Question 1

John is investigating web-application firewall logs and observers that someone is attempting to inject the

following:

char buff[10];

buff[>o] - 'a':

What type of attack is this?

Options :

A : CSRF

B : XSS

C : Buffer overflow

D : SQL injection

Answer: C

Question 2

Don, a student, came across a gaming app in a third-party app store and Installed it. Subsequently, all the legitimate apps in his smartphone were replaced by deceptive applications that appeared legitimate. He also received many advertisements on his smartphone after Installing the app. What is the attack performed on Don in the above scenario?

Options :

A : SMS phishing attack

B : SIM card attack

C : Agent Smith attack

D : Clickjacking

Answer: C

Question 3

A Certified Ethical Hacker (CEH) is given the task to perform an LDAP enumeration on a target system. The system is secured and accepts connections only on secure LDAP. The CEH uses Python for the enumeration process. After successfully installing LDAP and establishing a connection with the target, he attempts to fetch details like the domain name and naming context but is unable to receive the expected response. Considering the circumstances, which of the following is the most plausible reason for this situation?

Options :

A : The Python version installed on the CEH-s machine is incompatible with the Idap3 library

B :

The secure LDAP connection was not properly initialized due to a lack of 'use_ssl = True' in the server object creation

C : The enumeration process was blocked by the target system-s intrusion detection system

D : The system failed to establish a connection due to an incorrect port number

Answer: B

Question 4

CyberTech Inc. recently experienced SQL injection attacks on its official website. The company appointed Bob, a security professional, to build and incorporate defensive strategies against such attacks. Bob adopted a practice whereby only a list of entities such as the data type, range, size, and value, which have been approved for secured access, is accepted. What is the defensive technique employed by Bob in the above scenario?

Options :

A : Output encoding

B : Enforce least privileges

C : Whitelist validation

D : Blacklist validation

Answer: C

Question 5

What is the common name for a vulnerability disclosure program opened by companies In platforms such as HackerOne?

Options :

A : Vulnerability hunting program

B : Bug bounty program

C : White-hat hacking program

D : Ethical hacking program

Answer: B

Free 312-50v12 Mock Exam – Practice Online Confidently

Buying Options: