312-50v11 Exam Question 251

You are a Network Security Officer. You have two machines. The first machine (192.168.0.99) has snort installed, and the second machine (192.168.0.150) has kiwi syslog installed. You perform a syn scan in your network, and you notice that kiwi syslog is not receiving the alert message from snort. You decide to run wireshark in the snort machine to check if the messages are going to the kiwi syslog machine. What Wireshark filter will show the connections from the snort machine to kiwi syslog machine?
  • 312-50v11 Exam Question 252

    Which of the following represents the initial two commands that an IRC client sends to join an IRC network?
  • 312-50v11 Exam Question 253

    You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line.
    Which command would you use?
  • 312-50v11 Exam Question 254

    A newly joined employee, Janet, has been allocated an existing system used by a previous employee. Before issuing the system to Janet, it was assessed by Martin, the administrator. Martin found that there were possibilities of compromise through user directories, registries, and other system parameters. He also identified vulnerabilities such as native configuration tables, incorrect registry or file permissions, and software configuration errors.
    What is the type of vulnerability assessment performed by Martin?
  • 312-50v11 Exam Question 255

    env x='(){ :;};echo exploit' bash -c 'cat/etc/passwd'
    What is the Shellshock bash vulnerability attempting to do on a vulnerable Linux host?