312-49v11 무료 덤프문제 온라인 액세스

James, a hacker, identifies a vulnerability in a website. To exploit the vulnerability, he visits the login page and notes down the session ID that is created. He appends this session ID to the login URL and shares the link with a victim. Once the victim logs into the website using the shared URL, James reloads the webpage (containing the URL with the session ID appended) and now, he can browse the active session of the victim. Which attack did James successfully execute?

• A.Cross Site Request Forgery
• B.Parameter Tampering
• C.Cookie Tampering
• D.Session Fixation Attack

A company's policy requires employees to perform file transfers using protocols which encrypt traffic. You suspect some employees are still performing file transfers using unencrypted protocols because the employees don't like changes. You have positioned a network sniffer to capture traffic from the laptops used by employees in the data ingest department. Using Wireshark to examine the captured traffic, which command can be used as a display filter to find unencrypted file transfers?

• A.tcp.port = 23
• B.tcp.port == 21 || tcp.port == 22
• C.tcp.port == 21
• D.tcp.port != 21

Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

• A.Use a system that has a dynamic addressing on the network
• B.Use a system that is not directly interacing with the router
• C.It doesn't matter as all replies are faked
• D.Use it on a system in an external DMZ in front of the firewall

Digital evidence validation involves using a hashing algorithm utility to create a binary or hexadecimal number that represents the uniqueness of a data set, such as a disk drive or file.
Which of the following hash algorithms produces a message digest that is 128 bits long?

• A.SHA-1
• B.CRC-32
• C.MD5
• D.SHA-512

You are a security analyst performing reconnaissance on a company you will be carrying out a penetration test for. You conduct a search for IT jobs on Dice.com and find the following information for an open position:
- 7+ years experience in Windows Server environment
- 5+ years experience in Exchange 2000/2003 environment
- Experience with Cisco Pix Firewall, Linksys 1376 router, Oracle 11i and MYOB v3.4.
Accounting software are required MCSA desired, MCSE, CEH preferred. No Unix/Linux Experience needed.
What is this information posted on the job website considered?

• A.Social engineering exploit
• B.Information vulnerability
• C.Trade secret
• D.Competitive exploit