312-50v10 Exam Question 146

The following is part of a log file taken from the machine on the network with the IP address of
192.168.0.110:

What type of activity has been logged?
  • 312-50v10 Exam Question 147

    When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true?
  • 312-50v10 Exam Question 148

    In cryptanalysis and computer security, 'pass the hash' is a hacking technique that allows an attacker to authenticate to a remote server/service by using the underlying NTLM and/or LanMan hash of a user's password, instead of requiring the associated plaintext password as is normally the case.
    Metasploit Framework has a module for this technique: psexec. The psexec module is often used by penetration testers to obtain access to a given system that you already know the credentials for. It was written by sysinternals and has been integrated within the framework. Often as penetration testers, successfully gain access to a system through some exploit, use meterpreter to grab the passwords or other methods like fgdump, pwdump, or cachedump and then utilize rainbowtables to crack those hash values.
    Which of the following is true hash type and sort order that is using in the psexec module's 'smbpass'?
  • 312-50v10 Exam Question 149

    (Note: the student is being tested on concepts learnt during passive OS fingerprinting, basic TCP/IP connection concepts and the ability to read packet signatures from a sniff dump.). Snort has been used to capture packets on the network. On studying the packets, the penetration tester finds it to be abnormal. If you were the penetration tester, why would you find this abnormal?
    What is odd about this attack? Choose the best answer.
  • 312-50v10 Exam Question 150

    Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it begins to close.
    What just happened?