312-50

312-50 practice questions, page 12 of 25, with answer review and explanations.

Question 56

Which of the following scanning tools is specifically designed to find potential exploits in Microsoft Windows products?

  1. Microsoft Security Baseline Analyzer
  2. Retina
  3. Core Impact
  4. Microsoft Baseline Security Analyzer

Question 57

A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?

  1. Firewall-management policy
  2. Acceptable-use policy
  3. Remote-access policy
  4. Permissive policy

Question 58

When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?

  1. A bottom-up approach
  2. A top-down approach
  3. A senior creation approach
  4. An IT assurance approach

Question 59

Which of the following processes evaluates the adherence of an organization to its stated security policy?

  1. Vulnerability assessment
  2. Penetration testing
  3. Risk assessment
  4. Security auditing

Question 60

A security consultant is trying to bid on a large contract that involves penetration testing and reporting. The company accepting bids wants proof of work so the consultant prints out several audits that have been performed. Which of the following is likely to occur as a result?

  1. The consultant will ask for money on the bid because of great work.
  2. The consultant may expose vulnerabilities of other companies.
  3. The company accepting bids will want the same type of format of testing.
  4. The company accepting bids will hire the consultant because of the great work performed.