312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 27 of 42, with answer review and explanations.

Question 131

A payroll management portal used by a manufacturing firm in Toledo, Ohio allows administrators to configure customizable notification templates that are later incorporated into automated reporting functions. During an authorized assessment, an ethical hacker submits specially structured input into a template field while creating a test notification. The application accepts and stores the value without any noticeable disruption to the interface. Days later, when a scheduled reporting task executes, the resulting dataset includes records beyond the expected scope defined by the report criteria. Further review reveals that the reporting engine dynamically constructs database queries using previously stored template values during execution. Determine the SQL injection variant illustrated in this scenario.

  1. Stored Procedure Injection
  2. Second-Order SQL Injection
  3. Error-Based SQL Injection
  4. Piggybacked Query Injection

Question 132

A financial analytics platform in Newark, New Jersey exposes a search parameter used to filter archived transaction records. During controlled testing, a security consultant submits carefully structured input designed to influence how the backend evaluates filtering conditions. The application continues to render the standard page layout, but response times fluctuate noticeably when specific logical expressions are introduced. By refining those conditions incrementally, the consultant observes consistent timing differences that align with changes in database evaluation behavior. The visible output remains unchanged, yet measurable performance variations provide feedback to the tester. Identify the SQL injection technique being demonstrated.

  1. Performing Heavy Query-Based Blind SQL Injection
  2. Applying Hex Encoding Evasion to obfuscate SQL keywords
  3. Executing Qut-of-Band SQL Injection via database-initiated HTTP requests
  4. Using HTTP Parameter Fragmentation to bypass firewall filtering

Question 133

A financial technology company in Charlotte, North Carolina authorizes a controlled red team engagement to evaluate defensive monitoring within its Windows server environment. During testing, the team executes a series of scripted administrative commands through the native automation shell. The security controls initially prevent the activity from completing. The tester then modifies how the command content is expressed while preserving its original functionality. After this adjustment, the same administrative operations execute successfully without triggering the operating system's integrated content inspection mechanism. Which technique was most likely used to bypass the Windows Antimalware Scan Interface (AMSI)?

  1. Forcing an Error
  2. Obfuscation
  3. PowerShell Downgrade
  4. Memory Hijacking

Question 134

A financial services provider in Frankfurt, Germany, experienced intermittent service disruption affecting its public-facing transaction portal. Network engineers observed a surge of connection attempts targeting the web servers. Packet inspection revealed that the majority of incoming traffic consisted of connection initiation requests that were never completed. The servers allocated memory and maintained half-open connection states while waiting for acknowledgments that never arrived. Over time, the connection table reached capacity, preventing legitimate users from establishing new sessions. No abnormal payloads were detected, and the packets themselves appeared structurally valid. Which attack technique best explains this behavior?

  1. Spoofed session flood attack
  2. ACK flood attack
  3. Fragmentation attack
  4. SYN flood attack

Question 135

A media streaming company in Los Angeles, California engages a certified ethical hacker to evaluate the resilience of its cloud-hosted infrastructure. After initial access is obtained through an exposed credential in a development repository, the tester systematically modifies logging configurations, establishes alternate access keys for persistence, and documents privilege relationships between services within the tenant. The tester's actions are focused on maintaining continued access and mapping the internal structure of the environment after initial compromise has occurred. Within the cloud attack lifecycle, which phase best represents this stage of activity?

  1. Exploitation
  2. Information Gathering
  3. Vulnerability Assessment
  4. Post-Exploitation