312-50v11

312-50v11 practice questions, page 13 of 16, with answer review and explanations.

Question 61

An attacker, using a rogue wireless AP, performed an MITM attack and injected an HTML code to embed a malicious applet in all HTTP connections. When users accessed any page, the applet ran and exploited many machines. Which one of the following tools the hacker probably used to inject HTML code?

  1. Wireshark
  2. Ettercap
  3. Aircrack-ng
  4. Tcpdump

Question 62

Which mode of IPSec should you use to assure security and confidentiality of data within the same LAN?

  1. ESP transport mode
  2. ESP confidential
  3. AH permiscuous
  4. AH Tunnel mode

Question 63

Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company. The phishing message will often use the name of the company CEO, President, or Managers. The time a hacker spends performing research to locate this information about a company is known as?

  1. Exploration
  2. Investigation
  3. Reconnaissance
  4. Enumeration

Question 64

Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?

  1. Macro virus
  2. Stealth/Tunneling virus
  3. Cavity virus
  4. Polymorphic virus

Question 65

The `Gray-box testing` methodology enforces what kind of restriction?

  1. Only the external operation of a system is accessible to the tester.
  2. The internal operation of a system in only partly accessible to the tester.
  3. Only the internal operation of a system is known to the tester.
  4. The internal operation of a system is completely known to the tester.