Question 1

In both pharming and phishing attacks, an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims. What is the difference between pharming and phishing attacks?

Options :

A : In a pharming attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack, an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name

B : In a phishing attack, a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack, an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name

C : Both pharming and phishing attacks are purely technical and are not considered forms of social engineering

D : Both pharming and phishing attacks are identical

Answer: A

Question 2

SQL injection (SQLi) attacks attempt to inject SQL syntax into web requests, which may Bypass authentication and allow attackers to access and/or modify data attached to a web application. Which of the following SQLI types leverages a database server's ability to make DNS requests to pass data to an attacker?

Options :

A : Union-based SQLI

B : Out-of-band SQLI

C : ln-band SQLI

D : Time-based blind SQLI

Answer: B

Question 3

In your cybersecurity class, you are learning about common security risks associated with web servers. One topic that comes up is the risk posed by using default server settings. Why is using default settings ona web - server considered a security risk, and what would be the best initial step to mitigate this risk?

Options :

A : Default settings cause server malfunctions; simplify the settings

B : Default settings allow unlimited login attempts; setup account lockout

C : Default settings reveal server software type; change these settings

D : Default settings enable auto-updates; disable and manually patch

Answer: C

Question 4

What does the –oX flag do in an Nmap scan?

Options :

A : Perform an eXpress scan

B : Output the results in truncated format to the screen

C : Output the results in XML format to a file

D : Perform an Xmas scan

Answer: C

Question 5

What is the known plaintext attack used against DES which gives the result that encrypting plaintext with one DES key followed by encrypting it with a second DES key is no more secure than using a single key?

Options :

A : Man-in-the-middle attack

B : Meet-in-the-middle attack

C : Replay attack

D : Traffic analysis attack

Answer: B

Smartly Prepare Exam with Free Online 312-50 Practice Test

Buying Options: