Free ML0-320 Exam Braindumps
certified penetration testing professional Questions 236–240 (page: 18)

Updated On: 31-Jan-2026

Which of the following would best represent the definition of a Penetration Test?

  1. Testing of the effectiveness of applied security controls by breaking in and bypassing them.
  2. Testing of the policies in place to see how compliant a company is with its own
    control definition.
  3. Testing the effectiveness of applied security controls by evaluating vulnerabilities and reporting them to the client.
  4. Testing the effectiveness of access control mechanisms by constant and deep inspection of all log files. Also called Deep Packet Inspection.

Answer(s): A



Which of the following countermeasures can make it more difficult for an attacker to gain access to the local SAM file if the attacker has physical access to that computer? Choose two.

  1. Change the BIOS to always boot first from the hard drive and enable a BIOS password
  2. Install a smartcard reader for login
  3. Encrypt the SAM file using EFS
  4. Physically remove the floppy drive and CD/DVD drives

Answer(s): A,D



A system administrator deploys a Windows-based server in a publicly-accessible DMZ. The sole purpose of this machine is to run IIS and allow anonymous access. After a few days the security log is full of failed login against the Administrator account.
What is the best strategy to totally prevent future password guessing attempts? Choose the best

  1. Enable account lockout
  2. Change the Administrator password to be even longer
  3. Remove File and Print Sharing for Microsoft Networks on the network adapter
  4. Configure the security policy to shut down the system when the event log is full

Answer(s): C



Why is it important to ensure that SRV records are not publicly accessible? Choose the best

  1. SRV records indicate how long a machine has been up since reboot and hence could indicate patch levels
  2. SRV records reveal Active Directory domain controllers
  3. SRV records reveal software Update Services computers
  4. SRV records are required on NT 4 domains

Answer(s): B



Cisco Catalyst Switches have which feature intended to prevent ARP cache poisoning? Choose the best

  1. ARP watch
  2. Dynamic ARP Inspection
  3. VLANs
  4. IPSec-ready

Answer(s): B



Viewing page 18 of 51
Viewing questions 86 - 90 out of 247 questions


Post your Comments and Discuss Mile2 ML0-320 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!