312-50v10 試験問題を無料オンラインアクセス

Initiating an attack against targeted businesses and organizations, threat actors compromise a carefully selected website by inserting an exploit resulting in malware infection. The attackers run exploits on well-known and trusted sites likely to be visited by their targeted victims. Aside from carefully choosing sites to compromise, these attacks are known to incorporate zero-day exploits that target unpatched vulnerabilities. Thus, the targeted entities are left with little or no defense against these exploits.
What type of attack is outlined in the scenario?

• A.Shellshock Attack
• B.Spear Phising Attack
• C.Watering Hole Attack
• D.Heartbleed Attack

Which of the following is a client-server tool utilized to evade firewall inspection?

• A.kismet
• B.tcp-over-dns
• C.nikto
• D.hping

When discussing passwords, what is considered a brute force attack?

• A.You attempt every single possibility until you exhaust all possible combinations or discover the password
• B.You create hashes of a large number of words and compare it with the encrypted passwords
• C.You load a dictionary of words into your cracking program
• D.You wait until the password expires
• E.You threaten to use the rubber hose on someone unless they reveal their password

Which set of access control solutions implements two-factor authentication?

• A.Account and password
• B.Password and PIN
• C.Fingerprint scanner and retina scanner
• D.USB token and PIN

Which of the following is a form of penetration testing that relies heavily on human interaction and often involves tricking people into breaking normal security procedures?

• A.Piggybacking
• B.Social Engineering
• C.Eavesdropping
• D.Tailgating