312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 15 of 42, with answer review and explanations.

Question 71

An organization lacks centralized logs. Which attack phase is hardest to detect?

  1. Lateral movement
  2. Recon
  3. Delivery
  4. Initial access

Question 72

Which metric best measures detection speed?

  1. MTTD
  2. SLA
  3. CVSS
  4. MTTR

Question 73

A web app fails to restrict API request frequency. What risk exists?

  1. Data scraping
  2. CSRF
  3. XSS
  4. SQLi

Question 74

A Java app uses ObjectInputStream.readObject() on untrusted data. What is the risk?

  1. DoS
  2. XSS
  3. Insecure Deserialization
  4. SQLi

Question 75

A REST API uses user-provided object IDs without authorization checks. What flaw is this?

  1. Mass assignment
  2. XSS
  3. SQLi
  4. BOLA