312-50

312-50 practice questions, page 9 of 25, with answer review and explanations.

Question 41

At a Windows Server command prompt, which command could be used to list the running services?

  1. Sc query type= running
  2. Sc query \\servername
  3. Sc query
  4. Sc config

Question 42

Windows file servers commonly hold sensitive files, databases, passwords and more. Which of the following choices would be a common vulnerability that usually exposes them?

  1. Cross-site scripting
  2. SQL injection
  3. Missing patches
  4. CRLF injection

Question 43

While conducting a penetration test, the tester determines that there is a firewall between the tester's machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model. Which type of firewall is the tester trying to traverse?

  1. Packet filtering firewall
  2. Application-level firewall
  3. Circuit-level gateway firewall
  4. Stateful multilayer inspection firewall

Question 44

A company firewall engineer has configured a new DMZ to allow public systems to be located away from the internal network. The engineer has three security zones set: The engineer wants to configure remote desktop access from a fixed IP on the remote network to a remote desktop server in the DMZ. Which rule would best fit this requirement?

  1. Permit 217.77.88.0/24 11.12.13.0/24 RDP 3389
  2. Permit 217.77.88.12 11.12.13.50 RDP 3389
  3. Permit 217.77.88.12 11.12.13.0/24 RDP 3389
  4. Permit 217.77.88.0/24 11.12.13.50 RDP 3389

Question 45

A circuit level gateway works at which of the following layers of the OSI Model?

  1. Layer 5 - Application
  2. Layer 4 – TCP
  3. Layer 3 – Internet protocol
  4. Layer 2 – Data link