Verified 312-50v10 &As – Provide 312-50v10 with Correct Answers [Q11-Q28]

NEW QUESTION 11
A large mobile telephony and data network operator has a data that houses network elements. These are essentially large computers running on Linux. The perimeter of the data center is secured with firewalls and IPS systems.
What is the best security policy concerning this setup?

NEW QUESTION 12
Jesse receives an email with an attachment labeled “Court_Notice_21206.zip”. Inside the zip file is a file named “Court_Notice_21206.docx.exe” disguised as a word document. Upon execution, a window appears stating, “This word document is corrupt.” In the background, the file copies itself to Jesse APPDATAlocal directory and begins to beacon to a C2 server to download additional malicious binaries.
What type of malware has Jesse encountered?

NEW QUESTION 13
The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic.
After he applied his ACL configuration in the router, nobody can access to the ftp, and the permitted hosts cannot access the Internet. According to the next configuration, what is happening in the network?

NEW QUESTION 14
While reviewing the result of scanning run against a target network you come across the following:

Which among the following can be used to get this output?

NEW QUESTION 15
Which of the following techniques will identify if computer files have been changed?

NEW QUESTION 16
Which of the following security operations is used for determining the attack surface of an organization?

NEW QUESTION 17
You are looking for SQL injection vulnerability by sending a special character to web applications. Which of
the following is the most useful for quick validation?

NEW QUESTION 18
Bob learned that his username and password for a popular game has been compromised. He contacts the company and resets all the information. The company suggests he use two-factor authentication, which option below offers that?

NEW QUESTION 19
When you are testing a web application, it is very useful to employ a proxy tool to save every request and response. You can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers manually to get more precise results than if using web vulnerability scanners.
What proxy tool will help you find web vulnerabilities?

NEW QUESTION 20
Jim’s company regularly performs backups of their critical servers. But the company cannot afford to send backup tapes to an off-site vendor for long-term storage and archiving. Instead, Jim’s company keeps the backup tapes in a safe in the office. Jim’s company is audited each year, and the results from this year’s audit show a risk because backup tapes are not stored off-site. The Manager of Information Technology has a plan to take the backup tapes home with him and wants to know what two things he can do to secure the backup tapes while in transit?

NEW QUESTION 21
What is the difference between the AES and RSA algorithms?

NEW QUESTION 22
An attacker tries to do banner grabbing on a remote web server and executes the following command.

Service detection performed. Please report any incorrect results at http://nmap.org/submit/.
Nmap done: 1 IP address (1 host up) scanned in 6.42 seconds
What did the hacker accomplish?

NEW QUESTION 23
SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts. Which of the following features makes this possible?
(Choose two.)

NEW QUESTION 24
A company has five different subnets: 192.168.1.0, 192.168.2.0, 192.168.3.0, 192.168.4.0 and 192.168.5.0.
How can NMAP be used to scan these adjacent Class C networks?

NEW QUESTION 25
Which of the following techniques does a vulnerability scanner use in order to detect a vulnerability on a target service?

NEW QUESTION 26
Bob received this text message on his mobile phone: “Hello, this is Scott Smelby from the Yahoo Bank. Kindly contact me for a vital transaction on: [email protected]”. Which statement below is true?

NEW QUESTION 27
The following is a sample of output from a penetration tester’s machine targeting a machine with the IP address of 192.168.1.106:

What is most likely taking place?

NEW QUESTION 28
You are looking for SQL injection vulnerability by sending a special character to web applications. Which of the following is the most useful for quick validation?