312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 39 of 42, with answer review and explanations.

Question 191

A telecommunications provider in Toronto operates a monitoring platform that analyzes inbound traffic streams during suspected denial-of-service conditions. The system converts traffic measurements into signal components and evaluates their energy across multiple frequency ranges to distinguish abnormal traffic bursts from background network noise. Rather than focusing on traffic baselines or identifying the exact statistical breakpoint where behavior changes, the platform identifies anomalies by decomposing traffic signals into spectral components for analysis. Which DDoS detection technique is being used in this scenario?

  1. Traffic Pattern Analysis
  2. Sequential Change-Point Detection
  3. Activity Profiling
  4. Wavelet-Based Signal Analysis

Question 192

A publicly traded blockchain startup conducts a forensic review after irregular transaction reversals are detected on its distributed ledger platform. Network telemetry indicates that a single coordinated entity controlled a dominant share of the computational power participating in block validation during the affected time window. As a result, certain confirmed transactions were replaced with alternate versions, enabling double-spending before the broader network regained balance. No individual node isolation or transaction front-running behavior is observed - rather, the anomaly stems from disproportionate influence over block creation. Identify the blockchain attack most consistent with this incident.

  1. Eclipse Attack
  2. Finney Attack
  3. 51% Attack
  4. DeFi Sandwich Attack

Question 193

A municipal data center in Phoenix, Arizona, deploys a network intrusion detection system to monitor traffic entering its public records portal. During a scheduled red team exercise, authorized testers successfully exploit a vulnerable web service and gain restricted administrative access. Post-exercise review reveals that the IDS generated a high-severity alert precisely at the time the exploit traffic reached the server. Log correlation confirms that the alert corresponded directly to the malicious activity performed during the test window. How should this IDS outcome be classified?

  1. False Negative
  2. True Positive
  3. False Positive
  4. True Negative

Question 194

During an authorized security assessment for a regional transportation authority in Sacramento, California, an ethical hacker is tasked with evaluating externally exposed web service interfaces used to exchange scheduling data with third-party transit applications. As part of the engagement, the ethical hacker retrieves publicly accessible service description files and systematically analyzes them to understand the operations supported by the service. By reviewing these definitions, the tester identifies undocumented methods, expected input parameters, and response schemas that were not clearly outlined in the public integration documentation. The activity provides a detailed understanding of the service's available capabilities before deeper testing begins. From the options below, identify the web service attack technique demonstrated in this scenario.

  1. SOAP Injection
  2. Application Logic Attacks
  3. XML Injection
  4. WSDL Probing Attacks

Question 195

A regional insurance claims platform in Sacramento, California is protected by a web application firewall that evaluates inbound requests for suspicious query structures. During an authorized assessment, a tester observes that conventional injection attempts are consistently rejected. The tester then adjusts the format and composition of the request while preserving its intended database behavior. After this modification, the request passes through the filtering mechanism and is processed by the backend system without disruption. Which firewall evasion technique is being demonstrated?

  1. Splitting payload components using HTTP Parameter Fragmentation (HPF)
  2. Transforming query structure to evade pattern-based inspection
  3. Combining multiple evasion methods through an integration approach
  4. Using HTTP Parameter Pollution (HPP) to override query parameters