312-50v10

312-50v10 practice questions, page 12 of 13, with answer review and explanations.

Question 56

In which of the following cryptography attack methods, the attacker makes a series of interactive queries, choosing subsequent plaintexts based on the information from the previous encryptions?

  1. Chosen-plaintext attack
  2. Ciphertext-only attack
  3. Adaptive chosen-plaintext attack
  4. Known-plaintext attack

Question 57

Which of the following attacks exploits web age vulnerabilities that allow an attacker to force an unsuspecting user's browser to send malicious requests they did not intend?

  1. Command Injection Attacks
  2. File Injection Attack
  3. Cross-Site Request Forgery (CSRF)
  4. Hidden Field Manipulation Attack

Question 58

Which is the first step followed by Vulnerability Scanners for scanning a network?

  1. TCP/UDP Port scanning
  2. Firewall detection
  3. OS Detection
  4. Checking if the remote host is alive

Question 59

Shellshock allowed an unauthorized user to gain access to a server. It affected many Internet-facing services, which OS did it not directly affect?

  1. Linux
  2. Unix
  3. OS X
  4. Windows

Question 60

Alice encrypts her data using her public key PK and stores the encrypted data in the cloud. Which of the following attack scenarios will compromise the privacy of her data?

  1. None of these scenarios compromise the privacy of Alice's data
  2. Agent Andrew subpoenas Alice, forcing her to reveal her private key. However, the cloud server successfully resists Andrew's attempt to access the stored data
  3. Hacker Harry breaks into the cloud server and steals the encrypted data
  4. Alice also stores her private key in the cloud, and Harry breaks into the cloud server as before