312-50v11

312-50v11 practice questions, page 5 of 16, with answer review and explanations.

Question 21

Some clients of TPNQM SA were redirected to a malicious site when they tried to access the TPNQM main site. Bob, a system administrator at TPNQM SA, found that they were victims of DNS Cache Poisoning. What should Bob recommend to deal with such a threat?

  1. The use of security agents in clients' computers
  2. The use of DNSSEC
  3. The use of double-factor authentication
  4. Client awareness

Question 22

During a black-box pen test you attempt to pass IRC traffic over port 80/TCP from a compromised web enabled host. The traffic gets blocked; however, outbound HTTP traffic is unimpeded. What type of firewall is inspecting outbound traffic?

  1. Circuit
  2. Stateful
  3. Application
  4. Packet Filtering

Question 23

By using a smart card and pin, you are using a two-factor authentication that satisfies

  1. Something you are and something you remember
  2. Something you have and something you know
  3. Something you know and something you are
  4. Something you have and something you are

Question 24

`........is an attack type for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. It is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hotspot by posing as a legitimate provider. This type of attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there.` Fill in the blank with appropriate choice.

  1. Evil Twin Attack
  2. Sinkhole Attack
  3. Collision Attack
  4. Signal Jamming Attack

Question 25

A regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a single server. Based on this information, what should be one of your key recommendations to the bank?

  1. Place a front-end web server in a demilitarized zone that only handles external web traffic
  2. Require all employees to change their anti-virus program with a new one
  3. Move the financial data to another server on the same IP subnet
  4. Issue new certificates to the web servers from the root certificate authority