Online Access Free 312-50v8 Exam Questions

One of the most common and the best way of cracking RSA encryption is to begin to derive the two prime numbers, which are used in the RSA PKI mathematical process. If the two numbers p and q are discovered through a _____________ process, then the private key can be derived.

• A.Hashing
• B.Factorization
• C.Prime Detection
• D.Brute-forcing

When a normal TCP connection starts, a destination host receives a SYN (synchronize/start) packet from a source host and sends back a SYN/ACK (synchronize acknowledge). The destination host must then hear an ACK (acknowledge) of the SYN/ACK before the connection is established. This is referred to as the "TCP three-way handshake." While waiting for the ACK to the SYN ACK, a connection queue of finite size on the destination host keeps track of connections waiting to be completed. This queue typically empties quickly since the ACK is expected to arrive a few milliseconds after the SYN ACK. How would an attacker exploit this design by launching TCP SYN attack?

• A.Attacker floods TCP SYN packets with random source addresses towards a victim host
• B.Attacker generates TCP RST packets with random source addresses towards a victim host
• C.Attacker generates TCP SYN packets with random destination addresses towards a victim host
• D.Attacker generates TCP ACK packets with random source addresses towards a victim host

The programmers on your team are analyzing the free, open source software being used to run FTP services on a server in your organization. They notice that there is excessive number of functions in the source code that might lead to buffer overflow. These C++ functions do not check bounds. Identify the line in the source code that might lead to buffer overflow?

• A.1717
• B.3535
• C.3232
• D.2020
• E.99

Bob has a good understanding of cryptography, having worked with it for many years. Cryptography is used to secure data from specific threats, but it does not secure the application from coding errors. It can provide data privacy; integrity and enable strong authentication but it cannot mitigate programming errors. What is a good example of a programming error that Bob can use to explain to the management how encryption will not address all their security concerns?

• A.Bob can explain that using a weak key management technique is a form of programming error
• B.Bob can explain that using passwords to derive cryptographic keys is a form of a programming error
• C.Bob can explain that a random number generator can be used to derive cryptographic keys but it uses a weak seed value and this is a form of a programming error
• D.Bob can explain that a buffer overflow is an example of programming error and it is a common mistake associated with poor programming technique

Which Steganography technique uses Whitespace to hide secret messages?

• A.beetle
• B.cat
• C.magnet
• D.snow