312-50v8

312-50v8 practice questions, page 2 of 14, with answer review and explanations.

Question 6

The following is a sample of output from a penetration tester's machine targeting a machine with the IP address of 192.168.1.106: What is most likely taking place?

  1. Ping sweep of the 192.168.1.106 network
  2. Remote service brute force attempt
  3. Port scan of 192.168.1.106
  4. Denial of service attack on 192.168.1.106

Question 7

An NMAP scan of a server shows port 25 is open. What risk could this pose?

  1. Open printer sharing
  2. Web portal data leak
  3. Clear text authentication
  4. Active mail relay

Question 8

A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS? Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports - PORT STATE SERVICE - 21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/tcp open netbios-ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:89 -

  1. The host is likely a Windows machine.
  2. The host is likely a Linux machine.
  3. The host is likely a router.
  4. The host is likely a printer.

Question 9

What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

  1. Passive
  2. Reflective
  3. Active
  4. Distributive

Question 10

Which of the following lists are valid data-gathering activities associated with a risk assessment?

  1. Threat identification, vulnerability identification, control analysis
  2. Threat identification, response identification, mitigation identification
  3. Attack profile, defense profile, loss profile
  4. System profile, vulnerability identification, security determination