312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 4 of 42, with answer review and explanations.

Question 16

Which of the following is one primary difference between a malicious hacker and an ethical hacker?

  1. Malicious hackers use different tools and techniques than ethical hackers use.
  2. Ethical hackers obtain permission before bringing down servers or stealing credit card databases.
  3. Malicious hackers are more advanced than ethical hackers because they can use any technique to attack a system or network.
  4. Ethical hackers use the same methods but strive to do no harm.

Question 17

Which of the following best describes an attack that altered the contents of two critical files?

  1. Availability
  2. Authentication
  3. Confidentially
  4. Integrity

Question 18

Which individuals believe that hacking and defacing websites can promote social change?

  1. Gray hat hackers
  2. Hacktivists
  3. Ethical hackers
  4. Black hat hackers

Question 19

This type of security test usually takes on an adversarial role and looks to see what an outsider can access and control.

  1. Penetration test
  2. Policy assessment
  3. High-level evaluation
  4. Network evaluation

Question 20

Your company performs PCI-DSS audits and penetration testing for third-party clients. During an approved pen test you have discovered a folder on an employee’s computer that appears to have hundreds of credit card numbers and other forms of personally identifiable information (PII). Which of the following is the best course of action?

  1. Make a copy of the data and store it on your local machine.
  2. Stop the pen test immediately and contact management.
  3. Continue the pen test and include this information in your report.
  4. Contact the employee and ask why they have the data.