Match the insecure code practice to the description.
Match the insecure code practice to the description. Lack of error handling and overly verbose error handling ==> A type of weakness and security malpractice that can provide information to help…
Which two misconfigured cloud authentication methods could leverage a cloud asset? (Choose two.)
Which two misconfigured cloud authentication methods could leverage a cloud asset? (Choose two.) biometric authentication identity and access management (IAM) implementations local authentication federated authentication Intelligent Platform Management Interface (IPMI)…
An attacker enters the string 192.168.78.6;cat /etc/httpd/httpd.conf on a web application hosted on a Linux server. Which type of attack occurred?
An attacker enters the string 192.168.78.6;cat /etc/httpd/httpd.conf on a web application hosted on a Linux server. Which type of attack occurred? SQL injection session hijacking command injection redirect attack Explanation…
What are two examples of immutable queries that should be used as mitigation for SQL injection vulnerabilities? (Choose two.)
What are two examples of immutable queries that should be used as mitigation for SQL injection vulnerabilities? (Choose two.) time-delay queries parameterized queries static queries stacked queries in-band queries Explanation…
An attacker enters the string ‘John’ or ‘1=1’ on a web form that is connected to a back-end SQL server causing the server to display all records in the database table. Which type of SQL injection attack was used in this scenario?
An attacker enters the string ‘John’ or ‘1=1’ on a web form that is connected to a back-end SQL server causing the server to display all records in the database…
What kind of social engineering attack can be prevented by developing policies such as updating anti-malware applications regularly and using secure virtual browsers with little connectivity to the rest of the system and the rest of the network?
What kind of social engineering attack can be prevented by developing policies such as updating anti-malware applications regularly and using secure virtual browsers with little connectivity to the rest of…
What is a characteristic of a pharming attack?
What is a characteristic of a pharming attack? a type of attack in which a social engineer impersonates another person to have physical access to systems in an organization a…
Which statement correctly describes a type of physical social engineering attack?
Which statement correctly describes a type of physical social engineering attack? Tailgating and piggybacking attacks can only be defeated through the use of control vestibules in conjunction with multifactor authentication.…
A cybersecurity student is learning about the Social-Engineer Toolkit (SET), and the student has discovered that this tool can be used to launch various social engineering attacks. Which two social engineering attacks can be launched using SET?
A cybersecurity student is learning about the Social-Engineer Toolkit (SET), and the student has discovered that this tool can be used to launch various social engineering attacks. Which two social…
A penetration tester deploys a rogue AP in the target wireless infrastructure. What is the first step that has to be taken to force wireless clients to connect to the rogue AP?
A penetration tester deploys a rogue AP in the target wireless infrastructure. What is the first step that has to be taken to force wireless clients to connect to the…
Refer to the exhibit. What is the penetration tester trying to achieve by running this exploit?
Refer to the exhibit. What is the penetration tester trying to achieve by running this exploit? to launch 220 packets of fragmented data to the FTP port on the target…
An organization wants to test its vulnerability to an employee with network privileges accessing the network maliciously. Which type of penetration test should be used to test this vulnerability?
An organization wants to test its vulnerability to an employee with network privileges accessing the network maliciously. Which type of penetration test should be used to test this vulnerability? blue-box…
A cybersecurity firm has been hired by an organization to perform penetration tests. The tests require a secure method of transferring data over a network. Which two protocols could be used to accomplish this task? (Choose two.)
A cybersecurity firm has been hired by an organization to perform penetration tests. The tests require a secure method of transferring data over a network. Which two protocols could be…
What can be used to document the testing timeline in a rules of engagement document?
What can be used to document the testing timeline in a rules of engagement document? Gantt charts and work breakdown structures OWASP ZAP Recon-ng Burp Suite Explanation & Hints: Gantt…
Match the healthcare sector term to the respective description.
Match the healthcare sector term to the respective description. Healthcare provider ==> A person or an organization that provides patient or medical services Business associates ==> A person or organization that performs…
Why would an organization hire a red team?
Why would an organization hire a red team? to evaluate the work of the security team of the organization to install equipment to protect against physical intrusion to defend the…
Which common tool is used by penetration testers to craft packets?
Which common tool is used by penetration testers to craft packets? nmap scapy pip3 h8mail Recon-ng Explanation & Hints: Scapy is a very comprehensive Python-based framework or ecosystem for packet…
A penetration tester wants to quickly discover all the live hosts on the 192.168.0.0/24 network. Which command can do the ping sweep using the nmap tool?
A penetration tester wants to quickly discover all the live hosts on the 192.168.0.0/24 network. Which command can do the ping sweep using the nmap tool? nmap -p 1-65535 localhost…
A network administrator performs a penetration test for a company that sells computer parts through an online storefront. The first step is to discover who owns the domain name that the company is using. Which penetration testing tool can be used to do this?
A network administrator performs a penetration test for a company that sells computer parts through an online storefront. The first step is to discover who owns the domain name that…
Which type of threat actors use cybercrime attacks to promote what they believe in?
Which type of threat actors use cybercrime attacks to promote what they believe in? hacktivists organized crime state-sponsored insider threats Explanation & Hints: Hacktivists are types of threat actors not…
- Go to the previous page
- 1
- …
- 113
- 114
- 115
- 116
- 117
- 118
- 119
- …
- 266
- Go to the next page