Question 51
A Linux system allows passwordless sudo for multiple commands. What security principle is violated?
- Zero trust
- Defense in depth
- CIA
- Least privilege
Question 52
A Windows endpoint generates alerts for credential dumping tools. What asset is targeted?
- Network
- Logs
- Availability
- Credentials
Question 53
A compromised endpoint communicates with C2 using DNS queries. What system-level indicator exists?
- DNS anomalies
- Memory leaks
- CPU spikes
- Disk usage
Question 54
A system allows execution from /tmp directory. What risk exists?
- Malware execution
- SQLi
- XSS
- DoS
Question 55
What does a NULL scan send?
- No flags set
- SYN packet
- ACK packet
- RST packet