312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 5 of 42, with answer review and explanations.

Question 21

Which of the following is a common framework applied by business management and other personnel to identify potential events that may affect the enterprise, manage the associated risks and opportunities, and provide reasonable assurance that objectives will be achieved?

  1. Risk management framework
  2. Qualitative risk assessment
  3. PC-DSS
  4. NIST SP 800-37

Question 22

When referring to the domain name service, what is a zone?

  1. A collection of domains
  2. The zone namespace
  3. A collection of alias records
  4. A collection of resource records

Question 23

You have gone to an organization’s website to gather information, such as employee names, email addresses, and phone numbers. Which step of the hacker’s methodology does this correspond to?

  1. Fingerprinting
  2. Reconnaissance
  3. Scanning and enumeration
  4. Gaining access

Question 24

Kevin and his friends are going through a local IT firm’s garbage. Which of the following best describes this activity?

  1. Intelligence gathering
  2. Reconnaissance
  3. Dumpster diving
  4. Social engineering

Question 25

You’ve just performed a port scan against an internal device during a routine pen test. Nmap returned the following response: Starting NMAP 7.30 at 2021-10-10 11:06 NMAP scan report for 192.168.123.100 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 80/tcp open http 161/tcp open snmp 515/tcp open Ipd MAC Address: 00:1B:A9:01:3a:21 Based on this scan result, which of the following is most likely correct?

  1. The host is a printer.
  2. The host is most likely a Windows computer.
  3. The host is a Cisco router.
  4. The host is most likely a Linux computer.