[2022] Use Valid New 312-50v10 Test Notes & 312-50v10 Valid Exam Guide
312-50v10 Actual Questions Answers PDF 100% Cover Real Exam Questions
NEW QUESTION 143
The purpose of a _______is to deny network access to local area networks and other information assets
by unauthorized wireless devices.
- A. Wireless Access Point
- B. Wireless Access Control List
- C. Wireless Jammer
- D. Wireless Analyzer
Answer: B
NEW QUESTION 144
Study the log below and identify the scan type.
- A. nmap -sV 192.168.1.10
- B. nmap -sO -T 192.168.1.10
- C. nmap -sS 192.168.1.10
- D. nmap -sR 192.168.1.10
Answer: B
NEW QUESTION 145
Which of the following is the successor of SSL?
- A. IPSec
- B. RSA
- C. GRE
- D. TLS
Answer: D
Explanation:
Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), both of which are frequently referred to as 'SSL', are cryptographic protocols that provide communications security over a computer network.
References: https://en.wikipedia.org/wiki/Transport_Layer_Security
NEW QUESTION 146
Which of the following is the least-likely physical characteristic to be used in biometric control that supports a large company?
- A. Fingerprints
- B. Voice
- C. Iris patterns
- D. Height and Weight
Answer: D
Explanation:
Explanation
There are two main types of biometric identifiers:
Examples of physiological characteristics used for biometric authentication include fingerprints; DNA; face, hand, retina or ear features; and odor. Behavioral characteristics are related to the pattern of the behavior of a person, such as typing rhythm, gait, gestures and voice.
References:
http://searchsecurity.techtarget.com/definition/biometrics
NEW QUESTION 147
A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24. Which of the following has occurred?
- A. The computer is not using a private IP address.
- B. The gateway is not routing to a public IP address.
- C. The gateway and the computer are not on the same network.
- D. The computer is using an invalid IP address.
Answer: B
NEW QUESTION 148
Your business has decided to add credit card numbers to the data it backs up to tape.
Which of the
following represents the best practice your business should observe?
- A. Encrypt backup tapes that are sent off-site.
- B. Do not back up cither the credit card numbers or then hashes.
- C. Hire a security consultant to provide direction.
- D. Back up the hashes of the credit card numbers not the actual credit card numbers.
Answer: C
NEW QUESTION 149
Study the log below and identify the scan type.
- A. nmap -sV 192.168.1.10
- B. nmap -sO -T 192.168.1.10
- C. nmap -sS 192.168.1.10
- D. nmap -sR 192.168.1.10
Answer: B
NEW QUESTION 150
The practical realities facing organizations today make risk response strategies essential.
Which of the following is NOT one of the five basic responses to risk?
- A. Avoid
- B. Delegate
- C. Mitigate
- D. Accept
Answer: B
NEW QUESTION 151
How can rainbow tables be defeated?
- A. Use of non-dictionary words
- B. Password salting
- C. Lockout accounts under brute force password cracking attempts
- D. All uppercase character passwords
Answer: B
NEW QUESTION 152
> NMAP -sn 192.168.11.200-215
The NMAP command above performs which of the following?
- A. A ping scan
- B. A trace sweep
- C. An operating system detect
- D. A port scan
Answer: A
Explanation:
NMAP -sn (No port scan)
This option tells Nmap not to do a port scan after host discovery, and only print out the available hosts that responded to the host discovery probes. This is often known as a "ping scan", but you can also request that traceroute and NSE host scripts be run.
References: https://nmap.org/book/man-host-discovery.html
NEW QUESTION 153
The "white box testing" methodology enforces what kind of restriction?
- A. The internal operation of a system is only partly accessible to the tester.
- B. Only the internal operation of a system is known to the tester.
- C. The internal operation of a system is completely known to the tester.
- D. Only the external operation of a system is accessible to the tester.
Answer: C
Explanation:
White-box testing (also known as clear box testing, glass box testing, transparent box testing, and structural testing) is a method of testing software that tests internal structures or workings of an application, as opposed to its functionality (i.e. black-box testing). In white-box testing an internal perspective of the system, as well as programming skills, are used to design test cases.
References: https://en.wikipedia.org/wiki/White-box_testing
NEW QUESTION 154
In order to show improvement of security over time, what must be developed?
- A. Taxonomy of vulnerabilities
- B. Testing tools
- C. Reports
- D. Metrics
Answer: D
Explanation:
Explanation
Today, management demands metrics to get a clearer view of security.
Metrics that measure participation, effectiveness, and window of exposure, however, offer information the organization can use to make plans and improve programs.
References:
http://www.infoworld.com/article/2974642/security/4-security-metrics-that-matter.html
NEW QUESTION 155
You are the Network Admin, and you get a compliant that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL.
What may be the problem?
