312-50v10

312-50v10 practice questions, page 9 of 13, with answer review and explanations.

Question 41

Identify the web application attack where the attackers exploit vulnerabilities in dynamically generated web pages to inject client-side script into web pages viewed by other users.

  1. SQL injection attack
  2. Cross-Site Scripting (XSS)
  3. LDAP Injection attack
  4. Cross-Site Request Forgery (CSRF)

Question 42

This tool is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the PTW attack, thus making the attack much faster compared to other WEP cracking tools. Which of the following tools is being described?

  1. wificracker
  2. Airguard
  3. WLAN-crack
  4. Aircrack-ng

Question 43

The following is part of a log file taken from the machine on the network with the IP address of 192.168.0.110: What type of activity has been logged?

  1. Teardrop attack targeting 192.168.0.110
  2. Denial of service attack targeting 192.168.0.105
  3. Port scan targeting 192.168.0.110
  4. Port scan targeting 192.168.0.105

Question 44

You are attempting to run an Nmap port scan on a web server. Which of the following commands would result in a scan of common ports with the least amount of noise in order to evade IDS?

  1. nmap -A - Pn
  2. nmap -sP -p-65535 -T5
  3. nmap -sT -O -T0
  4. nmap -A --host-timeout 99 -T1

Question 45

Bob, your senior colleague, has sent you a mail regarding aa deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days, Bob denies that he had ever sent a mail. What do you want to "know" to prove yourself that it was Bob who had send a mail?

  1. Confidentiality
  2. Integrity
  3. Non-Repudiation
  4. Authentication