Question 1

An ethical hacker is hired to evaluate the defenses of an organization's database system which is known to employ a signature-based IDS. The hacker knows that some SQL Injection evasion techniques may allow him to bypass the system's signatures. During the operation, he successfully retrieved a list of usernames from the database without triggering an alarm by employing an advanced evasion technique. Which of the following could he have used?

Options :

A :

Utilizing the char encoding function to convert hexadecimal and decimal values into characters that pass-through SQL engine parsing

B : Using the URL encoding method to replace characters with their ASCII codes in hexadecimal form

C :

Implementing sophisticated matches such as “OR ‘john' = john" in place of classical matches like "OR 1-1"

D : Manipulating white spaces in SQL queries to bypass signature detection

Answer: D

Question 2

Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?

Options :

A : Data-driven firewall

B : Packet firewall

C : Web application firewall

D : Stateful firewall

Answer: C

Question 3

The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the

host

10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic. After he

applied his ACL configuration in the router, nobody can access the ftp, and the permitted hosts cannot access

the Internet. According to the next configuration, what is happening in the network?

access-list 102 deny tcp any any

access-list 104 permit udp host 10.0.0.3 any

access-list 110 permit tcp host 10.0.0.2 eq www any

access-list 108 permit tcp any eq ftp any

Options :

A : The ACL 104 needs to be first because is UDP

B : The first ACL is denying all TCP traffic and the other ACLs are being ignored by the router

C : The ACL for FTP must be before the ACL 110

D : The ACL 110 needs to be changed to port 80

Answer: B

Question 4

Your company suspects a potential security breach and has hired you as a Certified Ethical Hacker to investigate. You discover evidence of footprinting through search engines and advanced Google hacking techniques. The attacker utilized Google search operators to extract sensitive information. You further notice queries that indicate the use of the Google Hacking Database (GHDB) with an emphasis on VPN footprinting. Which of the following Google advanced search operators would be the LEAST useful in providing the attacker with sensitive VPN-related information?

Options :

A : intitle: This operator restricts results to only the pages containing the specified term in the title

B : location: This operator finds information for a specific location

C : inur: This operator restricts the results to only the pages containing the specified word in the URL

D : link: This operator searches websites or pages that contain links to the specified website or page

Answer: B

Question 5

in this attack, an adversary tricks a victim into reinstalling an already-in-use key. This is achieved by manipulating and replaying cryptographic handshake messages. When the victim reinstall the key, associated parameters such as the incremental transmit packet number and receive packet number are reset to their initial values. What is this attack called?

Options :

A : Chop chop attack

B : KRACK

C : Evil twin

D : Wardriving

Answer: B

Free 312-50 Mock Exam – Practice Online Confidently

Buying Options: