312-50 practice questions 791–800

1. Question 791 · 888 in bank

   Which of the following DoS tools is used to attack target web applications by starvation of available sessions on the web server? The tool keeps sessions at halt using never-ending POST transmissions and sending an arbitrarily large content-length header value.

   • AStacheldraht
   • BLOIC
   • CR-U-Dead-Yet? (RUDY)
   • DMyDoom

   Show answer

   Answer: C

   Next question

2. Question 792 · 888 in bank

   Which tier in the N-tier application architecture is responsible for moving and processing data between the tiers?

   • APresentation tier
   • BApplication Layer
   • CLogic tier
   • DData tier

   Show answer

   Answer: C

   Next question

3. Question 793 · 888 in bank

   What information security law or standard aims at protecting stakeholders and the general public from accounting errors and fraudulent activities within organizations?

   • AFISMA
   • BPCI-DSS
   • CSOX
   • DISO/IEC 27001:2013

   Show answer

   Answer: C

   Next question

4. Question 794 · 888 in bank

   In both pharming and phishing attacks, an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims. What is the difference between pharming and phishing attacks?

   • AIn a pharming attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack, an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name
   • BIn a phishing attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack, an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name
   • CBoth pharming and phishing attacks are purely technical and are not considered forms of social engineering
   • DBoth pharming and phishing attacks are identical

   Show answer

   Answer: A

   Next question

5. Question 795 · 888 in bank

   Which of the following web vulnerabilities would an attacker be attempting to exploit if they delivered the following input?

   

   • ASQLi
   • BXXE
   • CXXS
   • DIDOR

   Show answer

   Answer: B

   Next question

6. Question 796 · 888 in bank

   Which of the following web vulnerabilities would an attacker be attempting to exploit if they delivered the following input?

   

   • ASQLi
   • BXXE
   • CXXS
   • DIDOR

   Show answer

   Answer: B

   Next question

7. Question 797 · 888 in bank

   When configuring wireless on his home router, Javik disables SSID broadcast. He leaves authentication `open` but sets the SSID to a 32-character string of random letters and numbers. What is an accurate assessment of this scenario from a security perspective?

   • ASince the SSID is required in order to connect, the 32-character string is sufficient to prevent brute-force attacks.
   • BDisabling SSID broadcast prevents 802.11 beacons from being transmitted from the access point, resulting in a valid setup leveraging ג€security through obscurityג€.
   • CIt is still possible for a hacker to connect to the network after sniffing the SSID from a successful wireless association.
   • DJavik's router is still vulnerable to wireless hacking attempts because the SSID broadcast setting can be enabled using a specially crafted packet sent to the hardware address of the access point.

   Show answer

   Answer: C

   Next question

8. Question 798 · 888 in bank

   What useful information is gathered during a successful Simple Mail Transfer Protocol (SMTP) enumeration?

   • AA list of all mail proxy server addresses used by the targeted host.
   • BThe internal command RCPT provides a list of ports open to message traffic.
   • CThe two internal commands VRFY and EXPN provide a confirmation of valid users, email addresses, aliases, and mailing lists.
   • DReveals the daily outgoing message limits before mailboxes are locked.

   Show answer

   Answer: C

   Next question

9. Question 799 · 888 in bank

   When considering how an attacker may exploit a web server, what is web server footprinting?

   • AWhen an attacker creates a complete profile of the site's external links and file structures
   • BWhen an attacker uses a brute-force attack to crack a web-server password
   • CWhen an attacker implements a vulnerability scanner to identity weaknesses
   • DWhen an attacker gathers system-level data, including account details and server names

   Show answer

   Answer: D

   Next question

10. Question 800 · 888 in bank

    You are analyzing a traffic on the network with Wireshark. You want to routinely run a cron job which will run the capture against a specific set of IPs. "" 192.168.8.0/24. What command you would use?

    • Atshark ""net 192.255.255.255 mask 192.168.8.0
    • Bwireshark ""capture ""local ""masked 192.168.8.0 ""range 24
    • Csudo tshark ""f "net 192.168.8.0/24"
    • Dwireshark ""fetch "192.168.8/*"

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 791. 888 questions available.