312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 14 of 42, with answer review and explanations.

Question 66

An attacker exploits a misconfigured S3 bucket containing application backups with database credentials. What cloud security failure category does this fall under?

  1. Misconfiguration
  2. Insider threat
  3. Zero-day vulnerability
  4. Malware infection

Question 67

A DNS server responds with different IP addresses rapidly for the same domain, pointing to constantly changing hosts. What technique is being used?

  1. DNS tunneling
  2. DNS poisoning
  3. Fast flux
  4. Zone transfer

Question 68

A penetration tester extracts NTLM hashes but does not crack them, instead reuses them to authenticate. What attack is this?

  1. Kerberoasting
  2. Pass-the-hash
  3. Brute force
  4. Replay attack

Question 69

Attackers compromise a legitimate email account and send convincing internal messages requesting urgent actions. What attack is this?

  1. Spoofing
  2. Phishing
  3. Spear phishing
  4. Business Email Compromise

Question 70

A senior attacker uses OAuth tokens stolen from browser storage to access APIs. What attack does this represent?

  1. SQL Injection
  2. CSRF
  3. XSS
  4. Token replay