312-49v10

312-49v10 practice questions, page 33 of 34, with answer review and explanations.

Question 161

George is the network administrator of a large Internet company on the west coast. Per corporate policy, none of the employees in the company are allowed to use FTP or SFTP programs without obtaining approval from the IT department. Few managers are using SFTP program on their computers. Before talking to his boss, George wants to have some proof of their activity. George wants to use Ethereal to monitor network traffic, but only SFTP traffic to and from his network.What filter should George use in Ethereal?

  1. src port 23 and dst port 23
  2. udp port 22 and host 172.16.28.1/24
  3. net port 22
  4. src port 22 and dst port 22

Question 162

Your company uses Cisco routers exclusively throughout the network. After securing the routers to the best of your knowledge, an outside security firm is brought in to assess the network security.Although they found very few issues, they were able to enumerate the model, OS version, and capabilities for all your Cisco routers with very little effort. Which feature will you disable to eliminate the ability to enumerate this information on your Cisco routers?

  1. Border Gateway Protocol
  2. Cisco Discovery Protocol
  3. Broadcast System Protocol
  4. Simple Network Management Protocol

Question 163

In Linux, what is the smallest possible shellcode?

  1. 24 bytes
  2. 8 bytes
  3. 800 bytes
  4. 80 bytes

Question 164

Jim performed a vulnerability analysis on his network and found no potential problems. He runs another utility that executes exploits against his system to verify the results of the vulnerability test.The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis?

  1. False negatives
  2. False positives
  3. True negatives
  4. True positives

Question 165

You work as a penetration tester for Hammond Security Consultants. You are currently working on a contract for the state government of California. Your next step is to initiate a DoS attack on their network. Why would you want to initiate a DoS attack on a system you are testing?

  1. Show outdated equipment so it can be replaced
  2. List weak points on their network
  3. Use attack as a launching point to penetrate deeper into the network
  4. Demonstrate that no system can be protected against DoS attacks