312-50v13 Practice Test practice questions, page 23 of 42, with answer review and explanations.
Question 111
A large mobile telephony and data network operator has a data center that houses network elements. These are essentially large computers running on Linux. The perimeter of the data center is secured with firewalls and IPS systems. What is the best security policy concerning this setup?
There is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.
The operator knows that attacks and down time are inevitable and should have a backup site.
Network elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.
As long as the physical access to the network elements is restricted, there is no need for additional measures.
Question 112
By using a smart card and pin, you are using a two-factor authentication that satisfies
Something you know and something you are
Something you have and something you know
Something you have and something you are
Something you are and something you remember
Question 113
Is a set of extensions to DNS that provide the origin authentication of DNS data to DNS clients (resolvers) so as to reduce the threat of DNS poisoning, spoofing, and similar types of attacks.
Resource transfer
Resource records
DNSSEC
Zone transfer
Question 114
Which of the following program infects the system boot sector and the executable files at the same time?
Stealth virus
Polymorphic virus
Macro virus
Multipartite Virus
Question 115
Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?
To illicit a response back that will reveal information about email servers and how they treat undeliverable mail
To create needless SPAM
To determine who is the holder of the root account