312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 24 of 42, with answer review and explanations.

Question 116

Although FTP traffic is not encrypted by default, which layer 3 protocol would allow for end-to-end encryption of the connection?

  1. FTPS
  2. SFTP
  3. SSL
  4. IPsec

Question 117

Which method of password cracking takes the most time and effort?

  1. Dictionary attack
  2. Rainbow tables
  3. Shoulder surfing
  4. Brute force

Question 118

Which of the following tools performs comprehensive tests against web servers, including dangerous files and CGIs?

  1. John the Ripper
  2. Dsniff
  3. Snort
  4. Nikto

Question 119

The establishment of a TCP connection involves a negotiation called three-way handshake. What type of message does the client send to the server in order to begin this negotiation?

  1. RST
  2. ACK
  3. SYN-ACK
  4. SYN

Question 120

During an authorized cloud security assessment for an e-commerce company based in Seattle, Washington, a certified ethical hacker gains temporary programmatic access to the organization's cloud account. The tester focuses on identifying permission boundaries by querying the account to determine which identity entities are associated with attached policies and what level of access those identities possess across cloud resources. The objective is to understand privilege relationships before attempting any further controlled actions. Which cloud reconnaissance activity best aligns with this effort?

  1. Enumerating IAM Roles
  2. Enumerating S3 Buckets
  3. Enumerating EC2 Instances
  4. Enumerating Serverless Resources