312-50 Free Practice Test

- (Topic 23)
What will the following command produce on a website's login page if executed successfully? SELECT email, passwd, login_id, full_name FROM members WHERE email
= 'someone@somewhere.com'; DROP TABLE members; --'

1. A. This code will insert the someone@somewhere.com email address into the members table.
2. B. This command will delete the entire members table.
3. C. It retrieves the password for the first user in the members table.
4. D. This command will not produce anything since the syntax is incorrect.

Correct Answer: B

- (Topic 4)
John is a keen administrator, and has followed all of the best practices as he could
find on securing his Windows Server. He has renamed the Administrator account to a new name that he is sure cannot be easily guessed. However, there are people who already attempt to compromise his newly renamed administrator account.
How is it possible for a remote attacker to decipher the name of the administrator account if it has been renamed?

1. A. The attacker used the user2sid program.
2. B. The attacker used the sid2user program.
3. C. The attacker used nmap with the –V switch.
4. D. The attacker guessed the new name.

Correct Answer: B
User2sid.exe can retrieve a SID from the SAM (Security Accounts Manager) from the local or a remote machine Sid2user.exe can then be used to retrieve the names of all the user accounts and more. These utilities do not exploit a bug but call the functions LookupAccountName and LookupAccountSid respectively. What is more these can be called against a remote machine without providing logon credentials save those needed for a null session connection.

- (Topic 5)
Samuel is the network administrator of DataX communications Inc. He is trying to configure his firewall to block password brute force attempts on his network. He enables blocking the intruder’s IP address for a period of 24 hours time after more than three unsuccessful attempts. He is confident that this rule will secure his network hackers on the Internet.
But he still receives hundreds of thousands brute-force attempts generated from various IP addresses around the world. After some investigation he realizes that the intruders are using a proxy somewhere else on the Internet which has been scripted to enable the random usage of various proxies on each request so as not to get caught by the firewall use.
Later he adds another rule to his firewall and enables small sleep on the password attempt so that if the password is incorrect, it would take 45 seconds to return to the user to begin another attempt. Since an intruder may use multiple machines to brute force the password, he also throttles the number of connections that will be prepared to accept from a particular IP address. This action will slow the intruder’s attempts.
Samuel wants to completely block hackers brute force attempts on his network.
What are the alternatives to defending against possible brute-force password attacks on his site?

1. A. Enforce a password policy and use account lockouts after three wrong logon attempts even through this might lock out legit users
2. B. Enable the IDS to monitor the intrusion attempts and alert you by e-mail about the IP address of the intruder so that you can block them at the firewall manually
3. C. Enforce complex password policy on your network so that passwords are more difficult to brute force
4. D. You can’t completely block the intruders attempt if they constantly switch proxies

Correct Answer: D
Without knowing from where the next attack will come there is no way of proactively block the attack. This is becoming a increasing problem with the growth of large bot nets using ordinary workstations and home computers in large numbers.

- (Topic 18)
Peter is a Linux network admin. As a knowledgeable security consultant, he turns to you to look for help on a firewall. He wants to use Linux as his firewall and use the latest freely available version that is offered. What do you recommend?
Select the best answer.

1. A. Ipchains
2. B. Iptables
3. C. Checkpoint FW for Linux
4. D. Ipfwadm

Correct Answer: B

Ipchains was improved over ipfwadm with its chaining mechanism so that it can have multiple rulesets. However, it isn't the latest version of a free Linux firewall. Iptables replaced ipchains and is the latest of the free Linux firewall tools. Any Checkpoint firewall is not going to meet Jason's desire to have a free firewall. Ipfwadm is used to build Linux firewall rules prior to 2.2.0. It is a outdated version.

- (Topic 1)
What does the term “Ethical Hacking” mean?

1. A. Someone who is hacking for ethical reasons.
2. B. Someone who is using his/her skills for ethical reasons.
3. C. Someone who is using his/her skills for defensive purposes.
4. D. Someone who is using his/her skills for offensive purposes.

Correct Answer: C
Ethical hacking is only about defending your self or your employer against malicious persons by using the same techniques and skills.