312-50v12 Practice Test practice questions, page 7 of 13, with answer review and explanations.
Question 31
John, a disgruntled ex-employee of an organization, contacted a professional hacker to exploit the organization. In the attack process, the professional hacker installed a scanner on a machine belonging to one of the victims and scanned several machines on the same network to identify vulnerabilities to perform further exploitation. What is the type of vulnerability assessment tool employed by John in the above scenario?
Agent-based scanner
Network-based scanner
Cluster scanner
Proxy scanner
Question 32
Joel, a professional hacker, targeted a company and identified the types of websites frequently visited by its employees. Using this information, he searched for possible loopholes in these websites and injected a malicious script that can redirect users from the web page and download malware onto a victim's machine. Joel waits for the victim to access the infected web application so as to compromise the victim's machine. Which of the following techniques is used by Joel in the above scenario?
Watering hole attack
DNS rebinding attack
MarioNet attack
Clickjacking attack
Question 33
Security administrator John Smith has noticed abnormal amounts of traffic coming from local computers at night. Upon reviewing, he finds that user data have been exfiltrated by an attacker. AV tools are unable to find any malicious software, and the IDS/IPS has not reported on any non-whitelisted programs. What type of malware did the attacker use to bypass the company’s application whitelisting?
File-less malware
Zero-day malware
Phishing malware
Logic bomb malware
Question 34
Dorian is sending a digitally signed email to Poly. With which key is Dorian signing this message and how is Poly validating it?
Dorian is signing the message with his public key, and Poly will verify that the message came from Dorian by using Dorian’s private key.
Dorian is signing the message with Poly’s private key, and Poly will verify that the message came from Dorian by using Dorian’s public key.
Dorian is signing the message with his private key, and Poly will verify that the message came from Dorian by using Dorian’s public key.
Dorian is signing the message with Poly’s public key, and Poly will verify that the message came from Dorian by using Dorian’s public key.
Question 35
Scenario: Joe turns on his home computer to access personal online banking. When he enters the URL www.bank.com, the website is displayed, but it prompts him to re-enter his credentials as if he has never visited the site before. When he examines the website URL closer, he finds that the site is not secure and the web address appears different. What type of attack he is experiencing?