312-50

312-50 practice questions, page 5 of 25, with answer review and explanations.

Question 21

A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

  1. Reject all invalid email received via SMTP.
  2. Allow full DNS zone transfers.
  3. Remove A records for internal hosts.
  4. Enable null session pipes.

Question 22

Which of the following techniques will identify if computer files have been changed?

  1. Network sniffing
  2. Permission sets
  3. Integrity checking hashes
  4. Firewall alerts

Question 23

Which system consists of a publicly available set of databases that contain domain name registration contact information?

  1. WHOIS
  2. IANA
  3. CAPTCHA
  4. IETF

Question 24

A penetration tester was hired to perform a penetration test for a bank. The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news articles online about the bank, watching what times the bank employees come into work and leave from work, searching the bank's job postings (paying special attention to IT related jobs), and visiting the local dumpster for the bank's corporate office. What phase of the penetration test is the tester currently in?

  1. Information reporting
  2. Vulnerability assessment
  3. Active information gathering
  4. Passive information gathering

Question 25

The following is part of a log file taken from the machine on the network with the IP address of 192.168.1.106: What type of activity has been logged?

  1. Port scan targeting 192.168.1.103
  2. Teardrop attack targeting 192.168.1.106
  3. Denial of service attack targeting 192.168.1.103
  4. Port scan targeting 192.168.1.106