312-50 practice test

1. Question 1 · 1

   Which of the following can the administrator do to verify that a tape backup can be recovered in its entirety?

   Choose one answer.

   • Restore a random file.
   • Perform a full restore.
   • Read the first 512 bytes of the tape.
   • Read the last 512 bytes of the tape.

   Read explanation

   A full restore is required.

2. Question 2 · 2

   Passive reconnaissance involves collecting information through which of the following?

   Choose one answer.

   • Social engineering
   • Network traffic sniffing
   • Man in the middle attacks
   • Publicly accessible sources

3. Question 3 · 2

   Which of the following is a component of a risk assessment?

   Choose one answer.

   • Physical security
   • Administrative safeguards
   • DMZ
   • Logical interface

4. Question 4 · 2

   When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

   Choose one answer.

   • Vulnerability scanning
   • Social engineering
   • Application security testing
   • Network sniffing

5. Question 5 · 2

   A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

   Choose one answer.

   • Reject all invalid email received via SMTP.
   • Allow full DNS zone transfers.
   • Remove A records for internal hosts.
   • Enable null session pipes.

6. Question 6 · 2

   Which of the following techniques will identify if computer files have been changed?

   Choose one answer.

   • Network sniffing
   • Permission sets
   • Integrity checking hashes
   • Firewall alerts

7. Question 7 · 2

   Which system consists of a publicly available set of databases that contain domain name registration contact information?

   Choose one answer.

   • WHOIS
   • IANA
   • CAPTCHA
   • IETF

8. Question 8 · 2

   A penetration tester was hired to perform a penetration test for a bank. The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news articles online about the bank, watching what times the bank employees come into work and leave from work, searching the bank's job postings (paying special attention to IT related jobs), and visiting the local dumpster for the bank's corporate office. What phase of the penetration test is the tester currently in?

   Choose one answer.

   • Information reporting
   • Vulnerability assessment
   • Active information gathering
   • Passive information gathering

9. Question 9 · 2

   An NMAP scan of a server shows port 69 is open. What risk could this pose?

   Choose one answer.

   • Unauthenticated access
   • Weak SSL version
   • Cleartext login
   • Web portal data leak

10. Question 10 · 2

    How can rainbow tables be defeated?

    Choose one answer.

    • Password salting
    • Use of non-dictionary words
    • All uppercase character passwords
    • Lockout accounts under brute force password cracking attempts

11. Question 11 · 2

    Which results will be returned with the following Google search query? site:target.com -site:Marketing.target.com accounting

    Choose one answer.

    • Results matching all words in the query
    • Results matching "accounting" in domain target.com but not on the site Marketing.target.com
    • Results from matches on the site marketing.target.com that are in the domain target.com but do not include the word accounting
    • Results for matches on target.com and Marketing.target.com that include the word "accounting"

12. Question 12 · 2

    Which of the following is considered an acceptable option when managing a risk?

    Choose one answer.

    • Reject the risk.
    • Deny the risk.
    • Mitigate the risk.
    • Initiate the risk. C

13. Question 13 · 2

    Which security control role does encryption meet?

    Choose one answer.

    • Preventative
    • Detective
    • Offensive
    • Defensive

14. Question 14 · 2

    A covert channel is a channel that

    Choose one answer.

    • transfers information over, within a computer system, or network that is outside of the security policy.
    • transfers information over, within a computer system, or network that is within the security policy.
    • transfers information via a communication path within a computer system, or network for transfer of data.
    • transfers information over, within a computer system, or network that is encrypted.

15. Question 15 · 2

    John the Ripper is a technical assessment tool used to test the weakness of which of the following?

    Choose one answer.

    • Usernames
    • File permissions
    • Firewall rulesets
    • Passwords

Paid access to all 133 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.