EC0-350

EC0-350 practice questions, page 11 of 15, with answer review and explanations.

Question 51

When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's computer to update the router configuration. What type of an alert is this?

  1. False positive
  2. False negative
  3. True positve
  4. True negative

Question 52

While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

  1. Validate web content input for query strings.
  2. Validate web content input with scanning tools.
  3. Validate web content input for type, length, and range.
  4. Validate web content input for extraneous queries.

Question 53

A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti-virus and E-mail gateway. This approach can be used to mitigate which kind of attack?

  1. Forensic attack
  2. ARP spoofing attack
  3. Social engineering attack
  4. Scanning attack

Question 54

Which of the following resources does NMAP need to be used as a basic vulnerability scanner covering several vectors like SMB, HTTP and FTP?

  1. Metasploit scripting engine
  2. Nessus scripting engine
  3. NMAP scripting engine
  4. SAINT scripting engine

Question 55

Which of the following scanning tools is specifically designed to find potential exploits in Microsoft Windows products?

  1. Microsoft Security Baseline Analyzer
  2. Retina
  3. Core Impact
  4. Microsoft Baseline Security Analyzer