Online Access Free 312-50v8 Practice Test

Which of the following defines the role of a root Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

• A.The CA is the trusted root that issues certificates.
• B.The root CA is the recovery agent used to encrypt data when a user's certificate is lost.
• C.The root CA stores the user's hash value for safekeeping.
• D.The root CA is used to encrypt email messages to prevent unintended disclosure of data.

A company has hired a security administrator to maintain and administer Linux and Windows-based systems. Written in the nightly report file is the followinG.
Firewall log files are at the expected value of 4 MB. The current time is 12am. Exactly two hours later the size has decreased considerably. Another hour goes by and the log files have shrunk in size again.
Which of the following actions should the security administrator take?

• A.Log the event as suspicious activity,call a manager,and report this as soon as possible.
• B.Log the event as suspicious activity,continue to investigate,and act according to the site's security policy.
• C.Log the event as suspicious activity and report this behavior to the incident response team immediately.
• D.Run an anti-virus scan because it is likely the system is infected by malware.

What is a primary advantage a hacker gains by using encryption or programs such as
Loki?

• A.It allows an easy way to gain administrator rights
• B.It is effective against Windows computers
• C.IDS systems are unable to decrypt it
• D.It slows down the effective response of an IDS
• E.Traffic will not be modified in transit

Which of the following techniques can be used to mitigate the risk of an on-site attacker from connecting to an unused network port and gaining full access to the network? (Choose three.)

• A.Network Admission Control (NAC)
• B.Port Security
• C.Intrusion Detection System (IDS)
• D.IPSec Encryption
• E.802.1x Port Based Authentication
• F.802.1q Port Based Authentication

Exhibit: Given the following extract from the snort log on a honeypot, what do you infer from the attack?

• A.The exploit was successful
• B.The exploit was not successful
• C.A new port was opened
• D.A new user id was created