312-50V13 Exam Questions

What is the role of test automation in security testing?

Your company performs penetration tests and security assessments for small and medium-sized business in the local area. During a routine security assessment, you discover informati...

While using your bank's online servicing you notice the following string in the URL bar: 1" You observe that if you modify the Damount & Camount values and submit the request, that...

The establishment of a TCP connection involves a negotiation called three-way handshake. What type of message does the client send to the server in order to begin this negotiation?

Which type of security feature stops vehicles from crashing through the doors of a building?

The company ABC recently contracts a new accountant. The accountant will be working with the financial statements. Those financial statements need to be approved by the CFO and the...

What is the purpose of a demilitarized zone on a network?

Which of the following Linux commands will resolve a domain name into IP address?

Shellshock allowed an unauthorized user to gain access to a server. It affected many Internet- facing services, which OS did it not directly affect?

Which regulation defines security and privacy controls for Federal information systems and organizations?

What is a "Collision attack" in cryptography?

Which of the following tools can be used for passive OS fingerprinting?

Which of the following describes the characteristics of a Boot Sector Virus?

Your company was hired by a small healthcare provider to perform a technical assessment on the network. What is the best approach for discovering vulnerabilities on a Windows-based...

Which of the following is a command line packet analyzer similar to GUI-based Wireshark?

DHCP snooping is a great solution to prevent rogue DHCP servers on your network. Which security feature on switchers leverages the DHCP snooping database to help prevent man-in-the...

Bob, a network administrator at BigUniversity, realized that some students are connecting their notebooks in the wired network to have Internet access. In the university campus, th...

A company's policy requires employees to perform file transfers using protocols which encrypt traffic. You suspect some employees are still performing file transfers using unencryp...

You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any a...

Which of the following program infects the system boot sector and the executable files at the same time?

To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash...

An Intrusion Detection System (IDS) has alerted the network administrator to a possibly malicious sequence of packets sent to a Web server in the network's external DMZ. The packet...

The Heartbleed bug was discovered in 2014 and is widely referred to under MITRE's Common Vulnerabilities and Exposures (CVE) as CVE-2014-0160. This bug affects the OpenSSL implemen...

Why should the security analyst disable/remove unnecessary ISAPI filters?

Which of the following is a component of a risk assessment?

CompanyXYZ has asked you to assess the security of their perimeter email gateway. From your office in New York, you craft a specially formatted email message and send it across the...

Bob, a system administrator at TPNQM SA, concluded one day that a DMZ is not needed if he properly configures the firewall to allow access just to servers/ports, which can have dir...

Bob is acknowledged as a hacker of repute and is popular among visitors of "underground" sites. Bob is willing to share his knowledge with those who are willing to learn, and many...

Peter extracts the SIDs list from Windows 2000 Server machine using the hacking tool "SIDExtractor". Here is the output of the SIDs: From the above list identify the user account w...

Which address translation scheme would allow a single public IP address to always correspond to a single machine on an internal network, allowing "server publishing"?

What is the following command used for? net use \targetipc$ "" /u:""

What is the proper response for a NULL scan if the port is closed?

One of your team members has asked you to analyze the following SOA record. What is the TTL? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.)

One of your team members has asked you to analyze the following SOA record. What is the version? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.)...

MX record priority increases as the number increases. (True/False.)

Which of the following tools can be used to perform a zone transfer?

Under what conditions does a secondary name server request a zone transfer from a primary name server?

What ports should be blocked on the firewall to prevent NetBIOS traffic from not coming through the firewall if your network is comprised of Windows NT, 2000, and XP?

What is a NULL scan?

What is the proper response for a NULL scan if the port is open?

Which of the following statements about a zone transfer is correct? (Choose three.)

You have the SOA presented below in your Zone. Your secondary servers have not been able to contact your primary server to synchronize information. How long will the secondary serv...

Tess King is using the nslookup command to craft queries to list all DNS information (such as Name Servers, host names, MX records, CNAME records, glue records (delegation for chil...

A zone file consists of which of the following Resource Records (RRs)?

Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a maj...

Which DNS resource record can indicate how long any "DNS poisoning" could last?

Joseph was the Web site administrator for the Mason Insurance in New York, who's main Web the Web site. One night, Joseph received an urgent phone call from his friend, Smith. Acco...

Which of the following tools are used for enumeration? (Choose three.)

What did the following commands determine?

Which definition among those given below best describes a covert channel?