312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 34 of 42, with answer review and explanations.

Question 166

During a red team simulation at Dominion Energy Analytics in Richmond, Virginia, an assessor crafts a malicious document containing embedded code designed to take advantage of a known application weakness. After transmitting the document to a targeted employee, the embedded code executes successfully when the file is opened. Immediately following successful code execution, the compromised workstation begins initiating outbound connections to a remote system controlled by the red team, allowing instructions to be issued and data to be exchanged. Within the Cyber Kill Chain methodology, which stage does the establishment of this remote communication channel represent?

  1. Actions on Objectives
  2. Command and Control
  3. Installation
  4. Exploitation

Question 167

Ethan works as a penetration tester at CyberGuard Solutions, a cybersecurity consulting firm in Raleigh, North Carolina. During an authorized security assessment of a regional insurance company, Ethan was provided with a set of password hashes to evaluate the strength of employee-generated credentials. To test resistance against word-based password creation patterns, Ethan supplied a single custom wordlist containing common organizational terms and department names into his cracking tool. The tool automatically generated password candidates by linking multiple entries from that same list in varying combinations before attempting to match them against the hashes. This approach proved highly effective against passwords formed by concatenating familiar words. Which of the following password-cracking techniques is Ethan using?

  1. PRINCE Attack
  2. Combinator Attack
  3. Markow-Chain Attack
  4. Fingerprint Attack

Question 168

As part of an authorized security assessment at a maritime logistics firm in Charleston, South Carolina, an ethical hacker evaluated the organization's resilience to coordinated endpoint compromise. Employees received a carefully crafted email attachment disguised as a routine operational update. After execution on several systems, monitoring tools later revealed that the infected machines periodically contacted an external host controlled by the tester. Over time, the compromised systems began receiving commands from a centralized control server and simultaneously generated coordinated network traffic toward designated targets when instructed, without any direct user interaction. From a malware classification standpoint, what component is being simulated in this scenario?

  1. Spyware
  2. Scareware
  3. Potentially Unwanted Applications (PUAs)
  4. Botnet Agents

Question 169

A health-tech startup in Raleigh, North Carolina operates a Kubernetes cluster supporting patient-facing microservices. During an authorized security assessment, a certified ethical hacker reviews internal cluster activity records available to operations personnel. While analyzing these records, the tester notices that authentication artifacts associated with service accounts are recorded within system-generated output. The tester determines that if an individual obtained access to these records, they could reuse the captured authentication material to interact with cluster resources under the same privileges. Which Kubernetes vulnerability best corresponds to this condition?

  1. No Certificate Revocation
  2. Unauthenticated HTTPS Connections
  3. No Non-repudiation
  4. Exposed Bearer Tokens in Logs

Question 170

A multinational payment processor conducts a long-term risk assessment to evaluate the durability of its encrypted archives against future computational advances. Internal analysts warn that if large-scale quantum computers become operational, currently deployed public-key schemes protecting stored customer data may become vulnerable to rapid key recovery. To maintain long-term confidentiality of archived financial records, the security architecture team must implement a defensive strategy that directly addresses cryptographic resilience rather than relying solely on network segmentation or development policy controls. Determine the most appropriate mitigation to protect stored data against quantum-enabled decryption capabilities.

  1. Use quantum-specific firewalls to protect quantum communication channels
  2. Break data into fragments and distribute it across multiple locations
  3. Encrypt stored data with quantum-resistant algorithms
  4. Include quantum-resistance checks in SDLC and code review processes