312-50v11 Free Practice Test

Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp’s lobby. He checks his current SID, which is S-1-5-21-1223352397-1872883824-861252104-501. What needs to happen before Matthew has full administrator access?

1. A. He must perform privilege escalation.
2. B. He needs to disable antivirus protection.
3. C. He needs to gain physical access.
4. D. He already has admin privileges, as shown by the “501” at the end of the SID.

Correct Answer: A

Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal?

1. A. har.txt
2. B. SAM file
3. C. wwwroot
4. D. Repair file

Correct Answer: B

You are tasked to perform a penetration test. While you are performing information gathering, you find an employee list in Google. You find the receptionist’s email, and you send her an email changing the source email to her boss’s email (boss@company). In this email, you ask for a pdf with information. She reads your email and sends back a pdf with links. You exchange the pdf links with your malicious links (these links contain malware) and send back the modified pdf, saying that the links don’t work. She reads your email, opens the links, and her machine gets infected. You now have access to the company network. What testing method did you use?

1. A. Social engineering
2. B. Piggybacking
3. C. Tailgating
4. D. Eavesdropping

Correct Answer: A

You have gained physical access to a Windows 2008 R2 server which has an accessible disc drive. When you attempt to boot the server and log in, you are unable to guess the password. In your toolkit, you have an Ubuntu 9.10 Linux LiveCD. Which Linux-based tool can change any user’s password or activate disabled Windows accounts?

1. A. John the Ripper
2. B. SET
3. C. CHNTPW
4. D. Cain & Abel

Correct Answer: C

A large mobile telephony and data network operator has a data center that houses network elements. These are essentially large computers running on Linux. The perimeter of the data center is secured with firewalls and IPS systems.
What is the best security policy concerning this setup?

1. A. Network elements must be hardened with user ids and strong password
2. B. Regular security tests and audits should be performed.
3. C. As long as the physical access to the network elements is restricted, there is no need for additional measures.
4. D. There is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.
5. E. The operator knows that attacks and down time are inevitable and should have a backup site.

Correct Answer: A