412-79v8

412-79v8 practice questions, page 7 of 8, with answer review and explanations.

Question 31

A wireless intrusion detection system (WIDS) monitors the radio spectrum for the presence of unauthorized, rogue access points and the use of wireless attack tools. The system monitors the radio spectrum used by wireless LANs, and immediately alerts a systems administrator whenever a rogue access point is detected. Conventionally it is achieved by comparing the MAC address of the participating wireless devices. Which of the following attacks can be detected with the help of wireless intrusion detection system (WIDS)?

  1. Social engineering
  2. SQL injection
  3. Parameter tampering
  4. Man-in-the-middle attack

Question 32

A penetration test will show you the vulnerabilities in the target system and the risks associated with it. An educated valuation of the risk will be performed so that the vulnerabilities can be reported as High/Medium/Low risk issues. What are the two types of white-box penetration testing?

  1. Announced testing and blind testing
  2. Blind testing and double blind testing
  3. Blind testing and unannounced testing
  4. Announced testing and unannounced testing

Question 33

Which of the following is not the SQL injection attack character?

  1. $
  2. PRINT
  3. #
  4. @@variable

Question 34

Which of the following is the objective of Gramm-Leach-Bliley Act?

  1. To ease the transfer of financial information between institutions and banks
  2. To protect the confidentiality, integrity, and availability of data
  3. To set a new or enhanced standards for all U.S. public company boards, management and public accounting firms
  4. To certify the accuracy of the reported financial statement

Question 35

Which of the following contents of a pen testing project plan addresses the strengths, weaknesses, opportunities, and threats involved in the project?

  1. Project Goal
  2. Success Factors
  3. Objectives
  4. Assumptions