412-79 Practice Test

Snort, an open source network-based intrusion detection sensor, is the most widely
installed NIDS in the world. It can be configured to run in the four modes. Which one of the
following modes reads the packets off the network and displays them in a continuous
stream on the console (screen)?

A.

Packet Sniffer Mode

B.

Packet Logger Mode

C.

Network Intrusion Detection System Mode

D.

Inline Mode

Which of the following will not handle routing protocols properly?

A.

Internet-router-firewall-net architecture”

B.

Internet-firewall-router-net architecture”

C.

Internet-firewall -net architecture”

D.

Internet-firewall/router(edge device)-net architecture”

A pen tester has extracted a database name by using a blind SQL injection. Now he begins
to test the tableinside the database using the below query and finds the table:
http://juggyboy.com/page.aspx?id=1; IF (LEN(SELECT TOP 1 NAME from sysobjects
where xtype='U')=3) WAITFOR DELAY '00:00:10'-
http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME
from sysobjects where xtype=char(85)),1,1)))=101) WAITFOR DELAY '00:00:10'-
http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME
from sysobjects where xtype=char(85)),2,1)))=109) WAITFOR DELAY '00:00:10'-
http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME
from sysobjects where xtype=char(85)),3,1)))=112) WAITFOR DELAY '00:00:10'—
What is the table name?

A.

CTS

B.

QRT

C.

EMP

D.

ABC

What is a goal of the penetration testing report?

A.

The penetration testing report helps you comply with local laws and regulations related
to environmental conditions in the organization.
B. The penetration testing report allows you to sleep better at night thinking your
organization is protected

B.

The pen testing report helps executive management to make decisions on implementing
security controls in the organization and helps the security team implement security
controls and patch any flaws discovered during testing.

C.

The penetration testing report allows you to increase sales performance by effectively
communicating with the internal security team.

D.

The penetration testing report allows you to increase sales performance by effectively
communicating with the internal security team.

Which of the following shields Internet users from artificial DNS data, such as a deceptive
or mischievous address instead of the genuine address that was requested?

A.

DNSSEC

B.

Firewall

C.

Packet filtering

D.

IPSec