312-50v10

312-50v10 practice questions, page 10 of 13, with answer review and explanations.

Question 46

What is attempting an injection attack on a web server based on responses to True/False questions called?

  1. DMS-specific SQLi
  2. Compound SQLi
  3. Blind SQLi
  4. Classic SQLi

Question 47

The establishment of a TCP connection involves a negotiation called three-way handshake. What type of message does the client send to the server in order to begin this negotiation?

  1. ACK
  2. SYN
  3. RST
  4. SYN-ACK

Question 48

You need a tool that can do network intrusion prevention and intrusion detection, function as a network sniffer, and record network activity. What tool would you most likely select?

  1. Snort
  2. Nmap
  3. Cain & Abel
  4. Nessus

Question 49

Which of the following will perform an Xmas scan using NMAP?

  1. nmap -sA 192.168.1.254
  2. nmap -sP 192.168.1.254
  3. nmap -sX 192.168.1.254
  4. nmap -sV 192.168.1.254

Question 50

Code injection is a form of attack in which a malicious user:

  1. Inserts text into a data field that gets interpreted as code
  2. Gets the server to execute arbitrary code using a buffer overflow
  3. Inserts additional code into the JavaScript running in the browser
  4. Gains access to the codebase on the server and inserts new code