Question 1

By using a smart card and pin, you are using a two-factor authentication that satisfies

Options :

A : Something you are and something you remember

B : Something you have and something you know

C : Something you know and something you are

D : Something you have and something you are

Answer: B

Question 2

What type of a vulnerability/attack is it when the malicious person forces the user’s browser to send an authenticated request to a server?

Options :

A : Session hijacking

B : Server side request forgery

C : Cross-site request forgery

D : Cross-site scripting

Answer: C

Question 3

An ethical hacker is testing the security of a website's database system against SQL Injection attacks. They discover that the IDS has a strong signature detection mechanism to detect typical SQL injection patterns. Which evasion technique can be most effectively used to bypass the IDS signature detection while performing a SQL Injection attack?

Options :

A : Implement case variation by altering the case of SQL statements

B : Employ IP fragmentation to obscure the attack payload

C : Use Hex encoding to represent the SQL query string

D : Leverage string concatenation to break identifiable keywords

Answer: D

Question 4

Robin, a professional hacker, targeted an organization's network to sniff all the traffic. During this process.

Robin plugged in a rogue switch to an unused port in the LAN with a priority lower than any other switch in

the network so that he could make it a root bridge that will later allow him to sniff all the traffic in the

network.

What is the attack performed by Robin in the above scenario?

Options :

A : ARP spoofing attack

B : VLAN hopping attack

C : DNS poisoning attack

D : STP attack

Answer: D

Question 5

Which type of sniffing technique is generally referred as MiTM attack?

Options :

A : Password Sniffing

B : ARP Poisoning

C : Mac Flooding

D : DHCP Sniffing

Answer: B

Free 312-50v13 Mock Exam – Practice Online Confidently

Buying Options: