Free 312-50v10 sample questions

Correct answer: Tailgating

Tailgating is the practice of following an authorized person through a secured entrance without proper authorization. This occurs when an unauthorized individual gains physical access by closely following an employee through security doors or checkpoints. Reverse Social Engineering involves manipulating someone to contact the attacker, Piggybacking typically involves the authorized person being aware and allowing access, and "Announced" is not a recognized security breach type. Tailgating is a common physical security threat that organizations must address through security awareness training and access controls.

Correct answer: Keep some generation of off-line backup

Keeping offline backup generations is the most effective countermeasure against ransomware because the backups are not connected to the network and cannot be encrypted by ransomware. This allows organizations to restore data without paying the ransom, as the offline backups remain unaffected by the attack.

Correct answer: End of Line Comment

The double dash (--) at the end of the SQL query indicates an End of Line Comment attack. This technique comments out the rest of the original query, allowing the attacker to bypass authentication or other security checks by making the database ignore the remaining conditions in the WHERE clause.

Correct answer: Full Disk encryption

Full disk encryption is the best protection for confidential documents on a laptop that might be stolen. It encrypts the entire hard drive, making all data unreadable without the encryption key, even if the physical device is compromised. BIOS passwords and hidden folders can be easily bypassed by attackers with physical access.

Correct answer: Hosts

The hosts file contains hostname-to-IP address mappings that override DNS lookups. By modifying this file, an attacker can redirect traffic from legitimate sites like "www.MyPersonalBank.com" to malicious phishing sites by mapping the legitimate domain to a malicious IP address.

Correct answer: Can identify unknown attacks

Anomaly-based IDS systems can identify unknown attacks by establishing a baseline of normal network behavior and flagging deviations from this baseline. Unlike signature-based IDS that only detect known attack patterns, anomaly-based systems can detect zero-day attacks and novel attack techniques that have not been previously catalogued.

Correct answer: c:\compmgmt.msc

The command "compmgmt.msc" launches the Computer Management Console in Windows. The .msc extension indicates a Microsoft Management Console snap-in, and compmgmt is the specific snap-in for computer management functions including disk management, services, and system tools.

Correct answer: HIPAA

HIPAA (Health Insurance Portability and Accountability Act) requires the use of standard national employer identification numbers for healthcare transactions. This standardization helps ensure proper identification of healthcare entities in electronic transactions and maintains consistency across the healthcare industry.

Correct answer: Hexadecimal

Wireshark displays packet data in the packet bytes pane in hexadecimal format, with corresponding ASCII representation on the right. This hex format allows security professionals to analyze raw packet contents at the byte level, which is essential for protocol analysis and network forensics.

Correct answer: DNSSEC

DNSSEC (DNS Security Extensions) provides cryptographic authentication for DNS data, ensuring the integrity and authenticity of DNS responses. It uses digital signatures to verify that DNS responses have not been tampered with, effectively preventing DNS spoofing, cache poisoning, and man-in-the-middle attacks on DNS queries.