312-50v8

312-50v8 practice questions, page 14 of 14, with answer review and explanations.

Question 66

Which of the following types of firewall inspects only header information in network traffic?

  1. Packet filter
  2. Stateful inspection
  3. Circuit-level gateway
  4. Application-level gateway

Question 67

During a penetration test, the tester conducts an ACK scan using NMAP against the external interface of the DMZ firewall. NMAP reports that port 80 is unfiltered. Based on this response, which type of packet inspection is the firewall conducting?

  1. Host
  2. Stateful
  3. Stateless
  4. Application

Question 68

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 no response - TCP port 22 no response - TCP port 23 Time-to-live exceeded

  1. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.
  2. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.
  3. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.
  4. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.

Question 69

Which of the following is an example of an asymmetric encryption implementation?

  1. SHA1
  2. PGP
  3. 3DES
  4. MD5

Question 70

A hacker was able to sniff packets on a company's wireless network. The following information was discovered: The Key 10110010 01001011 The Cyphertext 01100101 01011010 Using the Exlcusive OR, what was the original message?

  1. 00101000 11101110
  2. 11010111 00010001
  3. 00001101 10100100
  4. 11110010 01011011