312-50v11

312-50v11 practice questions, page 14 of 16, with answer review and explanations.

Question 66

When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's Computer to update the router configuration. What type of an alert is this?

  1. False negative
  2. True negative
  3. True positive
  4. False positive

Question 67

A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the Prometric Online Testing `" Reports https://ibt1.prometric.com/users/custom/report_queue/rq_str... corporate network. What tool should the analyst use to perform a Blackjacking attack?

  1. Paros Proxy
  2. BBProxy
  3. Blooover
  4. BBCrack

Question 68

When you are getting information about a web server, it is very important to know the HTTP Methods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two critical methods (PUT and DELETE). PUT can upload a file to the server and DELETE can delete a file from the server. You can detect all these methods (GET, POST, HEAD, PUT, DELETE, TRACE) using NMAP script engine. What Nmap script will help you with this task?

  1. http-methods
  2. http enum
  3. http-headers
  4. http-git

Question 69

Todd has been asked by the security officer to purchase a counter-based authentication system. Which of the following best describes this type of system?

  1. A biometric system that bases authentication decisions on behavioral attributes.
  2. A biometric system that bases authentication decisions on physical attributes.
  3. An authentication system that creates one-time passwords that are encrypted with secret keys.
  4. An authentication system that uses passphrases that are converted into virtual passwords.

Question 70

Which of the following is a low-tech way of gaining unauthorized access to systems?

  1. Social Engineering
  2. Eavesdropping
  3. Scanning
  4. Sniffing