Free 312-50v12 Mock Exam – Practice Online Confidently

Bob was recently hired by a medical company after it experienced a major cyber security breach. Many patients are complaining that their personal medical records are fully exposed on the Internet and someone can find them with a simple Google search. Bob's boss is very worried because of regulations that protect those data. Which of the following regulations is mostly violated?

Question #:98 - (Exam Topic 3)

A penetration tester is conducting an assessment of a web application for a financial institution. The

application uses form-based authentication and does not implement account lockout policies after multiple

failed login attempts. Interestingly, the application displays detailed error messages that disclose whether the

username or password entered is incorrect. The tester also notices that the application uses HTTP headers to

prevent clickjacking attacks but does not implement Content Security Policy (CSP). With these observations,

which of the following attack methods would likely be the most effective for the penetration tester to exploit

these vulnerabilities and attempt unauthorized access?

A "Server-Side Includes" attack refers to the exploitation of a web application by injecting scripts in HTML pages or executing arbitrary code remotely. Which web-page file type, if it exists on the web server, is a strong indication that the server is vulnerable to this kind of attack?

Sam, a professional hacker. targeted an organization with intention of compromising AWS IAM credentials. He attempted to lure one of the employees of the organization by initiating fake calls while posing as a legitimate employee. Moreover, he sent phishing emails to steal the AWS 1AM credentials and further compromise the employee's account. What is the technique used by Sam to compromise the AWS IAM credentials?

Which of the following Bluetooth hacking techniques does an attacker use to send messages to users without the recipient’s consent, similar to email spamming?