Mile2 MK0-201 Online Practice Questions and Exam Preparation

Mile2 MK0-201 Online Questions & Answers

• Question 231:

  Looking at the SOA records presented below,how long will the secondary server wait before it reattempts to synchronize with the primary server if it was not able to do so when it reached its refresh time of 2 days as presented in the SOA below?

  A. 15 minutes
  B. 10 minutes
  C. It will never retry and will wait another two days
  D. 900 minutes
  A. 15 minutes

• Question 232:

  A malicious hacker has been trying to penetrate TestKing.com from an external network location.He has tried every trick in his bag but still did not succeed. From the choice presented below,what type of logical attempt is he most likely to attempt next?

  A. Elevation of privileges
  B. Pilfering of data
  C. Denial of service
  D. Installation of a back door
  C. Denial of service

• Question 233:

  An administrator has just completed the installation of Nessus on a Linux System that will only have physical space for the server and no monitor.The administrator was told that Nessus has to be run when performing assessments from the system front end you installed Nessus on.

  A. True
  B. False
  B. False

• Question 234:

  Why are SYN port scans not as stealthy as what they originally were several years ago?Choose two.

  A. Many firewall rulesets detect and block SYN scans
  B. IDS systems look for SYN flag packets due to the proliferation of SYN flood-based denial of service attacks
  C. RFC 3502 has redefined the TCP three-way handshake thus changing how SYN flags are used
  D. The Internet-backbone routers all block SYN flag packets according to new RFC 3705
  A. Many firewall rulesets detect and block SYN scans
  B. IDS systems look for SYN flag packets due to the proliferation of SYN flood-based denial of service attacks

• Question 235:

  What are some of the weaknesses that make LAN Manager Hashes much easier to crack by an attacker? (Select all that apply)

  A. The 14 character password is split in two
  B. The password is converted to Uppercase
  C. The hash value is encrypted using MD5
  D. The hash value is encrypted with AES
  A. The 14 character password is split in two
  B. The password is converted to Uppercase

• Question 236:

  You are the security administrator of TestKing.com Inc.

  You have noticed that one of your users has installed a tool named KerbCrack as well as another tool named KerbSniff on his machine withou your authroization.

  The company is making use of active directory to store its users database.

  What would these two tools be used for?

  A. To attempt sniffing passwords off the network and then crack them
  B. To capture Kerberos packets and then attempt a brute force attack
  C. To connect to encrypted peer to peer networks
  D. To administer the Kerberos portion of Active Directory
  B. To capture Kerberos packets and then attempt a brute force attack

• Question 237:

  When a digital certificate has been revoked before its expiry date,how will the Certification Authority (CA) that issued the certificate inform other CAs that the specific certificate is no longer valid.

  A. By posting it on the CA web site
  B. By sending an email message to the other CAs
  C. By posting it on the certificate revocation list
  D. By posting it on the certificate expiry list
  C. By posting it on the certificate revocation list

• Question 238:

  An attacker is sending packets with no flag set.This is also known as doing a NULL scan.Usually,operating system networking stacks will respond with a RST packe,however,some operating systems do not conform to this behavior and respond in appropriately. Such behavior could allow for the identification of the remote OS being used.Which of the following would be one of the Operating systems that responds differently?

  A. Solaris
  B. Linux
  C. Windows
  D. HP-UX
  C. Windows

• Question 239:

  There are different types of access control that can be used within a company.Logical security will be directly affected depending on the type that you select. Which of the following access control tyeps would be best to assign permissions according to the job an employee has within a company?

  A. Rule Based Access Control
  B. Discretionary Access Control
  C. Role Base Access Control
  D. Task Based Access Control
  C. Role Base Access Control

• Question 240:

  In order to idnetify a unique record within a database what would you use?

  A. A foreign key
  B. A primary key
  C. A view
  D. A unique key
  B. A primary key