312-50

312-50 practice questions, page 17 of 25, with answer review and explanations.

Question 81

In the software security development life cycle process, threat modeling occurs in which phase?

  1. Design
  2. Requirements
  3. Verification
  4. Implementation

Question 82

A network administrator received an administrative alert at 3:00 a.m. from the intrusion detection system. The alert was generated because a large number of packets were coming into the network over ports 20 and 21. During analysis, there were no signs of attack on the FTP servers. How should the administrator classify this situation?

  1. True negatives
  2. False negatives
  3. True positives
  4. False positives

Question 83

Which of the following techniques does a vulnerability scanner use in order to detect a vulnerability on a target service?

  1. Port scanning
  2. Banner grabbing
  3. Injecting arbitrary data
  4. Analyzing service response

Question 84

Which of the following business challenges could be solved by using a vulnerability scanner?

  1. Auditors want to discover if all systems are following a standard naming convention.
  2. A web server was compromised and management needs to know if any further systems were compromised.
  3. There is an emergency need to remove administrator access from multiple machines for an employee that quit.
  4. There is a monthly requirement to test corporate compliance with host application usage and security policies.

Question 85

A security policy will be more accepted by employees if it is consistent and has the support of

  1. coworkers.
  2. executive management.
  3. the security officer.
  4. a supervisor.