312-50v12 Free Practice Test

- (Exam Topic 2)
which of the following information security controls creates an appealing isolated environment for hackers to prevent them from compromising critical targets while simultaneously gathering information about the hacker?

1. A. intrusion detection system
2. B. Honeypot
3. C. BotnetD Firewall

Correct Answer: B
A honeypot may be a trap that an IT pro lays for a malicious hacker, hoping that they will interact with it during a way that gives useful intelligence. It’s one among the oldest security measures in IT, but beware: luring hackers onto your network, even on an isolated system, are often a dangerous game.honeypot may be a good starting place: “A honeypot may be a computer or computing system intended to mimic likely targets of cyberattacks.” Often a honeypot are going to be deliberately configured with known vulnerabilities in situation to form a more tempting or obvious target for attackers. A honeypot won’t contain production data or participate in legitimate traffic on your network — that’s how you’ll tell anything happening within it’s a results of an attack. If someone’s stopping by, they’re up to no good.That definition covers a various array of systems, from bare-bones virtual machines that only offer a couple of vulnerable systems to ornately constructed fake networks spanning multiple servers. and therefore the goals of these who build honeypots can vary widely also , starting from defense thorough to academic research. additionally , there’s now an entire marketing category of deception technology that, while not meeting the strict definition of a honeypot, is certainly within the same family. But we’ll get thereto during a moment.honeypots aim to permit close analysis of how hackers do their dirty work. The team controlling the honeypot can watch the techniques hackers use to infiltrate systems, escalate privileges, and otherwise run amok through target networks. These sorts of honeypots are found out by security companies, academics, and government agencies looking to look at the threat landscape. Their creators could also be curious about learning what kind of attacks are out there, getting details on how specific sorts of attacks work, or maybe trying to lure a specific hackers within the hopes of tracing the attack back to its source. These systems are often inbuilt fully isolated lab environments, which ensures that any breaches don’t end in non-honeypot machines falling prey to attacks.Production honeypots, on the opposite hand, are usually deployed in proximity to some organization’s production infrastructure, though measures are taken to isolate it the maximum amount as possible. These honeypots often serve both as bait to distract hackers who could also be trying to interrupt into that organization’s network, keeping them faraway from valuable data or services; they will also function a canary within the coalpit , indicating that attacks are underway and are a minimum of partially succeeding.

- (Exam Topic 1)
An attacker with access to the inside network of a small company launches a successful STP manipulation attack. What will he do next?

1. A. He will create a SPAN entry on the spoofed root bridge and redirect traffic to his computer.
2. B. He will activate OSPF on the spoofed root bridge.
3. C. He will repeat this action so that it escalates to a DoS attack.
4. D. He will repeat the same attack against all L2 switches of the network.

Correct Answer: A

- (Exam Topic 1)
What is a “Collision attack” in cryptography?

1. A. Collision attacks try to get the public key
2. B. Collision attacks try to break the hash into three parts to get the plaintext value
3. C. Collision attacks try to break the hash into two parts, with the same bytes in each part to get the private key
4. D. Collision attacks try to find two inputs producing the same hash

Correct Answer: D

- (Exam Topic 2)
Which of the following steps for risk assessment methodology refers to vulnerability identification?

1. A. Determines if any flaws exist in systems, policies, or procedures
2. B. Assigns values to risk probabilities; Impact values.
3. C. Determines risk probability that vulnerability will be exploited (Hig
4. D. Medium, Low)
5. E. Identifies sources of harm to an IT syste
6. F. (Natural, Huma
7. G. Environmental)

Correct Answer: C

- (Exam Topic 1)
Todd has been asked by the security officer to purchase a counter-based authentication system. Which of the following best describes this type of system?

1. A. A biometric system that bases authentication decisions on behavioral attributes.
2. B. A biometric system that bases authentication decisions on physical attributes.
3. C. An authentication system that creates one-time passwords that are encrypted with secret keys.
4. D. An authentication system that uses passphrases that are converted into virtual passwords.

Correct Answer: C