What is the role of test automation in security testing?

It can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.

It is an option but it tends to be very expensive.

It should be used exclusively. Manual testing is outdated because of low speed and possible test setup inconsistencies.

Test automation is not usable in security due to the complexity of the tests.

It can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.

Your company performs penetration tests and security assessments for small and medium-sized business in the local are a. During a routine security assessment, you discover information that suggests your client is involved with human trafficking.What should you do?

Immediately stop work and contact the proper legal authorities.

Confront the client in a respectful manner and ask her about the data.

Copy the data to removable media and keep it in case you need it.

Ignore the data and continue the assessment until completed as agreed.

Immediately stop work and contact the proper legal authorities.

The company PLUS recently contracts a new accountant. The accountant will be working with the financial statements. Those financial statements need to be approved by the CFO and then they will be sent to the accountant but the CFO is worried because he wants to be sure that the information sent to the accountant was not modified once he approved it. Which of the following options can be useful to ensure the integrity of the data?

The CFO can use a hash algorithm in the document once he approved the financial statements

The CFO can use an excel file with a password

The financial statements can be sent twice, one by email and the other delivered in USB and the accountant can compare both to be sure is the same document

The document can be sent to the accountant using an exclusive USB for that document

What is the purpose of a demilitarized zone on a network?

To only provide direct access to the nodes within the DMZ and protect the network behind it

To scan all traffic coming through the DMZ to the internal network

To only provide direct access to the nodes within the DMZ and protect the network behind it

To provide a place to put the honeypot

To contain the network devices you wish to protect

What is a "Collision attack" in cryptography?

Collision attacks try to find two inputs producing the same hash

Collision attacks try to get the public key

Collision attacks try to break the hash into three parts to get the plaintext value

Collision attacks try to break the hash into two parts, with the same bytes in each part to get the private key

Collision attacks try to find two inputs producing the same hash

Which of the following describes the characteristics of a Boot Sector Virus?

Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR.

Modifies directory table entries so that directory entries point to the virus code instead of the actual program.

Moves the MBR to another location on the RAM and copies itself to the original location of the MBR.

Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR.

Overwrites the original MBR and only executes the new virus code.

Your company was hired by a small healthcare provider to perform a technical assessment on the network.What is the best approach for discovering vulnerabilities on a Windows-based computer?

Use the built-in Windows Update tool

Check MITRE.org for the latest list of CVE findings

Create a disk image of a clean Windows installation

DHCP snooping is a great solution to prevent rogue DHCP servers on your network. Which security feature on switchers leverages the DHCP snooping database to help prevent man-in-the-middle attacks?

Layer 2 Attack Prevention Protocol (LAPP)

Bob, a network administrator at BigUniversity, realized that some students are connecting their notebooks in the wired network to have Internet access. In the university campus, there are many Ethernet ports available for professors and authorized visitors but not for students.He identified this when the IDS alerted for malware activities in the network. What should Bob do to avoid this problem?

Disable unused ports in the switches

Separate students in a different VLAN

Ask students to use the wireless network

A company's policy requires employees to perform file transfers using protocols which encrypt traffic. You suspect some employees are still performing file transfers using unencrypted protocols because the employees do not like changes.You have positioned a network sniffer to capture traffic from the laptops used by employees in the data ingest department. Using Wireshark to examine the captured traffic, which command can be used as display filter to find unencrypted file transfers?

tcp.port = = 21 | | tcp.port = =22

An Intrusion Detection System (IDS) has alerted the network administrator to a possibly malicious sequence of packets sent to a Web server in the network's external DMZ. The packet traffic was captured by the IDS and saved to a PCAP file. What type of network tool can be used to determine if these packets are genuinely malicious or simply a false positive?

Intrusion Prevention System (IPS)

Why should the security analyst disable/remove unnecessary ISAPI filters?

To defend against webserver attacks

To defend against social engineering attacks

To defend against webserver attacks

To defend against wireless attacks

Bob, a system administrator at TPNQM SA, concluded one day that a DMZ is not needed if he properly configures the firewall to allow access just to servers/ports, which can have direct internet access, and block the access to workstations.Bob also concluded that DMZ makes sense just when a stateful firewall is available, which is not the case of TPNQM SA.In this context, what can you say?

Bob is totally wrong. DMZ is always relevant when the company has internet servers and workstations

Bob can be right since DMZ does not make sense when combined with stateless firewalls

Bob is partially right. He does not need to separate networks if he can create rules by destination IPs, one by one

Bob is totally wrong. DMZ is always relevant when the company has internet servers and workstations

Bob is partially right. DMZ does not make sense when a stateless firewall is available

Bob is acknowledged as a hacker of repute and is popular among visitors of "underground" sites.Bob is willing to share his knowledge with those who are willing to learn, and many have expressed their interest in learning from him. However, this knowledge has a risk associated with it, as it can be used for malevolent attacks as well.In this context, what would be the most effective method to bridge the knowledge gap between the "black" hats or crackers and the "white" hats or computer security professionals? (Choose the test answer.)

Educate everyone with books, articles and training on risk analysis, vulnerabilities and safeguards.

Hire more computer security monitoring personnel to monitor computer systems and networks.

Make obtaining either a computer security certification or accreditation easier to achieve so more individuals feel that they are a part of something larger than life.

Train more National Guard and reservist in the art of computer security to help out in times of emergency or crises.

Which address translation scheme would allow a single public IP address to always correspond to a single machine on an internal network, allowing "server publishing"?

Static Network Address Translation

Overloading Port Address Translation

Dynamic Port Address Translation

Dynamic Network Address Translation

Static Network Address Translation

What is the following command used for? net use \targetipc$ "" /u:""

This command is used to connect as a null session

Connecting to a Linux computer through Samba.

This command is used to connect as a null session

ECCouncil 312-50v12 Practice Test 3 - Free Online Exam Prep & Questions

What kind of detection techniques is being used in antivirus software that identifies malware by collecting data from multiple protected systems and instead of analyzing files locally it's made on the provider's environment?

Behavioral based

Heuristics based

Honeypot based

Cloud based

Comment (0)

ECCouncil 312-50v12 Practice Test 3

Question

ECCouncil 312-50v12 Practice Tests

Practice Tests