312-49v9 Free Practice Test

- (Topic 3)
You are carrying out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that accesses your product inventory in a database. You come across a web security site that recommends inputting the following code into a search field on web pages to check for vulnerabilities: When you type this and click on search, you receive a pop-up window that says:
"This is a test." What is the result of this test?

1. A. Your website is vulnerable to SQL injection
2. B. Your website is vulnerable to CSS
3. C. Your website is vulnerable to web bugs
4. D. Your website is not vulnerable

Correct Answer: B

- (Topic 3)
Jones had been trying to penetrate a remote production system for the past two weeks. This time however, he is able to get into the system. He was able to use the system for a period of three weeks. However law enforcement agencies were recording his every activity and this was later presented as evidence. The organization had used a virtual environment to trap Jones. What is a virtual environment?

1. A. A system using Trojaned commands
2. B. A honeypot that traps hackers
3. C. An environment set up after the user logs in
4. D. An environment set up before an user logs in

Correct Answer: B

- (Topic 1)
Computer security logs contain information about the events occurring within an organization's systems and networks. Application and Web server log files are useful in detecting web attacks. The source, nature, and time of the attack can be determined by ____ of the compromised system.

1. A. Analyzing log files
2. B. Analyzing SAM file
3. C. Analyzing rainbow tables
4. D. Analyzing hard disk boot records

Correct Answer: A

- (Topic 3)
George is performing security analysis for Hammond and Sons LLC. He is testing security vulnerabilities of their wireless network. He plans on remaining as "stealthy" as possible during the scan. Why would a scanner like Nessus is not recommended in this situation?

1. A. Nessus cannot perform wireless testing
2. B. Nessus is too loud
3. C. There are no ways of performing a "stealthy" wireless scan
4. D. Nessus is not a network scanner

Correct Answer: B

- (Topic 1)
What is the "Best Evidence Rule"?

1. A. It states that the court only allows the original evidence of a document, photograph, or recording at the trial rather than a copy
2. B. It contains system time, logged-on user(s), open files, network information, process information, process-to-port mapping, process memory, clipboard contents, service/driverinformation, and command history
3. C. It contains hidden files, slack space, swap file, index.dat files, unallocated clusters, unused partitions, hidden partitions, registry settings, and event logs
4. D. It contains information such as open network connection, user logout, programs that reside in memory, and cache data

Correct Answer: A