[May-2025 Newly Released] Pass 312-50v10 Exam - Real Questions and Answers

Pass 312-50v10 Review Guide, Reliable 312-50v10 Test Engine

NEW QUESTION # 200
The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. Also he needs to permit all FTP traffic to the rest of the network and deny all other traffic. After he applied his ACL configuration in the router nobody can access to the ftp and the permitted hosts cannot access to the Internet.
According to the next configuration what is happening in the network?

• A. The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router
• B. The ACL 110 needs to be changed to port 80
• C. The ACL 104 needs to be first because is UDP
• D. The ACL for FTP must be before the ACL 110

Answer: A

NEW QUESTION # 201
What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

• A. Distributive
• B. Active
• C. Reflective
• D. Passive

Answer: B

NEW QUESTION # 202
Sid is a judge for a programming contest. Before the code reaches him it goes through a restricted OS and is tested there. If it passes, then it moves onto Sid. What is this middle step called?

• A. Third party running the code
• B. Fuzzy-testing the code
• C. String validating the code
• D. Sandboxing the code

Answer: B

NEW QUESTION # 203
A software tester is randomly generating invalid inputs in an attempt to crash the program. Which of the following is a software testing technique used to determine if a software program properly handles a wide range of invalid input?

• A. Randomizing
• B. Bounding
• C. Fuzzing
• D. Mutating

Answer: C

NEW QUESTION # 204
What is the process of logging, recording, and resolving events that take place in an organization?

• A. Metrics
• B. Internal Procedure
• C. Security Policy
• D. Incident Management Process

Answer: D

Explanation:
The activities within the incident management process include:
References:
https://en.wikipedia.org/wiki/Incident_management_(ITSM)#Incident_management_proced ure

NEW QUESTION # 205
You have gained physical access to a Windows 2008 R2 server which has an accessible disc drive.
When you attempt to boot the server and log in, you are unable to guess the password.
In your toolkit, you have an Ubuntu 9.10 Linux LiveCD.
Which Linux-based tool can change any user's password or activate disabled Windows accounts?

• A. Cain & Abel
• B. CHNTPW
• C. SET
• D. John the Ripper

Answer: B

NEW QUESTION # 206
A hacker has successfully infected an internet-facing server which he will then use to send junk mail, take part in coordinated attacks, or host junk email content.
Which sort of trojan infects this server?

• A. Banking Trojans
• B. Botnet Trojan
• C. Ransomware Trojans
• D. Turtle Trojans

Answer: B

Explanation:
Explanation/Reference:

NEW QUESTION # 207
DHCP snooping is a great solution to prevent rogue DHCP servers on your network. Which security feature on switches leverages the DHCP snooping database to help prevent man-in-the-middle attacks?

• A. A Layer 2 Attack Prevention Protocol (LAPP)
• B. Port security
• C. Dynamic ARP inspection (DAI)
• D. Spanning tree

Answer: C

NEW QUESTION # 208
What is the broadcast address for the subnet 190.86.168.0/22?

• A. 190.86.168.255
• B. 190.86.255.255
• C. 190.86.171.255
• D. 190.86.169.255

Answer: C

NEW QUESTION # 209
From the following table, identify the wrong answer in terms of Range (ft).

• A. 802.11b
• B. 802.11a
• C. 802.16(WiMax)
• D. 802.11g

Answer: B

NEW QUESTION # 210
To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program.
What term is commonly used when referring to this type of testing?

• A. Randomizing
• B. Bounding
• C. Fuzzing
• D. Mutating

Answer: C

Explanation:
Fuzz testing or fuzzing is a software testing technique, often automated or semi-automated, that involves providing invalid, unexpected, or random data to the inputs of a computer program. The program is then monitored for exceptions such as crashes, or failing built-in code assertions or for finding potential memory leaks. Fuzzing is commonly used to test for security problems in software or computer systems. It is a form of random testing which has been used for testing hardware or software.
References: https://en.wikipedia.org/wiki/Fuzz_testing

NEW QUESTION # 211
Advanced encryption standard is an algorithm used for which of the following?

• A. Bulk data encryption
• B. Key discovery
• C. Data integrity
• D. Key recovery

Answer: A

NEW QUESTION # 212
A security engineer is attempting to map a company's internal network. The engineer enters in the following NMAP command:
NMAP -n -sS -P0 -p 80 ***.***.**.**
What type of scan is this?

• A. Stealth scan
• B. Quick scan
• C. Intense scan
• D. Comprehensive scan

Answer: A

NEW QUESTION # 213
You are tasked to perform a penetration test. While you are performing information gathering, you find an employee list in Google. You find the receptionist's email, and you send her an email changing the source email to her boss's email( boss@company ). In this email, you ask for a pdf with information. She reads your email and sends back a pdf with links. You exchange the pdf links with your malicious links (these links contain malware) and send back the modified pdf, saying that the links don't work. She reads your email, opens the links, and her machine gets infected. You now have access to the company network.
What testing method did you use?

• A. Eavesdropping
• B. Piggybacking
• C. Social engineering
• D. Tailgating

Answer: C

Explanation:
Explanation
Social engineering, in the context of information security, refers to psychological manipulation of people into performing actions or divulging confidential information. A type of confidence trick for the purpose of information gathering, fraud, or system access, it differs from a traditional "con" in that it is often one of many steps in a more complex fraud scheme.

NEW QUESTION # 214
You are attempting to man-in-the-middle a session. Which protocol will allow you to guess a sequence
number?

• A. TCP
• B. ICMP
• C. UPD
• D. UPX

Answer: A

NEW QUESTION # 215
Bluetooth uses which digital modulation technique to exchange information between paired devices?

• A. PSK (phase-shift keying)
• B. FSK (frequency-shift keying)
• C. ASK (amplitude-shift keying)
• D. QAM (quadrature amplitude modulation)

Answer: A

Explanation:
Phase shift keying is the form of Bluetooth modulation used to enable the higher data rates achievable with Bluetooth 2 EDR (Enhanced Data Rate). Two forms of PSK are used: /4 DQPSK, and 8DPSK.
References: http://www.radio-electronics.com/info/wireless/bluetooth/radio-interface- modulation.php

NEW QUESTION # 216
Eve stole a file named secret.txt, transferred it to her computer and she just entered these commands:

What is she trying to achieve?

• A. She is encrypting the file.
• B. She is using John the Ripper to crack the passwords in the secret.txt file.
• C. She is using John the Ripper to view the contents of the file.
• D. She is using ftp to transfer the file to another hacker named John.

Answer: B

NEW QUESTION # 217
Elliot is in the process of exploiting a web application that uses SQL as a back-end database. He is
determined that the application is vulnerable to SQL injection and has introduced conditional timing delays
into injected queries to determine whether they are successful. What type of SQL injection is Elliot most
likely performing?

• A. Union-based SQL injection
• B. Error-based SQL injection
• C. NoSQL injection
• D. Blind SQL injection

Answer: D

NEW QUESTION # 218
A hacker is attempting to use nslookup to query Domain Name Service (DNS). The hacker uses the nslookup interactive mode for the search. Which command should the hacker type into the command shell to request the appropriate records?

• A. Locate type=ns
• B. Transfer type=ns
• C. Request type=ns
• D. Set type=ns

Answer: D

NEW QUESTION # 219
......

100% Free 312-50v10 Daily Practice Exam With 745 Questions: https://www.braindumpsit.com/312-50v10_real-exam.html