312-50v9 Sample Questions & Answers

If executives are found liable for not properly protecting their company's assets and information systems, what type of law would apply in this situation?

By using a smart card and pin, you are using a two-factor authentication that satisfies

An engineer is learning to write exploits in C++ and is using the exploit tool Backtrack. The engineer wants to compile the newest C++ exploit and name it calc.exe.

Which command would the engineer use to accomplish this?

What information should an IT system analysis provide to the risk assessor?

Which results will be returned with the following Google search query?
site:target.com -site:Marketing.target.com accounting

A penetration test was done at a company. After the test, a report was written and given to the company's IT authorities. A section from the report is shown below:

• Access List should be written between VLANs.
• Port security should be enabled for the intranet.
• A security solution which filters data packets should be set between intranet (LAN) and DMZ.
• A WAF should be used in front of the web applications.

According to the section from the report, which of the following choice is true?

A certified ethical hacker (CEH) completed a penetration test of the main headquarters of a company almost two months ago, but has yet to get paid. The customer is suffering from financial problems, and the CEH is worried that the company will go out of business and end up not paying.

What actions should the CEH take?

Which protocol and port number might be needed in order to send log messages to a log analysis tool that resides behind a firewall?

If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP.

Which other option could the tester use to get a response from a host using TCP?

A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firm's public facing web servers. The engineer decides to start by using netcat to port 80.

The engineer receives the output below.

Which of the following is an example of what the engineer performed?