무료 온라인 액세스 ECCouncil.312-50v13.v2025-09-09.q347 모의 시험 (Page 42)

312-50v13 문제 201

A sophisticated attacker targets your web server with the intent to execute a Denial of Service (DoS) attack.
His strategy involves a unique mixture of TCP SYN, UDP, and ICMP floods, using 'r' packets per second.
Your server, reinforced with advanced security measures, can handle 'h' packets per second before it starts showing signs of strain. If 'r' surpasses 'h', it overwhelms the server, causing it to become unresponsive. In a peculiar pattern, the attacker selects 'r' as a composite number and 'h' as a prime number, making the attack detection more challenging. Considering 'r=2010' and different values for 'h', which of the following scenarios would potentially cause the server to falter?

A. h=1999 (prime): Despite the attacker's packet flood, the server can handle these requests, remaining responsive

B. h=2003 (prime): The server can manage more packets than the attacker is sending, hence it stays operational

C. h=1993 (prime): Despite being less than 'r', the server's prime number capacity keeps it barely operational, but the risk of falling is imminent

D. h=1987 (prime): The attacker's packet rate exceeds the server's capacity, causing potential unresponsiveness

정답: D

A Denial of Service (DoS) attack is a type of cyberattack that aims to make a machine or network resource unavailable to its intended users by flooding it with traffic or requests that consume its resources. A TCP SYN flood attack is a type of DoS attack that exploits the TCP handshake process by sending a large number of SYN requests to the target server, without completing the connection. A UDP flood attack is a type of DoS attack that sends a large number of UDP packets to random ports on the target server, forcing it to check for the application listening at that port and reply with an ICMP packet. An ICMP flood attack is a type of DoS attack that sends a large number of ICMP packets, such as ping requests, to the target server, overwhelming its ICMP processing capacity.
The attacker's strategy involves a unique mixture of TCP SYN, UDP, and ICMP floods, using 'r' packets per second. The server can handle 'h' packets per second before it starts showing signs of strain. If 'r' surpasses
'h', it overwhelms the server, causing it to become unresponsive. The attacker selects 'r' as a composite number and 'h' as a prime number, making the attack detection more challenging. This is because prime numbers are less predictable and more difficult to factorize than composite numbers, which may hinder the analysis of the attack pattern.
Considering 'r=2010' and different values for 'h', the scenario that would potentially cause the server to falter is the one where 'h=1987' (prime). This is because 'r' is greater than 'h' by 23 packets per second, which means the server cannot handle the incoming traffic and will eventually run out of resources. The other scenarios would not cause the server to falter, as 'h' is either greater than or very close to 'r', which means the server can either manage or barely cope with the incoming traffic. References:
* What is a denial-of-service (DoS) attack? | Cloudflare
* Denial-of-Service (DoS) Attack: Examples and Common Targets - Investopedia
* DDoS Attack Types: Glossary of Terms
* What is a Denial of Service (DoS) Attack? | Webopedia

312-50v13 문제 202

A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed.
Which security policy must the security analyst check to see if dial-out modems are allowed?

A. Firewall-management policy

B. Acceptable-use policy

C. Permissive policy

D. Remote-access policy

312-50v13 문제 203

You are the chief cybersecurity officer at CloudSecure Inc., and your team is responsible for securing a cloudbased application that handles sensitive customer data. To ensure that the data is protected from breaches, you have decided to implement encryption for both data-at-rest and data-in-transit. The development team suggests using SSL/TLS for securing data in transit. However, you want to also implement a mechanism to detect if the data was tampered with during transmission. Which of the following should you propose?

A. Implement IPsec in addition to SSL/TLS.

B. Qswitch to using SSH for data transmission.

C. Use the cloud service provider's built-in encryption services.

D. Encrypt data using the AES algorithm before transmission.

312-50v13 문제 204

아래에 제시된 정의 중 은밀한 채널을 가장 잘 설명하는 것은 무엇입니까?

A. 잘 알려지지 않은 포트를 사용하는 서버 프로그램입니다.

B. 의도하지 않은 방식으로 프로토콜을 사용하는 것.

C. 통신 링크에서 발생하는 멀티플렉싱입니다.

D. WEP에서 사용하는 취약한 채널 중 하나이므로 보안이 취약합니다.

312-50v13 문제 205

This TCP flag instructs the sending system to transmit all buffered data immediately.

A. SYN

B. RST

C. PSH

D. URG

E. FIN

최근 업로드: 102Juniper.JN0-664.v2025-09-11.q101; 103IAPP.CIPM.v2025-09-11.q242; 110Oracle.1Z0-1160-1.v2025-09-10.q18; 107Oracle.1z0-1054-25.v2025-09-10.q50; 104Cisco.300-710.v2025-09-10.q297; 118VMware.2V0-41.24.v2025-09-10.q104; 156Avaya.78201X.v2025-09-09.q135; 142CompTIA.220-1202.v2025-09-09.q57; 182CheckPoint.156-215.81.v2025-09-09.q391; 222ECCouncil.312-50v13.v2025-09-09.q347