312-50 Exam Dumps - Certified Ethical Hacker Exam

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
Next
Last >>

Question # 9

A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

Reject all invalid email received via SMTP.

Allow full DNS zone transfers.

Remove A records for internal hosts.

Enable null session pipes.

Full Access

Question # 10

Which definition among those given below best describes a covert channel?

A server program using a port that is not well known.

Making use of a protocol in a way it is not intended to be used.

It is the multiplexing taking place on a communication link.

It is one of the weak channels used by WEP which makes it insecure

Full Access

Question # 11

How can a policy help improve an employee's security awareness?

By implementing written security procedures, enabling employee security training, and promoting the benefits of security

By using informal networks of communication, establishing secret passing procedures, and immediately terminating employees

By sharing security secrets with employees, enabling employees to share secrets, and establishing a consultative help line

By decreasing an employee's vacation time, addressing ad-hoc employment clauses, and ensuring that managers know employee strengths

Full Access

Question # 12

Which of the following examples best represents a logical or technical control?

Security tokens

Heating and air conditioning

Smoke and fire alarms

Corporate security policy

Full Access

Question # 13

While conducting a penetration test, the tester determines that there is a firewall between the tester's machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model. Which type of firewall is the tester trying to traverse?

Packet filtering firewall

Application-level firewall

Circuit-level gateway firewall

Stateful multilayer inspection firewall

Full Access

Question # 14

A newly discovered flaw in a software application would be considered which kind of security vulnerability?

Input validation flaw

HTTP header injection vulnerability

0-day vulnerability

Time-to-check to time-to-use flaw

Full Access