EC0-350

EC0-350 practice questions, page 6 of 15, with answer review and explanations.

Question 26

An NMAP scan of a server shows port 69 is open. What risk could this pose?

  1. Unauthenticated access
  2. Weak SSL version
  3. Cleartext login
  4. Web portal data leak

Question 27

What information should an IT system analysis provide to the risk assessor?

  1. Management buy-in
  2. Threat statement
  3. Security architecture
  4. Impact analysis

Question 28

Which results will be returned with the following Google search query? site:target.com -site:Marketing.target.com accounting

  1. Results matching all words in the query
  2. Results matching "accounting" in domain target.com but not on the site Marketing.target.com
  3. Results from matches on the site marketing.target.com that are in the domain target.com but do not include the word accounting
  4. Results for matches on target.com and Marketing.target.com that include the word "accounting"

Question 29

A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?

  1. Perform a vulnerability scan of the system.
  2. Determine the impact of enabling the audit feature.
  3. Perform a cost/benefit analysis of the audit feature.
  4. Allocate funds for staffing of audit log review.

Question 30

Which of the following is a preventive control?

  1. Smart card authentication
  2. Security policy
  3. Audit trail
  4. Continuity of operations plan