EC0-350

EC0-350 practice questions, page 9 of 15, with answer review and explanations.

Question 41

Windows file servers commonly hold sensitive files, databases, passwords and more. Which of the following choices would be a common vulnerability that usually exposes them?

  1. Cross-site scripting
  2. SQL injection
  3. Missing patches
  4. CRLF injection

Question 42

While conducting a penetration test, the tester determines that there is a firewall between the tester's machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model. Which type of firewall is the tester trying to traverse?

  1. Packet filtering firewall
  2. Application-level firewall
  3. Circuit-level gateway firewall
  4. Stateful multilayer inspection firewall

Question 43

A company firewall engineer has configured a new DMZ to allow public systems to be located away from the internal network. The engineer has three security zones set: Untrust (Internet) (Remote network = 217.77.88.0/24) DMZ (DMZ) (11.12.13.0/24) Trust (Intranet) (192.168.0.0/24) The engineer wants to configure remote desktop access from a fixed IP on the remote network to a remote desktop server in the DMZ. Which rule would best fit this requirement?

  1. Permit 217.77.88.0/24 11.12.13.0/24 RDP 3389
  2. Permit 217.77.88.12 11.12.13.50 RDP 3389
  3. Permit 217.77.88.12 11.12.13.0/24 RDP 3389
  4. Permit 217.77.88.0/24 11.12.13.50 RDP 3389

Question 44

A circuit level gateway works at which of the following layers of the OSI Model?

  1. Layer 5 - Application
  2. Layer 4 – TCP
  3. Layer 3 – Internet protocol
  4. Layer 2 – Data link

Question 45

Which of the following is a symmetric cryptographic standard?

  1. DSA
  2. PKI
  3. RSA
  4. 3DES