412-79v8

412-79v8 practice questions, page 3 of 8, with answer review and explanations.

Question 11

Mason is footprinting an organization to gather competitive intelligence. He visits the company's website for contact information and telephone numbers but does not find any. He knows the entire staff directory was listed on their website 12 months. How can he find the directory?

  1. Visit Google’s search engine and view the cached copy
  2. Crawl and download the entire website using the Surfoffline tool and save them to his computer
  3. Visit the company's partners’ and customers' website for this information
  4. Use WayBackMachine in Archive.org web site to retrieve the Internet archive

Question 12

Application security assessment is one of the activity that a pen tester performs in the attack phase. It is designed to identify and assess threats to the organization through bespoke, proprietary applications or systems. It checks the application so that a malicious user cannot access, modify, or destroy data or services within the system. Identify the type of application security assessment which analyzes the application-based code to confirm that it does not contain any sensitive information that an attacker might use to exploit an application.

  1. Web Penetration Testing
  2. Functionality Testing
  3. Authorization Testing
  4. Source Code Review

Question 13

Which of the following is not a characteristic of a firewall?

  1. Manages public access to private networked resources
  2. Routes packets between the networks
  3. Examines all traffic routed between the two networks to see if it meets certain criteria
  4. Filters only inbound traffic but not outbound traffic

Question 14

The IP protocol was designed for use on a wide variety of transmission links. Although the maximum length of an IP datagram is 64K, most transmission links enforce a smaller maximum packet length limit, called a MTU. The value of the MTU depends on the type of the transmission link. The design of IP accommodates MTU differences by allowing routers to fragment IP datagrams as necessary. The receiving station is responsible for reassembling the fragments back into the original full size IP datagram. IP fragmentation involves breaking a datagram into a number of pieces that can be reassembled later. The IP source, destination, identification, total length, and fragment offset fields in the IP header, are used for IP fragmentation and reassembly. The fragment offset is 13 bits and indicates where a fragment belongs in the original IP datagram. This value is a:

  1. Multiple of four bytes
  2. Multiple of two bytes
  3. Multiple of eight bytes
  4. Multiple of six bytes

Question 15

From where can clues about the underlying application environment can be collected?

  1. From the extension of the file
  2. From executable file
  3. From file types and directories
  4. From source code