312-50 Free Practice Test

- (Topic 23)
You establish a new Web browser connection to Google. Since a 3-way handshake is required for any TCP connection, the following actions will take place.

✑ DNS query is sent to the DNS server to resolve www.google.com
✑ DNS server replies with the IP address for Google?
✑ SYN packet is sent to Google.
✑ Google sends back a SYN/ACK packet
✑ Your computer completes the handshake by sending an ACK
✑ The connection is established and the transfer of data commences
Which of the following packets represent completion of the 3-way handshake?

1. A. 4th packet
2. B. 3rdpacket
3. C. 6th packet
4. D. 5th packet

Correct Answer: D

- (Topic 3)
Which FTP transfer mode is required for FTP bounce attack?

1. A. Active Mode
2. B. Passive Mode
3. C. User Mode
4. D. Anonymous Mode

Correct Answer: B
FTP bounce attack needs the server the support passive connections and the client program needs to use PORT command instead of the PASV command.

- (Topic 19)
While scanning a network you observe that all of the web servers in the DMZ are responding to ACK packets on port 80.
What can you infer from this observation?

1. A. They are using Windows based web servers.
2. B. They are using UNIX based web servers.
3. C. They are not using an intrusion detection system.
4. D. They are not using a stateful inspection firewall.

Correct Answer: D
If they used a stateful inspection firewall this firewall would know if there has been a SYN-ACK before the ACK.

- (Topic 23)
Kevin is an IT security analyst working for Emerson Time Makers, a watch manufacturing company in Miami. Kevin and his girlfriend Katy recently broke up after a big fight. Kevin believes that she was seeing another person. Kevin, who has an online email account that he uses for most of his mail, knows that Katy has an account with that same company. Kevin logs into his email account online and gets the following URL after successfully logged in: http://www.youremailhere.com/mail.asp?mailbox=Kevin&Smith=121" Kevin changes the URL to: http://www.youremailhere.com/mail.asp?mailbox=Katy&Sanchez=121" Kevin is trying to access her email account to see if he can find out any information. What is Kevin attempting here to gain access to Katy's mailbox?

1. A. This type of attempt is called URL obfuscation when someone manually changes a URL to try and gain unauthorized access
2. B. By changing the mailbox's name in the URL, Kevin is attempting directory transversal
3. C. Kevin is trying to utilize query string manipulation to gain access to her email account
4. D. He is attempting a path-string attack to gain access to her mailbox

Correct Answer: C

- (Topic 4)
Which of the following tools can be used to perform a zone transfer?

1. A. NSLookup
2. B. Finger
3. C. Dig
4. D. Sam Spade
5. E. Host
6. F. Netcat
7. G. Neotrace

Correct Answer: ACDE
There are a number of tools that can be used to perform a zone transfer. Some of these include: NSLookup, Host, Dig, and Sam Spade.