312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 18 of 42, with answer review and explanations.

Question 86

Which of the following is the primary objective of a rootkit?

  1. It provides an undocumented opening in a program
  2. It replaces legitimate programs
  3. It creates a buffer overflow
  4. It opens a port to provide an unauthorized service

Question 87

A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?

  1. The WAP does not recognize the client’s MAC address
  2. The client cannot see the SSID of the wireless network
  3. The wireless client is not configured to use DHCP
  4. Client is configured for the wrong channel

Question 88

Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers. Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?

  1. Software only, they are the most effective.
  2. Hardware and Software Keyloggers.
  3. Passwords are always best obtained using Hardware key loggers.
  4. Hardware, Software, and Sniffing.

Question 89

Null sessions are un-authenticated connections (not using a username or password.) to an NT or 2000 system. Which TCP and UDP ports must you filter to check null sessions on your network?

  1. 139 and 443
  2. 137 and 139
  3. 137 and 443
  4. 139 and 445

Question 90

What is the minimum number of network connections in a multihomed firewall?

  1. 5
  2. 2
  3. 3
  4. 4