Renewal 312-50v10 Exam Study Guides With New Update Exam Questions

New Questions 7

Based on the below log, which of the following sentences are true?

Mar 1, 2021, 7:33:28 AM 10.240.250.23 u2013 54373 10.249.253.15 u2013 22 tcp_ip

A. SSH communications are encrypted itu2021s impossible to know who is the client or the server

B. Application is FTP and 10.240.250.23 is the client and 10.249.253.15 is the server

C. Application is SSH and 10.240.250.23 is the client and 10.249.253.15 is the server

D. Application is SSH and 10.240.250.23 is the server and 10.249.253.15 is the server

View Answer

New Questions 8

Your company performs penetration tests and security assessments for small and medium-sized business in the local area. During a routine security assessment, you discover information that suggests your client is involved with human trafficking.

What should you do?

A. Confront the client in a respectful manner and ask her about the data.

B. Copy the data to removable media and keep it in case you need it.

C. Ignore the data and continue the assessment until completed as agreed.

D. Immediately stop work and contact the proper legal authorities.

View Answer

New Questions 9

An attacker scans a host with the below command. Which three flags are set? (Choose three.)

#nmap u2013sX host.domain.com

A. This is ACK scan. ACK flag is set

B. This is Xmas scan. SYN and ACK flags are set

C. This is Xmas scan. URG, PUSH and FIN are set

D. This is SYN scan. SYN flag is set

View Answer

New Questions 10

What type of analysis is performed when an attacker has partial knowledge of inner-workings of the application?

A. Black-box

B. Announced

C. White-box

D. Grey-box

View Answer

New Questions 11

You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line.

Which command would you use?

A. c:gpedit

B. c:compmgmt.msc

C. c:ncpa.cp

D. c:services.msc

View Answer

New Questions 12

Shellshock allowed an unauthorized user to gain access to a server. It affected many Internet-facing services, which OS did it not directly affect?

A. Linux

B. Unix

C. OS X

D. Windows

View Answer

New Questions 13

Which Intrusion Detection System is the best applicable for large environments where critical assets on the network need extra security and is ideal for observing sensitive network segments?

A. Honeypots

B. Firewalls

C. Network-based intrusion detection system (NIDS)

D. Host-based intrusion detection system (HIDS)

View Answer

New Questions 14

Which of the following scanning method splits the TCP header into several packets and makes it difficult for packet filters to detect the purpose of the packet?

A. ICMP Echo scanning

B. SYN/FIN scanning using IP fragments

C. ACK flag probe scanning

D. IPID scanning

View Answer

New Questions 15

What is not a PCI compliance recommendation?

A. Use a firewall between the public network and the payment card data.

B. Use encryption to protect all transmission of card holder data over any public network.

C. Rotate employees handling credit card transactions on a yearly basis to different departments.

D. Limit access to card holder data to as few individuals as possible.

View Answer

New Questions 16

In cryptanalysis and computer security, 'pass the hash' is a hacking technique that allows an attacker to authenticate to a remote server/service by using the underlying NTLM and/or LanMan hash of a user's password, instead of requiring the associated plaintext password as is normally the case.

Metasploit Framework has a module for this technique: psexec. The psexec module is often used by penetration testers to obtain access to a given system whose credentials are known. It was written by

sysinternals and has been integrated within the framework. The penetration testers successfully gain access to a system through some exploit, use meterpreter to grab the passwords or other methods like fgdump, pwdump, or cachedump and then utilize rainbowtables to crack those hash values.

Which of the following is true hash type and sort order that is used in the psexec module's 'smbpass' option?

A. LM:NT

B. NTLM:LM

C. NT:LM

D. LM:NTLM

View Answer