Question 1

After a hacker obtained a shell on a Linux box, the hacker then sends the exfiltrated data via Domain Name

System (DNS). This is an example of which type of data exfiltration?

Options :

A : Covert channels

B : File sharing services

C : Steganography

D : Rogue service

Answer: A

Question 2

Which of the following are common areas of vulnerabilities in a network switch? (Choose two.)

Options :

A : Default port state

B : Default credentials

C : Default protocols

D : Default encryption

E : Default IP address

Answer: A,B

Question 3

Which asset would be the MOST desirable for a financially motivated attacker to obtain from a health insurance company?

Options :

A : Transaction logs

B : Intellectual property

C : PII/PHI

D : Network architecture

Answer: C

Question 4

Which of the following, when exposed together, constitutes PII? (Choose two.)

Options :

A : Full name

B : Birth date

C : Account balance

D : Marital status

E : Employment status

Answer: A,C

Question 5

Which of the following is an automated password cracking technique that uses a combination of uppercase and lowercase letters, 0-9 numbers, and special characters?

Options :

A : Dictionary attack

B : Password guessing

C : Brute force attack

D : Rainbow tables

Answer: C