Review 400 312-50V11 practice questions with answer explanations and community insights.
Question 1
While performing online banking using a Web browser, a user receives an email that contains a link to an interesting Web site. When the user clicks on the link, another Web browser session starts and displays a video of cats playing a piano. The next business day, the user receives what looks like an email from his bank, indicating that his bank account has been accessed from a foreign country. The email asks the user to call his bank and verify the authorization of a funds transfer that took place. What Web browser-based security vulnerability was exploited to compromise the user?
Clickjacking
Cross-Site Scripting
Cross-Site Request Forgery
Web form input validation
Question 2
Which service in a PKI will vouch for the identity of an individual or company?
KDC
CR
CBC
CA
Question 3
Identify the web application attack where the attackers exploit vulnerabilities in dynamically generated web pages to inject client-side script into web pages viewed by other users.
LDAP Injection attack
Cross-Site Scripting (XSS)
SQL injection attack
Cross-Site Request Forgery (CSRF)
Question 4
User A is writing a sensitive email message to user B outside the local network. User A has chosen to use PKI to secure his message and ensure only user B can read the sensitive email. At what layer of the OSI layer does the encryption and decryption of the message take place?
Application
Transport
Session
Presentation
Question 5
A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?
The WAP does not recognize the client's MAC address
The client cannot see the SSID of the wireless network