SYS-501| 228 questions| with complete solutions

arp - s 192.168.1.1 00-3a-d1-fa-b1-06 CORRECT ANSWERS: A security administrator wants to implement a logon script that will prevent MITM attacks on the local LAN. Which of the following commands should the security administrator implement within the script to accomplish this task? A. arp - s 192.168.1.1 00-3a-d1-fa-b1-06 B. dig - .1.1 C. nmap - A - T4 192.168.1.1 D. tcpdump - lnv host 192.168.1.1 or either 00:3a:d1:fa:b1:06 To prevent duplicate values from being stored CORRECT ANSWERS: Which of the following is the BEST reason for salting a password hash before it is stored in a database? A. To prevent duplicate values from being stored B. To make the password retrieval process very slow C. To protect passwords from being saved in readable format D. To prevent users from using simple passwords for their access credentials Script kiddie CORRECT ANSWERS: An actor downloads and runs a program against a corporate login page. The program imports a list of usernames and passwords, looking for a successful attempt. Which of the following terms BEST describes the actor in this situation? A. Script kiddie B. Hacktivist C. Cryptologist D. Security auditor OpenID Connect CORRECT ANSWERS: An organization wants to utilize a common, Internet-based third-party provider for authorization and authentication. The provider uses a technology based on OAuth 2.0 to provide required services. To which of the following technologies is the provider referring? A. OpenID Connect B. SAML C. XACML D. LDAP Active reconnaissance CORRECT ANSWERS: A penetration tester harvests potential usernames from a social networking site. The penetration tester then uses social engineering to attempt to obtain associated pass