Question 1

Terri works for a security consulting firm that is currently performing a penetration test on First National Bank

in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an

IP packet to one of the company's switches with ACK bit and the source address of her machine set. What is

Terri trying to accomplish by sending this IP packet?

Options :

A : Trick the switch into thinking it already has a session with Terri-s computer

B :

Poison the switch-s MAC address table by flooding it with ACK bits

C : Crash the switch with a DoS attack since switches cannot send ACK bits

D : Enable tunneling feature on the switch

Answer: A

Question 2

Which password cracking technique uses details such as length of password, character sets used to construct the password, etc.?

Options :

A : Dictionary attack

B : Brute force attack

C : Rule-based attack

D : Man in the middle attack

Answer: A

Question 3

Adam Is thinking of establishing a hospital In the US and approaches John, a software developer to build a site and host it for him on one of the servers, which would be used to store patient health records. He has learned from his legal advisors that he needs to have the server's log data reviewed and managed according to certain standards and regulations. Which of the following regulations are the legal advisors referring to?

Options :

A : Data Protection Act of 2018

B : Payment Card Industry Data Security Standard (PCI DSS)

C : Electronic Communications Privacy Act

D : Health Insurance Portability and Accountability Act of 1996 (HIPAA)

Answer: D

Question 4

Which of the following ISO standard defines file systems and protocol for exchanging data between optical disks?

Options :

A : ISO 9660

B : ISO/IEC 13940

C : ISO 9060

D : IEC 3490

Answer: A

Question 5

Brian has the job of analyzing malware for a software security company. Brian has setup a virtual environment that includes virtual machines running various versions of OSes. Additionally, Brian has setup separated virtual networks within this environment The virtual environment does not connect to the company's intranet nor does it connect to the external Internet. With everything setup, Brian now received an executable file from client that has undergone a cyberattack. Brian ran the executable file In the virtual environment to see what it would do. What type of analysis did Brian perform?

Options :

A : Static malware analysis

B : Status malware analysis

C : Dynamic malware analysis

D : Static OS analysis

Answer: C