312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 20 of 42, with answer review and explanations.

Question 96

A web application allows users to upload files and later include them in pages dynamically. Attackers exploit this to execute code. Which vulnerability exists?

  1. LFI
  2. RFI
  3. CSRF
  4. XSS

Question 97

Bob received this text message on his mobile phone: "Hello, this is Scott Smelby from the Yahoo Bank. Kindly contact me for a vital transaction on: [email protected]". Which statement below is true?

  1. This is a scam because Bob does not know Scott.
  2. This is probably a legitimate message as it comes from a respectable organization.
  3. Bob should write to [email protected] to verify the identity of Scott.
  4. This is a scam as everybody can get a @yahoo address, not the Yahoo customer service employees.

Question 98

Which of the following tools can be used for passive OS fingerprinting?

  1. nmap
  2. ping
  3. tcpdump
  4. tracert

Question 99

Which of the following is a component of a risk assessment?

  1. Administrative safeguards
  2. Logical interface
  3. Physical security
  4. DMZ

Question 100

Which type of security feature stops vehicles from crashing through the doors of a building?

  1. Receptionist
  2. Mantrap
  3. Bollards
  4. Turnstile