312-50v12 Practice Test

312-50v12 Practice Test practice questions, page 12 of 13, with answer review and explanations.

Question 56

Abel, a security professional, conducts penetration testing in his client organization to check for any security loopholes. He launched an attack on the DHCP servers by broadcasting forged DHCP requests and leased all the DHCP addresses available in the DHCP scope until the server could not issue any more IP addresses. This led to a DoS attack, and as a result, legitimate employees were unable to access the client’s network. Which of the following attacks did Abel perform in the above scenario?

  1. Rogue DHCP server attack
  2. VLAN hopping
  3. STP attack
  4. DHCP starvation

Question 57

This form of encryption algorithm is a symmetric key block cipher that is characterized by a 128-bit block size, and its key size can be up to 256 bits. Which among the following is this encryption algorithm?

  1. HMAC encryption algorithm
  2. Twofish encryption algorithm
  3. IDEA
  4. Blowfish encryption algorithm

Question 58

Jude, a pen tester working in Keiltech Ltd., performs sophisticated security testing on his company's network infrastructure to identify security loopholes. In this process, he started to circumvent the network protection tools and firewalls used in the company. He employed a technique that can create forged TCP sessions by carrying out multiple SYN, ACK, and RST or FIN packets. Further, this process allowed Jude to execute DDoS attacks that can exhaust the network resources. What is the attack technique used by Jude for finding loopholes in the above scenario?

  1. Spoofed session flood attack
  2. UDP flood attack
  3. Peer-to-peer attack
  4. Ping-of-death attack

Question 59

Jim, a professional hacker, targeted an organization that is operating critical industrial infrastructure. Jim used Nmap to scan open ports and running services on systems connected to the organization’s OT network. He used an Nmap command to identify Ethernet/IP devices connected to the Internet and further gathered information such as the vendor name, product code and name, device name, and IP address. Which of the following Nmap commands helped Jim retrieve the required information?

  1. nmap -Pn -sT --scan-delay 1s --max-parallelism 1 -p < Port List > < Target IP >
  2. nmap -Pn -sU -p 44818 --script enip-info < Target IP >
  3. nmap -Pn -sT -p 46824 < Target IP >
  4. nmap -Pn -sT -p 102 --script s7-info < Target IP >

Question 60

While testing a web application in development, you notice that the web server does not properly ignore the “dot dot slash” (../) character string and instead returns the file listing of a folder higher up in the folder structure of the server. What kind of attack is possible in this scenario?

  1. Cross-site scripting
  2. SQL injection
  3. Denial of service
  4. Directory traversal