Latest 312-50v9 Exam Questions

Which of the following security operations is used for determining the attack surface of an
organization?

You work as a Security Analyst for a retail organization. In securing the company's
network, you set up a firewall and an IDS. However, hackers are able to attack the network.
After investigating, you discover that your IDS is not configured properly and therefore is
unable to trigger alarms when needed. What type of alert is the IDS giving?

A hacker has successfully infected an internet-facing server, which he will then use to send
junk mail, take part incoordinated attacks, or host junk email content.
Which sort of trojan infects this server?

Perspective clients wantto see sample reports from previous penetration tests.
What should you do next?

An Internet Service Provider (ISP) has a need to authenticate users connecting using
analog modems, digital Subscriber Line (DSL), wireless data services, and virtual Private
Networks (VPN) over a Frame Relay network.
Which AAA protocol is most likely able to handle this requirement?

Which of the following is one of the most effective ways to prevent Cross-site Scripting
(XSS) flaws in software applications?

While performing online banking using a web browser, a user receives an email that
contains alink to an interesting Web site. When the user clicks on the link, another web
browser session starts and displays a video of cats playing a piano. The next business day,
the user receives what looks like an email from his bank, indicating that his bank account
has been accessed from a foreign country. The email asks the user to call his bank and
verify the authorization of a funds transfer that took place.
What web browser-based security vulnerability was exploited to compromise the user?

When you are testing a web application, it is very useful to employ a prosy tool to save
every request and response.Nyou can manually test every request and analyze the
response to find vulnerabilities. You can test parameter and headers manually to get more
precise results than if using web vulnerability scanners.
What proxy tool will help you find web vulnerabilities?

You are performing information gathering for an important penetration test. You have found
pdf, doc, and images in your objective. You decide to extract metadata from these files and
analyze it.
What tool will help you with the task?

The “Black box testing” methodology enforces which kind of restriction?