Question 1

Scenario1:

1.Victim opens the attacker's web site.

2.Attacker sets up a web site which contains interesting and attractive content like 'Do you want to make

$1000 in a day?'.

3.Victim clicks to the interesting and attractive content URL.

4.Attacker creates a transparent 'iframe' in front of the URL which victim attempts to click, so victim thinks

that he/she clicks to the 'Do you want to make $1000 in a day?' URL but actually he/she clicks to the content

or URL that exists in the transparent 'iframe' which is setup by the attacker.

What is the name of the attack which is mentioned in the scenario?

Options :

A : Session Fixation

B : HTML Injection

C : HTTP Parameter Pollution

D : Clickjacking Attack

Answer: D

Question 2

Jude, a pen tester working in Keiltech Ltd., performs sophisticated security testing on his company's network infrastructure to identify security loopholes. In this process, he started to circumvent the network protection tools and firewalls used in the company. He employed a technique that can create forged TCP sessions by carrying out multiple SYN, ACK, and RST or FIN packets. Further, this process allowed Jude to execute DDoS attacks that can exhaust the network resources. What is the attack technique used by Jude for finding loopholes in the above scenario?

Options :

A : UDP flood attack

B : Ping-of-death attack

C : Spoofed session flood attack

D : Peer-to-peer attack

Answer: C

Question 3

As a cybersecurity analyst for SecureNet, you are performing a security assessment of a new mobile payment

application. One of your primary concerns is the secure storage of customer data on the device. The

application

stores sensitive information such as credit card details and personal identification numbers (PINs) on the

device. Which of the following measures would best ensure the security of this data?

Options :

A : Implement biometric authentication for app access.

B : Encrypt all sensitive data stored on the device.

C : Enable GPS tracking for all devices using the app.

D : Regularly update the app to the latest version.

Answer: B

Question 4

John, a security analyst working for an organization, found a critical vulnerability on the organization's LAN that allows him to view financial and personal information about the rest of the employees. Before reporting the vulnerability, he examines the information shown by the vulnerability for two days without disclosing any information to third parties or other internal employees. He does so out of curiosity about the other employees and may take advantage of this information later. What would John be considered as?

Options :

A : Cybercriminal

B : Black hat

C : White hat

D : Gray hat

Answer: D

Question 5

Harris is attempting to identify the OS running on his target machine. He inspected the initial TTL in the IP header and the related TCP window size and obtained the following results: TTL: 64 Window Size: 5840 What is the OS running on the target machine?

Options :

A : Solaris OS

B : Windows OS

C : Mac OS

D : Linux OS

Answer: D

Smartly Prepare Exam with Free Online 312-50 Practice Test

Buying Options: