Mike works as a Network Engineer for XYZ CORP. The company has a multi-platform network. Recently, the company faced lots of blended threat issues that lead to several drastic attacks. Mike has been assigned a project to manage the resources and services of the company through both Intranet and Internet to protect the company from these attacks. Mike needs a system that provides auto-discovering and network topology building features to allow him to keep an intuitive view of the IT infrastructure. What will Mike use to meet the requirement of the project?

• A. eBox
• B. EM7
• C. dopplerVUe
• D. David system

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

Every network device contains a unique built in Media Access Control (MAC) address, which is used to identify the authentic device to limit the network access. Which of the following addresses is a valid MAC address?

• A. A3-07-B9-E3-BC-F9
• B. 1011-0011-1010-1110-1100-0001
• C. F936.28A1.5BCD.DEFA
• D. 132.298.1.23

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

Which of the following methods is used to get a cookie from a client? Note: Here, request is a reference of type HttpServletRequest, and response is a reference of type HttpServletResponse.

• A. Cookie [] cookies = response.getCookie(String str)
• B. Cookie [] cookies = request.getCookie(String str)
• C. Cookie [] cookies = response.getCookies()
• D. Explanation:
  The getCookies() method of the HttpServletRequest interface is used to get the cookies from a client. This method returns an array of cookies.
• E. Cookie [] cookies = request.getCookies();

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

Which of the following are known as safety critical software?

• A. Software that is used to apply a critical decision-making process
• B. Software that intervenes when a safe condition is present or is about to happen
• C. Software that is used to create safety critical functions
• D. Software that manages safety critical data including display of safety critical information

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

Which of the following statements is true about the Digest Authentication scheme?

• A. In this authentication scheme, the username and password are passed with every request, not just when the user first types them.
• B. The password is sent over the network in clear text format.
• C. A valid response from the client contains a checksum of the username, the password, the given random value, the HTTP method, and the requested URL.
• D. It uses the base64 encoding encryption scheme.
• E. Explanation:
  The Digest Authentication scheme is a replacement of the Basic Authentication scheme. This authentication scheme is based on the challenge response model. In Digest authentication, the password is never sent across the network in clear text format but is always transmitted as an MD5 digest of the user's password. In this way, the password cannot be determined with the help of a sniffer. How does it work? In this authentication scheme, an optional header allows the server to specify the algorithm used to create the checksum or digest (by default, the MD5 algorithm). The Digest Authentication scheme provides the challenge using a randomly chosen value. This randomly chosen value is a server-specified data string which may be uniquely generated each time a 401 response is made. A valid response contains a checksum (by default, the MD5 checksum) of the username, the password, the given random value, the HTTP method, and the requested URL. In this way, the password is never sent in clear text format. Drawback: Although the password is not sent in clear text format, an attacker can gain access with the help of the digested password, since the digested password is really all the information needed to access the web site.

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).