312-50

312-50 practice questions, page 11 of 25, with answer review and explanations.

Question 51

A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area. Which type of attack did the consultant perform?

  1. Man trap
  2. Tailgating
  3. Shoulder surfing
  4. Social engineering

Question 52

When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's computer to update the router configuration. What type of an alert is this?

  1. False positive
  2. False negative
  3. True positve
  4. True negative

Question 53

While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

  1. Validate web content input for query strings.
  2. Validate web content input with scanning tools.
  3. Validate web content input for type, length, and range.
  4. Validate web content input for extraneous queries.

Question 54

A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti-virus and E-mail gateway. This approach can be used to mitigate which kind of attack?

  1. Forensic attack
  2. ARP spoofing attack
  3. Social engineering attack
  4. Scanning attack

Question 55

Which of the following resources does NMAP need to be used as a basic vulnerability scanner covering several vectors like SMB, HTTP and FTP?

  1. Metasploit scripting engine
  2. Nessus scripting engine
  3. NMAP scripting engine
  4. SAINT scripting engine