Online Access Free 312-50v8 Practice Test

Finding tools to run dictionary and brute forcing attacks against FTP and Web servers is an easy task for hackers. They use tools such as arhontus or brutus to break into remote servers.

A command such as this, will attack a given 10.0.0.34 FTP and Telnet servers simultaneously with a list of passwords and a single login namE. linksys. Many FTP-specific password-guessing tools are also available from major security sites.
What defensive measures will you take to protect your network from these attacks?

• A.Never leave a default password
• B.Never use a password related to your hobbies,pets,relatives,or date of birth.
• C.Never use a password that can be found in a dictionary
• D.Never use a password related to the hostname,domain name,or anything else that can be found with whois
• E.Use a word that has more than 21 characters from a dictionary as the password

Who is an Ethical Hacker?

• A.A person who hacks for an ethical cause
• B.A person who hacks for offensive purposes
• C.A person who hacks for defensive purposes
• D.A person who hacks for ethical reasons

Which of the following best describes session key creation in SSL?

• A.It is created by the server after verifying theuser's identity
• B.It is created by the server upon connection by the client
• C.It is created by the client after verifying the server's identity
• D.It is created by the client from the server's public key

Jake works as a system administrator at Acme Corp. Jason, an accountant of the firm befriends him at the canteen and tags along with him on the pretext of appraising him about potential tax benefits. Jason waits for Jake to swipe his access card and follows him through the open door into the secure systems area. How would you describe Jason's behavior within a security context?

• A.Smooth Talking
• B.Tailgating
• C.Trailing
• D.Swipe Gating

What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

• A.The attack is called "Blind" because,although the application properly filters user input,it is still vulnerable to code injection.
• B.The successful attack does not show an error message to the administrator of the affected application.
• C.The vulnerable application does not display errors with information about the injection results to the attacker.
• D.The request to the web server is not visible to the administrator of the vulnerable application.