312-50v10

312-50v10 practice questions, page 3 of 13, with answer review and explanations.

Question 11

PGP, SSL, and IKE are all examples of which type of cryptography?

  1. Hash Algorithm
  2. Digest
  3. Secret Key
  4. Public Key

Question 12

Which of the following is considered as one of the most reliable forms of TCP scanning?

  1. TCP Connect/Full Open Scan
  2. Half-open Scan
  3. NULL Scan
  4. Xmas Scan

Question 13

Which of the following scanning method splits the TCP header into several packets and makes it difficult for packet filters to detect the purpose of the packet?

  1. ICMP Echo scanning
  2. SYN/FIN scanning using IP fragments
  3. ACK flag probe scanning
  4. IPID scanning

Question 14

Which of the following is the BEST way to defend against network sniffing?

  1. Restrict Physical Access to Server Rooms hosting Critical Servers
  2. Use Static IP Address
  3. Using encryption protocols to secure network communications
  4. Register all machines MAC Address in a Centralized Database

Question 15

You have successfully gained access to a Linux server and would like to ensure that the succeeding outgoing traffic from this server will not be caught by Network-Based Intrusion Detection Systems (NIDS). What is the best way to evade the NIDS?

  1. Out of band signaling
  2. Protocol Isolation
  3. Encryption
  4. Alternate Data Streams