312-50

312-50 practice questions, page 18 of 25, with answer review and explanations.

Question 86

A company has hired a security administrator to maintain and administer Linux and Windows-based systems. Written in the nightly report file is the following: Firewall log files are at the expected value of 4 MB. The current time is 12am. Exactly two hours later the size has decreased considerably. Another hour goes by and the log files have shrunk in size again. Which of the following actions should the security administrator take?

  1. Log the event as suspicious activity and report this behavior to the incident response team immediately.
  2. Log the event as suspicious activity, call a manager, and report this as soon as possible.
  3. Run an anti-virus scan because it is likely the system is infected by malware.
  4. Log the event as suspicious activity, continue to investigate, and act according to the site's security policy.

Question 87

Which type of scan measures a person's external features through a digital video camera?

  1. Iris scan
  2. Retinal scan
  3. Facial recognition scan
  4. Signature kinetics scan C

Question 88

WPA2 uses AES for wireless data encryption at which of the following encryption levels?

  1. 64 bit and CCMP
  2. 128 bit and CRC
  3. 128 bit and CCMP
  4. 128 bit and TKIP

Question 89

An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

  1. Classified
  2. Overt
  3. Encrypted
  4. Covert

Question 90

What technique is used to perform a Connection Stream Parameter Pollution (CSPP) attack?

  1. Injecting parameters into a connection string using semicolons as a separator
  2. Inserting malicious Javascript code into input parameters
  3. Setting a user's session identifier (SID) to an explicit known value
  4. Adding multiple parameters with the same name in HTTP requests