Question 1

The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the

host

10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic. After he

applied his ACL configuration in the router, nobody can access the ftp, and the permitted hosts cannot access

the Internet. According to the next configuration, what is happening in the network?

access-list 102 deny tcp any any

access-list 104 permit udp host 10.0.0.3 any

access-list 110 permit tcp host 10.0.0.2 eq www any

access-list 108 permit tcp any eq ftp any

Options :

A : The ACL 104 needs to be first because is UDP

B : The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router

C : The ACL for FTP must be before the ACL 110

D : The ACL 110 needs to be changed to port 80

Answer: B

Question 2

in this attack, an adversary tricks a victim into reinstalling an already-in-use key. This is achieved by manipulating and replaying cryptographic handshake messages. When the victim reinstall the key, associated parameters such as the incremental transmit packet number and receive packet number are reset to their initial values. What is this attack called?

Options :

A : Chop chop attack

B : KRACK

C : Evil twin

D : Wardriving

Answer: B

Question 3

Daniel Is a professional hacker who Is attempting to perform an SQL injection attack on a target website. www.movlescope.com. During this process, he encountered an IDS that detects SQL Injection attempts based on predefined signatures. To evade any comparison statement, he attempted placing characters such as ‘'or '1'='1" In any bask injection statement such as "or 1=1." Identify the evasion technique used by Daniel in the above scenario.

Options :

A : Null byte

B : IP fragmentation

C : Char encoding

D : Variation

Answer: D

Question 4

Options :

A : Browser Hacking

B : Cross-Site Scripting

C : SQL Injection

D : Cross-Site Request Forgery

Answer: D

Question 5

Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?

Options :

A : Data-driven firewall

B : Packet firewall

C : Web application firewall

D : Stateful firewall

Answer: C

Confidently Practice Online with Free 312-50 Exam Cram

Buying Options: