312-50v13 Practice Test practice questions, page 36 of 42, with answer review and explanations.
Question 176
Arjun Mehta, a red team specialist at Sentinel Dynamics, is conducting a controlled reconnaissance assessment against the company's perimeter network. During testing, the security operations team observes that the firewall logs display several different originating systems associated with the same scanning activity, Arjun's objective is to ensure that his actual testing machine cannot be easily distinguished from other recorded entries. What technique is Arjun using in this scenario?
Source Routing
IP Address Decoy
Source Port Manipulation
IP Address Spoofing
Question 177
During an authorized security assessment of a smart home product manufacturer in San Jose, California, a certified ethical hacker evaluates the web-based management interface used to configure connected IoT cameras and lighting controllers. The tester discovers that when an internal user visits a specially crafted external website, the browser automatically initiates requests to a locally hosted device management interface within the user's private network. Which attack technique best explains this behavior?
Forged Malicious Device Attack
SDR-Based Attack
DNS Rebinding Attack
Distributed Denial-of-Service (DDoS) Attack
Question 178
A mid-sized insurance provider in Hartford, Connecticut authorizes a controlled red team engagement to evaluate its public-facing customer portal. Before progressing to active exploitation, the assessment team concentrates on understanding how the site is organized and how its content is interconnected. Using automated tooling, they systematically retrieve publicly accessible pages along with associated resources such as scripts, media files, and referenced directories. The collected material allows the team to analyze navigation paths, hidden references, and structural relationships without repeatedly interacting with the live production system. This preparatory effort is intended to build a detailed structural understanding of the application before later testing phases begin. Within the web server attack methodology, which stage is most accurately demonstrated in this scenario?
Website Mirroring
Information Gathering
Web Server Footprinting
Vulnerability Scanning
Question 179
A smart building management company in Seattle, Washington deploys wireless door sensors and badge-based access systems throughout its corporate headquarters. During a security assessment, an analyst captures legitimate radio transmissions between employee access badges and the entry control units. Later that evening, without modifying or decrypting the original communication, the analyst retransmits the previously captured signal toward a secured entrance. The access control system accepts the transmission as valid and unlocks the door, even though the legitimate badge is not present. Determine the attack technique demonstrated in this assessment.
BlueBorne Attack
Replay Attack
Rolling Code Attack
Sybil Attack
Question 180
Following a suspected data breach at a pharmaceutical research lab in Cambridge, Massachusetts, forensic examiners identified several research documents that had been removed from normal directory listings on a compromised server. When analysts examined the physical storage sectors previously associated with those files, they found that the sector contents no longer matched the historical allocation records, and no recognizable fragments of the original material could be reconstructed. The disk structure itself remained intact, and the storage medium showed no signs of hardware-level destruction. Which anti-forensics technique best explains the attacker's actions in this scenario?