312-49v10 practice questions, page 28 of 34, with answer review and explanations.
Question 136
Simon is a former employee of Trinitron XML Inc. He feels he was wrongly terminated and wants to hack into his former company's network. Since Simon remembers some of the server names, he attempts to run the axfr and ixfr commands using DIG. What is Simon trying to accomplish here?
Send DOS commands to crash the DNS servers
Perform DNS poisoning
Perform a zone transfer
Enumerate all the users in the domain
Question 137
What will the following command produce on a website login page? SELECT email, passwd, login_id, full_name FROM members WHERE email ='[email protected]'; DROP TABLE members; --'
Deletes the entire members table
Inserts the Error! Reference source not found.email address into the members table
Retrieves the password for the first user in the members table
This command will not produce anything since the syntax is incorrect
Question 138
You setup SNMP in multiple offices of your company. Your SNMP software manager is not receiving data from other offices like it is for your main office. You suspect that firewall changes are to blame. What ports should you open for SNMP to work through Firewalls? (Choose two.)
162
161
163
160
Question 139
You are carrying out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that accesses your product inventory in a database. You come across a web security site that recommends inputting the following code into a search field on web pages to check for vulnerabilities: When you type this and click on search, you receive a pop-up window that says: "This is a test."What is the result of this test?
Your website is vulnerable to CSS
Your website is not vulnerable
Your website is vulnerable to SQL injection
Your website is vulnerable to web bugs
Question 140
If an attacker's computer sends an IPID of 31400 to a zombie computer on an open port in IDLE scanning, what will be the response?