Question 1

What is one of the advantages of using both symmetric and asymmetric cryptography in SSL/TLS?

Options :

A : Symmetric algorithms such as AES provide a failsafe when asymmetric methods fail.

B : Asymmetric cryptography is computationally expensive in comparison. However, it is well-suited to securely negotiate keys for use with symmetric cryptography.

C : Symmetric encryption allows the server to securely transmit the session keys out-of-band.

D : Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead

Answer: D

Question 2

Mr. Omkar performed tool-based vulnerability assessment and found two vulnerabilities. During analysis, he found that these issues are not true vulnerabilities. What will you call these issues?

Options :

A : False positives

B : True negatives

C : True positives

D : False negatives

Answer: A

Question 3

There have been concerns in your network that the wireless network component is not sufficiently secure. You perform a vulnerability scan of the wireless network and find that it is using an old encryption protocol that was designed to mimic wired encryption, what encryption protocol is being used?

Options :

A : WEP

B : RADIUS

C : WPA

D : WPA3

Answer: A

Question 4

You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible Intrusion Detection System. What is the best approach?

Options :

A : Use Alternate Data Streams to hide the outgoing packets from this server.

B : Use HTTP so that all traffic can be routed vis a browser, thus evading the internal Intrusion Detection Systems.

C : Install Cryptcat and encrypt outgoing packets from this server.

D : Install and use Telnet to encrypt all outgoing traffic from this server.

Answer: C

Question 5

While testing a web application in development, you notice that the web server does not properly ignore the “dot dot slash” (../) character string and instead returns the file listing of a folder structure of the server. What kind of attack is possible in this scenario?

Options :

A : Cross-site scripting

B : Denial of service

C : SQL injection

D : Directory traversal

Answer: D

Free 312-50v13 Mock Exam – Practice Online Confidently

Buying Options: