312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 41 of 42, with answer review and explanations.

Question 201

A regional investment firm in Denver, Colorado, recently migrated to a fully switched Ethernet infrastructure. During an authorized security evaluation, a consultant connected a test device to an access-layer switch and initiated a scripted network interaction. Within minutes, administrators observed irregular switching behavior. Frames that were normally delivered directly between specific workstations began appearing across multiple switch ports. Users reported brief connectivity instability, but no configuration changes were made to the switch. After the activity subsided, forwarding operations gradually stabilized. Based on the observed behavior, which sniffing technique was most likely performed?

  1. Switch Port Stealing
  2. ARP Poisoning
  3. MAC Flooding
  4. DNS Poisoning

Question 202

A network administrator reviews logs and observes that an attacker sends packets requesting the target system's internal clock value. The response includes timing information that can be used to calculate round-trip delay and analyze host characteristics. What host discovery technique is being used in this scenario?

  1. UDP Ping Scan
  2. ICMP ECHO Ping Sweep
  3. IP Protocol Scan
  4. ICMP Timestamp Ping Scan

Question 203

A private equity firm in Minneapolis, Minnesota allows employees to access internal reporting tools from their personally owned smartphones under its BYOD program. During a routine security assessment, a consultant observes that when an employee leaves their unlocked phone unattended, a colleague can immediately open the firm's financial application and review client investment records without any additional verification step inside the application. The operating system itself requires a passcode to unlock the device, but once unlocked, corporate applications open directly to sensitive dashboards. Identify the BYOD security guideline that would directly mitigate this exposure.

  1. Use encryption mechanism to store data
  2. Set a strong passcode on the device and change it relatively often
  3. Maintain a clear separation between business and personal data
  4. Set passwords for apps to restrict others from accessing them

Question 204

In this form of encryption algorithm, every individual block contains 64-bit data, and three keys are used, where each key consists of 56 bits. Which is this encryption algorithm?

  1. IDEA
  2. Triple Data Encryption Standard
  3. AES
  4. MD5 encryption algorithm

Question 205

John is investigating web-application firewall logs and observers that someone is attempting to inject the following: What type of attack is this?

  1. SQL injection
  2. Buffer overflow
  3. CSRF
  4. XSS