Online Access Free 312-50 Exam Questions

Mr. Omkar performed tool-based vulnerability assessment and found two vulnerabilities. During analysis, he found that these issues are not true vulnerabilities.
What will you call these issues?

• A.False negatives
• B.True negatives
• C.False positives
• D.True positives

Vlady works in a fishing company where the majority of the employees have very little understanding of IT let alone IT Security. Several information security issues that Vlady often found includes, employees sharing password, writing his/her password on a post it note and stick it to his/her desk, leaving the computer unlocked, didn't log out from emails or other social media accounts, and etc.
After discussing with his boss, Vlady decided to make some changes to improve the security environment in his company. The first thing that Vlady wanted to do is to make the employees understand the importance of keeping confidential information, such as password, a secret and they should not share it with other persons.
Which of the following steps should be the first thing that Vlady should do to make the employees in his company understand to importance of keeping confidential information a secret?

• A.Information security awareness training
• B.Conducting a one to one discussion with the other employees about the importance of information security
• C.Developing a strict information security policy
• D.Warning to those who write password on a post it note and put it on his/her desk

This form of encryption algorithm is asymmetric key block cipher that is characterized by a 128-bit block size, and its key size can be up to 256 bits. Which among the following is this encryption algorithm?

• A.Blowfish encryption algorithm
• B.IDEA
• C.Twofish encryption algorithm
• D.HMAC encryption algorithm

Which definition among those given below best describes a covert channel?

• A.It is one of the weak channels used by WEP which makes it insecure
• B.A server program using a port that is not well known.
• C.It is the multiplexing taking place on a communication link.
• D.Making use of a protocol in a way it is not intended to be used.

What is one of the advantages of using both symmetric and asymmetric cryptography in SSL/TLS?

• A.Symmetric encryption allows the server to securely transmit the session keys out-of-band.
• B.Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.
• C.Asymmetric cryptography is computationally expensive in comparison. However, it is well-suited to securely negotiate keys for use with symmetric cryptography.
• D.Symmetric algorithms such as AES provide a failsafe when asymmetric methods fail.