312-50v13 Practice Test practice questions, page 33 of 42, with answer review and explanations.
Question 161
A logistics technology provider in Kansas City, Missouri conducts an internal review after an ethical hacker demonstrates several recurring input-handling weaknesses across different customer-facing web applications. The findings show that validation logic varies between modules, with many controls implemented inconsistently across components developed by separate teams. Although immediate patches are applied to address the identified flaws, similar issues have surfaced in previous platform iterations despite corrective updates. Leadership determines that isolated fixes are insufficient and initiates an effort to standardize how security requirements are defined and incorporated across future development initiatives. Based on the web application attack countermeasures, which category best aligns with this remediation approach?
Insecure Design
Broken Access Control
Security Misconfiguration
Cryptographic Failures / Sensitive Data Exposure
Question 162
During a targeted intrusion against a cloud infrastructure company in Salt Lake City, Utah, an attacker distributes a modified installation package of a legitimate network diagnostic utility widely used by employees. Before distributing the package, the attacker binds a malicious remote-access payload with the original executable so that both components are installed together. When users launch the diagnostic tool, it performs its normal troubleshooting functions, while the hidden payload simultaneously executes in the background and establishes communication with a remote command server. From a malware deployment perspective, what technique best describes this approach?
Wrapper
Downloader
Packer
Dropper
Question 163
A cloud service provider in Singapore is refining its defensive monitoring strategy to identify large-scale denial-of-service attempts against hosted applications. The security engineering team wants a detection mechanism that continuously evaluates incoming traffic streams and statistically determines the exact moment when normal behavior shifts into anomalous activity. Rather than relying solely on static baselines or historical comparisons, the team prefers an approach that detects abrupt deviations in real time by identifying structural breaks in traffic metrics as they occur. Which DDoS detection technique best fits this requirement?
Sequential Change-Point Detection
Wavelet-Based Signal Analysis
Traffic Pattern Analysis
Activity Profiling
Question 164
A cybersecurity firm in Reston, Virginia is contracted to investigate a cluster of endpoint alerts affecting multiple employees of a satellite communications manufacturer. The affected employees all work in orbital systems engineering and regularly access a specialized industry forum used for regulatory updates and technical advisories. Security logs indicate that each compromised workstation visited the same trusted industry website shortly before establishing unusual outbound connections. The site continues to operate normally for general visitors. Further analysis shows that a recently added script conditionally loads additional content only when specific environmental attributes - such as originating organization and browser profile - match predefined conditions. The observed activity stems from routine browsing of a site frequently visited by professionals within that sector. Which web application attack category best describes this technique?
Cross-Site Scripting (XSS)
Watering Hole Attack
JavaScript Hijacking
Magecart Attack
Question 165
At a smart grid development company in Portland, Oregon, analysts isolated several infected executable files from different endpoints. Each infected file demonstrated the same payload behavior, including registry persistence and outbound communication attempts. However, binary comparison revealed that no consistent decryptor routines, recurring code segments, or stable structural patterns could be traced between the samples. Although the operational intent remained unchanged, the internal composition of each infection appeared uniquely reconstructed. Determine the virus subtype that most accurately matches this behavior.