning application layer vulnerabilities compared to IPv4?

   • AImplementing IPv4 security in a dual-stack network offers protection from IPv6 attacks too.
   • BVulnerabilities in the application layer are independent of the network layer. Attacks and mitigation techniques are almost identical.
   • CDue to the extensive security measures built in IPv6, application layer vulnerabilities need not be addresses.
   • DVulnerabilities in the application layer are greatly different from IPv4.

   Show answer

   Answer: B

   Next question

6. Question 656 · 888 in bank

   As a cybersecurity consultant, you are working with a client who wants to migrate their data to a Software as a Service (SaaS) cloud environment. They are particularly concerned about maintaining the privacy of their sensitive data, even from the cloud service provider. Which of the following strategies would best ensure the privacy of their data in the SaaS environment?

   • AImplement a Virtual Private Network (VPN) for accessing the SaaS applications.
   • BRely on the cloud service provider's built-in security features.
   • CEncrypt the data client-side before uploading to the SaaS environment and manage encryption keys independently.
   • DUse multi-factor authentication for all user accounts accessing the SaaS applications

   Show answer

   Answer: C

   Next question

7. Question 657 · 888 in bank

   Henry is a cyber security specialist hired by BlackEye `" Cyber Security Solutions. He was tasked with discovering the operating system (OS) of a host. He used the Unicornscan tool to discover the OS of the target system. As a result, he obtained a TTL value, which indicates that the target system is running a Windows OS. Identify the TTL value Henry obtained, which indicates that the target OS is Windows.

   • A128
   • B255
   • C64
   • D138

   Show answer

   Answer: A

   Next question

8. Question 658 · 888 in bank

   An ethical hacker is performing a network scan to evaluate the security of a company's IT infrastructure. During the scan, he discovers an active host with multiple open ports running various services. The hacker uses TCP communication flags to establish a connection with the host and starts communicating with it. He sends a SYN packet to a port on the host and receives a SYN/ACK packet back. He then sends an ACK packet for the received SYN/ACK packet, which triggers an open connection. Which of the following actions should the ethical hacker perform next?

   • ASend a PSH packet to inform the receiving application about the buffered data.
   • BConduct a vulnerability scan on the open port to identify any potential weaknesses.
   • CScan another port on the same host using the SYN, ACK, and RST flags.
   • DSend a FIN or RST packet to close the connection.

   Show answer

   Answer: B

   Next question

9. Question 659 · 888 in bank

   A multinational corporation's computer system was infiltrated by an advanced persistent threat (APT). During forensic analysis, it was discovered that the malware was utilizing a blend of two highly sophisticated techniques to stay undetected and continue its operations. Firstly, the malware was embedding its harmful code into the actual binary or executable part of genuine system files rather than appending or prepending itself to the files. This made it exceptionally difficult to detect and eradicate, as doing so risked damaging the system files themselves. Secondly, the malware exhibited characteristics of a type of malware that changes its code as it propagates, making signature-based detection approaches nearly impossible. On top of these, the malware maintained a persistent presence by installing itself in the registry, making it able to survive system reboots. Given these distinctive characteristics, which two types of malware techniques does this malware most closely embody?

   • APolymorphic and Metamorphic malware
   • BPolymorphic and Macro malware
   • CMacro and Rootkit malware
   • DMetamorphic and Rootkit malware

   Show answer

   Answer: D

   Next question

10. Question 660 · 888 in bank

    Abel, a security professional, conducts penetration testing in his client organization to check for any security loopholes. He launched an attack on the DHCP servers by broadcasting forged DHCP requests and leased all the DHCP addresses available in the DHCP scope until the server could not issue any more IP addresses. This led to a DoS attack, and as a result, legitimate employees were unable to access the client's network. Which of the following attacks did Abel perform in the above scenario?

    • ARogue DHCP server attack
    • BVLAN hopping
    • CSTP attack
    • DDHCP starvation

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 651. 888 questions available.