Online Access Free 412-79 Exam Questions

An automated electronic mail message from a mail system which indicates that the user does not exist on that server is called as?

• A.SMTP Queue Bouncing
• B.SMTP Mail Bouncing
• C.SMTP Message Bouncing
• D.SMTP Server Bouncing

Which vulnerability assessment phase describes the scope of the assessment, identifies and ranks the critical assets, and creates proper information protection procedures such as effective planning, scheduling, coordination, and logistics?

• A.Threat-Assessment Phase
• B.Pre-Assessment Phase
• C.Assessment Phase
• D.Post-Assessment Phase

Today, most organizations would agree that their most valuable IT assets reside within applications and databases. Most would probably also agree that these are areas that have the weakest levels of security, thus making them the prime target for malicious activity from system administrators, DBAs, contractors, consultants, partners, and customers.

Which of the following flaws refers to an application using poorly written encryption code to securely encrypt and store sensitive data in the database and allows an attacker to steal or modify weakly protected data such as credit card numbers, SSNs, and other authentication credentials?

• A.SSI injection attack
• B.Insecure cryptographic storage attack
• C.Man-in-the-Middle attack
• D.Hidden field manipulation attack

James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network. What type of DoS attack is James testing against his network?

• A.Trinoo
• B.Smurf
• C.Fraggle
• D.SYN flood

HTTP protocol specifies that arbitrary binary characters can be passed within the URL by using %xx notation, where 'xx' is the

• A.Decimal value of the character
• B.ASCII value of the character
• C.Hex value of the character
• D.Binary value of the character