312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 22 of 42, with answer review and explanations.

Question 106

You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best Nmap command you will use?

  1. nmap -T4 -q 10.10.0.0/24
  2. nmap -T4 -O 10.10.0.0/24
  3. nmap -T4 -r 10.10.1.0/24
  4. nmap -T4 -F 10.10.0.0/24

Question 107

An attacker, using a rogue wireless AP, performed an MITM attack and injected an HTML code to embed a malicious applet in all HTTP connections. When users accessed any page, the applet ran and exploited many machines. Which one of the following tools the hacker probably used to inject HTML code?

  1. Wireshark
  2. Aircrack-ng
  3. Ettercap
  4. Tcpdump

Question 108

Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored?

  1. hashing algorithms
  2. integrity algorithms
  3. symmetric algorithms
  4. asymmetric algorithms

Question 109

The company ABC recently contracts a new accountant. The accountant will be working with the financial statements. Those financial statements need to be approved by the CFO and then they will be sent to the accountant but the CFO is worried because he wants to be sure that the information sent to the accountant was not modified once he approved it. Which of the following options can be useful to ensure the integrity of the data?

  1. The document can be sent to the accountant using an exclusive USB for that document
  2. The CFO can use an excel file with a password
  3. The financial statements can be sent twice, one by email and the other delivered in USB and the accountant can compare both to be sure is the same document
  4. The CFO can use a hash algorithm in the document once he approved the financial statements

Question 110

A company’s security policy states that all Web browsers must automatically delete their HTTP browser cookies upon terminating. What sort of security breach is this policy attempting to mitigate?

  1. Attempts by attackers to access Web sites that trust the Web browser user by stealing the user’s authentication credentials.
  2. Attempts by attackers to determine the user’s Web browser usage patterns, including when sites were visited and for how long.
  3. Attempts by attackers to access the user and password information stored in the company’s SQL database.
  4. Attempts by attackers to access password stored on the user's computer without the user’s knowledge.