312-50v13 Practice Test practice questions, page 30 of 42, with answer review and explanations.
Question 146
A regional hospital network is conducting incident containment after discovering that an internal file server was accessed by unauthorized actors. While forensic analysis is ongoing, a security engineer must immediately protect sensitive medical records stored on a mounted partition without shutting down the system. The solution must support strong encryption (including 256-bit AES), allow creation of encrypted containers within existing storage volumes, and provide the capability to conceal protected data inside standard-looking volumes to reduce visibility during continued investigation. Select the disk encryption tool that best satisfies these operational and security requirements.
FileVault
Rohos Disk Encryption
VeraCrypt
BitLocker Drive Encryption
Question 147
An internal review at a financial analytics firm in Minneapolis, Minnesota, uncovered unusual query patterns directed at the company's directory services infrastructure. Security engineer Olivia Grant examined the logs and discovered that a user account had been issuing structured directory queries to retrieve lists of user objects, group memberships, and organizational units. Further inspection revealed that the account was able to access information about privileged groups containing the word "Admin" in their titles. The activity did not involve password guessing or authentication bypass, but rather systematic directory lookups to map internal user and group relationships. What type of enumeration is illustrated in this scenario?
VoIP Enumeration
LDAP Enumeration
SMTP Enumeration
DNS Enumeration
Question 148
During an authorized security assessment of a smart thermostat manufacturer in Denver, Colorado, a certified ethical hacker receives a firmware image extracted from a production device for further evaluation. The tester begins by examining the binary file to determine its format and architecture. Basic inspection commands are executed against the image to review embedded human-readable content and observe low-level binary structure before proceeding with deeper analysis. Within the firmware analysis workflow, which stage is the tester performing?
Extract the Filesystem
Obtain Firmware
Analyze Firmware
Emulate Firmware
Question 149
A fintech startup in Austin, Texas authorizes a controlled red team engagement to evaluate the resilience of its web-based loan management platform. At the outset of the engagement, the assessment team concentrates on developing a structural understanding of the application. They examine publicly exposed endpoints, observe server responses under different navigation paths, identify accessible directories, and document the relationships between client-side scripts, form parameters, and backend behaviors. Error handling patterns and response variations are cataloged to understand how user interactions are processed across various components of the platform. The collected information is used to guide strategic planning for subsequent phases of the engagement. Within the web application hacking methodology, which phase is most accurately demonstrated in this scenario?
Maintaining Access
Scanning
Gaining Access
Reconnaissance
Question 150
A DevOps engineer at a Toronto-based SaaS provider deploys a multi-tenant application within a shared orchestration environment. During a security assessment, a penetration tester discovers that a compromised workload is able to access host-level system resources and interact with adjacent workloads beyond its intended isolation controls. Further investigation reveals that the workload was launched with elevated privileges and insufficient runtime restrictions, allowing the attacker to cross the intended isolation boundary and gain unauthorized access to the underlying infrastructure. Which cloud attack technique best describes this security weakness?