312-92 Exam Questions

Travis, a senior systems developer for YNY Services, received an email recently from an unknown source. Instead of opening the email on his normal production machine, Travis decide...

David is a developer that has created an application using the secure RPC protocol. Before anyone can actually use the program, where must David add entries for the users so that t...

Jayson is the head developer of a team working on an inventory tracking and maintenance program. Jayson and his team are in the third phase of the software development life cycle,...

What is the new lightweight audit framework that is built into Red Hat Linux Enterprise?

Sherry is programming an online game and is trying to prevent security threats from being introduced into the game. She is also trying to prevent any kind of online cheating by sea...

What programming threat model with six categories includes repudiation, spoofing identity, information disclosure and so on?

Jay is using the EnTrial Key Generator software to create software keys for the programs he has created. To create the unlock key in the software, what two inputs must Jay use?

George is the CIO for the US Department of Defense. George's education and work experience cover everything from Systems Administration to developing complex software programs for...

Mathew is working on a Fedora machine and is having issues with some shellcode he wrote that is producing errors. Mathew decides to download and use Ktrace to debug the shellcode t...

Neil is almost finished developing a Web-based inventorytracking application for a company he is working for under contract. Neil finds out that the company wants to pay him half o...

What type of error will result from the following statement? int main(int argc, char* argv[]) { char i[7]; strncpy(i, "sdfusdofof", sizeof(i)); }

Kyle is a web developer for Innovative Incorporated, a web development and graphics designing company in Dallas. Kyle is currently working on a web-based application for a client t...

What will the following command accomplish? c:\signtool12winnt\signtool -L -d a:\tmpcert:a:\cert

Harold is developing software for the company he works for to aid in their human resources and payroll procedures. Harold is almost done working on the program, currently working i...

What will the following script accomplish? for (int i=0; i<blacklist.length; i++) if (HttpCookie.domainMatches(blacklist[i], host)) return false;

What is defined as the practice of using selected process techniques to improve the quality of a software development effort?

What will the following ASP script accomplish on a webpage? <% Response.CacheControl = "no-cache" Response.AddHeader "Pragma", "no-cache" Response.Expires = -1 if session("UID")=""...

Heather has built a new Linux kernel for her machine and wants to use the grub boot loader. Which file should she edit to tell the computer how to boot up properly?

Which of the following is a type of computer security that deals with protection against spurious signals emitted by electrical equipment in the system?

Victor is creating an online shopping cart for his company that will accept credit cards as payment. What protocol that provides open encryption and security specifications designe...

William is the lead programmer for Gummerson, Inc., a software company located in San Francisco. Gummerson is looked upon as one of the leading software development companies for m...

Harold is writing a J2ME program that run an inventory application on his company's PDAs. Employees will use their PDA to scan barcodes into the program Harold is writing. Harold i...

Harold is creating an Oracle Label Security Policy on his server. He has define the policy and defined the components of the labels already. Now Harold creates the labels dynamical...

Yancey has just finished downloading the Valgrind suite to use in his application development. Yancey is most concerned about the possibility of memory-management issues in his pro...

If a developer wrote the following code, what would the script be vulnerable to? #include <stdio.h> int main(int argc, char **argv) { int number = 5; printf(argv[1]); putchar('\n')...

Harold is writing a client-side socket program that will create a TCP connection to a remote server to retrieve data. What function should Harold use to create this connection?

Carl is writing cgi-bin scripts in PERL for some web pages. He is concerned about malicious users trying to exploit the site and/or the cgi-sripts. If Carl uses the following code,...

Gregory is a system administrator who oversees 15 Mac OS X servers for his company. Three of his servers are at remote sites, but they still need to replicate and communicate with...

What is the following shellcode trying to accomplish? int main(void) { mkdir("A"); chdir("A"); chroot("..//..//..//..//..//..//..//..//"); system("/bin/sh")

What coould a developer using Apple's Cocoa accomplish by using the following script? NSURL *urlContents = [myURL resourceDataUsingCache:YES]; if ([urlContents writeToFile:[@"~/Doc...

What is one of the dominant factors that lead to insecure programming?

Although software companies despise software piracy, they often realize that illegal release of their product parallel to the legal release can actually increase the item's user ba...

What type of authentication is used in the following Pocket SOAP code? Dim Envelope Dim HTTP Set Envelope = CreateObject("PocketSOAP.Envelope.2") Set HTTP = CreateObject("PocketSOA...

What function can be used with SQL to encrypt user supplied-passwords to that they can be compared with the encrypted passwords stored on the SQL server?

Darren has just been hired on as the SQL dba for Fredrickson Inc., a marketing firm in New York City. He has been asked to clearn up the SQL databases on one of the servers. What S...

What encryption algorithm is used by PERL crypt() function?

Cylie is the Oracle DBA for her company and now wants to track all actions on her Oracle server using auditing. What file should Cylie insert the following line into? audit_trail =...

You are a professional Computer Hacking forensic investigator. You have been called to collect evidences of buffer overflow and cookie snooping attacks. Which of the following logs...

What vulnerability is the following code susceptible to? CREATE OR REPLACE PROCEDURE demo (name in VARCHAR2) as cursor_name INTEGER; rows_processed INTEGER; sql VARCHAR2(150); code...

When dealing with IA32 (x86) systems, how are the inputted variables treated as they enter the memory stack?

William, a software developer just starting his career, was asked to create a website in PHP that would allow visitors to enter a month and a year for their birth date. The PHP cod...

What type of encryption will be used from the following code? Dim Publickey As Byte() = {214,46,220,83,160,73,40,39,201 155,19,202,3,11,191,178,56,74,90,36,248,103, 18,144,170,163,...

Peter is writing a program that has a GUI front-end and uses a MS SQL database as a backend. Peter's application will repeatedly update and call upon specific tables in the databas...

Victor has completed writing his software application and is now working on error messages that will be displayed in case of any kind of failure or problem. He has written code tha...

What type of problem will result if the following statement is used? int main() { short int a; unsigned short int=b32768; a=b; printf( " a = %d", a); b=65535; a=b; printf( " a = %d...

Harold is programming an application that needs to be incorporate data encryption. Harold decides to utilize an encryption algorithm that uses 4-bit working registers instead of th...

What security package is implemented with the following code? dwStatus = DsMakSpn ( "ldap", "MyServer.Mydomain.com", NULL, 0, NULL, &pcSpnLength, pszSpn ); rpcStatus = RpcServerReg...

Steve is using the libcap library to create scripts for capturing and analyzing network traffic. Steve has never used libcap before and is struggling with finding out the correct f...

Processes having the "CAP_NET_BIND_SERVICE" can listen on which ports?

David is an applications developer working for Dewer and Sons law firm in Los Angeles David just completed a course on writing secure code and was enlightened by all the intricacie...