312-50v10 Dumps for Pass Guaranteed – Pass 312-50v10 Exam 2022 [Q63-Q77]

4.5/5 - (2 votes)

312-50v10 Dumps for Pass Guaranteed – Pass 312-50v10 Exam 2022

312-50v10 Exam Dumps – Try Best 312-50v10 Exam Questions from Training Expert ActualPDF

NEW QUESTION 63
You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line.
Which command would you use?

c:gpedit

c:compmgmt.msc

c:ncpa.cp

c:services.msc

NEW QUESTION 64
Session splicing is an IDS evasion technique in which an attacker delivers data in multiple, small sized packets to the target computer, making it very difficult for an IDS to detect the attack signatures. Which tool can be used to perform session splicing attacks?

tcpsplice

Burp

Hydra

Whisker

NEW QUESTION 65
Cryptography is the practice and study of techniques for secure communication in the presence of third parties (called adversaries.) More generally, it is about constructing and analyzing protocols that overcome the influence of adversaries and that are related to various aspects in information security such as data confidentiality, data integrity, authentication, and non-repudiation. Modern cryptography intersects the disciplines of mathematics, computer science, and electrical engineering. Applications of cryptography include ATM cards, computer passwords, and electronic commerce.
Basic example to understand how cryptography works is given below:

Which of the following choices is true about cryptography?

Algorithm is not the secret, key is the secret.

Symmetric-key algorithms are a class of algorithms for cryptography that use the different cryptographic keys for both encryption of plaintext and decryption of ciphertext.

Secure Sockets Layer (SSL) use the asymmetric encryption both (public/private key pair) to deliver the shared session key and to achieve a communication way.

Public-key cryptography, also known as asymmetric cryptography, public key is for decrypt, private key is for encrypt.

NEW QUESTION 66
Which type of access control is used on a router or firewall to limit network activity?

Mandatory

Discretionary

Rule-based

Role-based

NEW QUESTION 67
A common cryptographical tool is the use of XOR. XOR the following binary values:
10110001
00111010

10001011

11011000

10011101

10111100

The XOR gate is a digital logic gate that implements an exclusive or; that is, a true output (1/HIGH) results if one, and only one, of the inputs to the gate is true. If both inputs are false (0/LOW) or both are true, a false output results. XOR represents the inequality function, i.e., the output is true if the inputs are not alike otherwise the output is false. A way to remember XOR is “one or the other but not both”.
References: https://en.wikipedia.org/wiki/XOR_gate

NEW QUESTION 68
Which regulation defines security and privacy controls for Federal information systems and organizations?

HIPAA

EU Safe Harbor

PCI-DSS

NIST-800-53

NEW QUESTION 69
The “black box testing” methodology enforces what kind of restriction?

Only the internal operation of a system is known to the tester.

The internal operation of a system is completely known to the tester.

The internal operation of a system is only partly accessible to the tester.

Only the external operation of a system is accessible to the tester.

NEW QUESTION 70
An incident investigator asks to receive a copy of the event logs from all firewalls, proxy servers, and
Intrusion Detection Systems (IDS) on the network of an organization that has experienced a possible
breach of security. When the investigator attempts to correlate the information in all of the logs, the
sequence of many of the logged events do not match up.
What is the most likely cause?

The network devices are not all synchronized.

Proper chain of custody was not observed while collecting the logs.

The attacker altered or erased events from the logs.

The security breach was a false positive.

NEW QUESTION 71
You are the Network Admin, and you get a compliant that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL.
What may be the problem?

Traffic is Blocked on UDP Port 53

Traffic is Blocked on TCP Port 80

Traffic is Blocked on TCP Port 54

Traffic is Blocked on UDP Port 80

NEW QUESTION 72
How does the Address Resolution Protocol (ARP) work?

It sends a request packet to all the network elements, asking for the MAC address from a specific IP.

It sends a reply packet to all the network elements, asking for the MAC address from a specific IP.

It sends a reply packet for a specific IP, asking for the MAC address.

It sends a request packet to all the network elements, asking for the domain name from a specific IP.

When an incoming packet destined for a host machine on a particular local area network arrives at a gateway, the gateway asks the ARP program to find a physical host or MAC address that matches the IP address. The ARP program looks in the ARP cache and, if it finds the address, provides it so that the packet can be converted to the right packet length and format and sent to the machine. If no entry is found for the IP address, ARP broadcasts a request packet in a special format to all the machines on the LAN to see if one machine knows that it has that IP address associated with it. A machine that recognizes the IP address as its own returns a reply so indicating. ARP updates the ARP cache for future reference and then sends the packet to the MAC address that replied.
References: http://searchnetworking.techtarget.com/definition/Address-Resolution- Protocol-ARP

NEW QUESTION 73
Which element of Public Key Infrastructure (PKI) verifies the applicant?

Certificate authority

Validation authority

Registration authority

Verification authority

NEW QUESTION 74
Due to a slowdown of normal network operations, the IT department decided to monitor internet traffic for all of the employees. From a legal stand point, what would be troublesome to take this kind of measure?

All of the employees would stop normal work activities

IT department would be telling employees who the boss is

Not informing the employees that they are going to be monitored could be an invasion of privacy.

The network could still experience traffic slow down.

NEW QUESTION 75
The following is part of a log file taken from the machine on the network with the IP address of 192.168.0.110:

What type of activity has been logged?

Teardrop attack targeting 192.168.0.110

Denial of service attack targeting 192.168.0.105

Port scan targeting 192.168.0.110

Port scan targeting 192.168.0.105

NEW QUESTION 76
When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator’s Computer to update the router configuration. What type of an alert is this?

False negative

True negative

True positive

False positive

NEW QUESTION 77
What is the best defense against privilege escalation vulnerability?

Patch systems regularly and upgrade interactive login privileges at the system administrator level.

Run administrator and applications on least privileges and use a content registry for tracking.

Run services with least privileged accounts and implement multi-factor authentication and authorization.

Review user roles and administrator privileges for maximum utilization of automation services.

Loading …

Module 9: Social Engineering

The section evaluates the examinees’ competency in social engineering; different social engineering methods; insider threats; impersonation on social networks; identity theft; social engineering countermeasures; identifying theft countermeasures; Social Engineering Pen Testing.

Latest 100% Passing Guarantee – Brilliant 312-50v10 Exam Questions PDF: https://www.actualpdf.com/312-50v10_exam-dumps.html

Module 9: Social Engineering

Leave a Reply Cancel reply