- A. Traffic is Blocked on UDP Port 53
- B. Traffic is Blocked on TCP Port 54
- C. Traffic is Blocked on TCP Port 80
- D. Traffic is Blocked on UDP Port 80
Answer: A
NEW QUESTION 156
A security policy will be more accepted by employees if it is consistent and has the support of
- A. executive management.
- B. the security officer.
- C. coworkers.
- D. a supervisor.
Answer: A
NEW QUESTION 157
From the following table, identify the wrong answer in terms of Range (ft).
- A. 802.16(WiMax)
- B. 802.11a
- C. 802.11g
- D. 802.11b
Answer: B
NEW QUESTION 158
Port scanning can be used as part of a technical assessment to determine network vulnerabilities. The TCP XMAS scan is used to identify listening ports on the targeted system.
If a scanned port is open, what happens?
- A. The port will send an RST.
- B. The port will send an ACK.
- C. The port will ignore the packets.
- D. The port will send a SYN.
Answer: C
Explanation:
An attacker uses a TCP XMAS scan to determine if ports are closed on the target machine.
This scan type is accomplished by sending TCP segments with the all flags sent in the packet header, generating packets that are illegal based on RFC 793. The RFC 793 expected behavior is that any TCP segment with an out-of-state Flag sent to an open port is discarded, whereas segments with out-of-state flags sent to closed ports should be handled with a RST in response. This behavior should allow an attacker to scan for closed ports by sending certain types of rule-breaking packets (out of sync or disallowed by the TCB) and detect closed ports via RST packets.
References: https://capec.mitre.org/data/definitions/303.html
NEW QUESTION 159
Which of the following Nmap commands would be used to perform a stack fingerprinting?
- A. Nmap -sS -0p targe
- B. Nmap -hU -Q<host(s.>
- C. Nmap -O -p80 <host(s.>
- D. Nmap -sT -p <host(s.>
- E. Nmap -u -o -w2 <host>
Answer: B
NEW QUESTION 160
While performing online banking using a Web browser, a user receives an email that contains a link to an
interesting Web site. When the user clicks on the link, another Web browser session starts and displays a
video of cats playing a piano. The next business day, the user receives what looks like an email from his
bank, indicating that his bank account has been accessed from a foreign country. The email asks the user
to call his bank and verify the authorization of a funds transfer that took place. What Web browser-based
security vulnerability was exploited to compromise the user?
- A. Clickjacking
- B. Web form input validation
- C. Cross-Site Request Forgery
- D. Cross-Site Scripting
Answer: C
NEW QUESTION 161
Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them.
Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company
B. How do you prevent DNS spoofing?
- A. Install DNS Anti-spoofing
- B. Disable DNS Zone Transfer
- C. Disable DNS timeouts
- D. Install DNS logger and track vulnerable packets
Answer: A
NEW QUESTION 162
The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. Also he needs to permit all FTP traffic to the rest of the network and deny all other traffic. After he applied his ACL configuration in the router nobody can access to the ftp and the permitted hosts cannot access to the Internet.
According to the next configuration what is happening in the network?
- A. The ACL 104 needs to be first because is UDP
- B. The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router
- C. The ACL 110 needs to be changed to port 80
- D. The ACL for FTP must be before the ACL 110
Answer: B
NEW QUESTION 163
Log monitoring tools performing behavioral analysis have alerted several suspicious logins on a Linux server occurring during non-business hours. After further examination of all login activities, it is noticed that none of the logins have occurred during typical work hours. A Linux administrator who is investigating this problem realizes the system time on the Linux server is wrong by more than twelve hours. What protocol used on Linux servers to synchronize the time has stopped working?
- A. PPP
- B. Time Keeper
- C. NTP
- D. OSPP
Answer: C
NEW QUESTION 164
While you were gathering information as part of security assessments for one of your clients, you were able to gather data that show your client is involved with fraudulent activities. What should you do?
- A. Confront the client in a respectful manner and ask her about the data
- B. Ignore the data and continue the assessment until completed as agreed
- C. Immediately stop work and contact the proper legal authorities
- D. Copy the data to removable media and keep it in case you need it
Answer: C
NEW QUESTION 165
What is the most secure way to mitigate the theft of corporate information from a laptop that was left in a
hotel room?
- A. Use a strong logon password to the operating system.
- B. Back up everything on the laptop and store the backup in a safe place.
- C. Encrypt the data on the hard drive.
- D. Set a BIOS password
Answer: C
NEW QUESTION 166
......
Module 7: Malware Threats
To tackle the questions associated with this subject, the applicants must be conversant with the basic malware and malware propagation methods; Trojans, their kinds, and how to infect systems; viruses, their kinds, and how they infect files; computer worms; malware analysis processes; various techniques to identify malware; malware countermeasures; malware penetration testing.
312-50v10 Exam questions and answers: https://guidetorrent.dumpstorrent.com/312-50v10-exam-prep.html