312-50v13 Practice Test practice questions, page 25 of 42, with answer review and explanations.
Question 121
A financial services firm detects that outbound corporate emails containing sensitive underwriting data were intercepted while transmitted over unsecured channels. To immediately restore confidentiality and ensure authenticity of executive communications, the security operations team deploys a standardized email encryption framework compatible with the organization's Microsoft Outlook environment. The selected solution must support digital signatures for sender authentication, rely on a public-key infrastructure for secure key exchange, and enable recipients to validate signed messages using certificates issued by trusted authorities. Identify the email encryption standard that best fulfills these requirements.
FlowCrypt
RMail
S/MIME
QpenPGP
Question 122
An authorized security assessment is performed on a public-sector services portal in Madison, Wisconsin. After authenticating with a controlled test account, the assessor captures the authentication identifier issued by the application. Under controlled lab conditions, she attempts to reuse the captured identifier from a separate machine connected through a different encrypted channel. Although the identifier remains valid and within its lifetime, the application rejects the request when presented from the alternate environment. Analysis indicates that the server evaluates characteristics associated with the original secure exchange before allowing continued use of the issued identifier. Which defensive mechanism most likely explains this behavior?
Encrypting DNS resolution traffic using DNS over HTTPS
Cryptographically binding authentication tokens to the TLS connection context
Applying IPsec protection at the network layer
Enforcing HTTP Strict Transport Security
Question 123
During an external assessment, a security analyst configures Nmap so that the hardware address recorded in firewall logs differs from the original interface address of the scanning system. Repeated executions of the scan show that the recorded hardware address changes automatically each time. What Nmap option enables this behavior?
--spoof-mac 0
--spoof-mac Dell
--spoof-mac 00:01:02:25:56:AE
--spoof-mac Dell 10.10.1.11
Question 124
While conducting a compliance-driven security assessment at a public healthcare data center in Maryland, Jason, a senior penetration tester, was asked to reconcile outdated asset documentation for several legacy network appliances still active within the environment. Internal records lacked accurate device identifiers, administrative contact entries, and interface-level statistics needed for regulatory reporting. Preliminary testing revealed that the devices were still exposing management information through long-standing read-only credentials configured years earlier. Rather than logging into each device manually or passively observing traffic, Jason decided to use a command-line approach that would systematically traverse the exposed management object tree of each system and redirect the complete output into a file for automated processing. Determine which tool aligns with this requirement.
SoftPerfect Network Scanner
Wireshark
Nmap
SnmpWalk
Question 125
Several months prior to a confirmed compromise, security telemetry at a semiconductor manufacturer in Phoenix, Arizona showed systematic intelligence gathering focused on executive leadership, research engineers, and publicly exposed infrastructure. Subsequent investigation determined that the adversary had assembled customized exploit frameworks, tested malware variants against commercial defensive products in isolated environments, and mapped externally accessible services associated with the organization. These activities were part of a coordinated strategy developed well before any credential abuse or lateral movement was observed. Determine the APT lifecycle stage represented by these actions.