312-50v13 Practice Test practice questions, page 40 of 42, with answer review and explanations.
Question 196
Granite Ridge Technologies in New Jersey is preparing to formalize its information security governance model. Executive leadership requires adoption of an internationally recognized framework that ensures confidentiality, integrity, and availability of information while enabling the organization to systematically identify, assess, and manage information security risks. The framework must also support compliance with regulatory and contractual obligations and demonstrate commitment to stakeholders. Which standard best fulfills these requirements?
ISO/IEC 27001:2022
ISO/IEC 27005:2022
ISO/IEC 27701:2019
ISO/IEC 27002:2022
Question 197
A municipal services portal in Lexington, Kentucky includes a search parameter that retrieves citizen service requests. During an authorized security review, an analyst alters the parameter value by introducing single quotation marks, logical expressions such as AND 1=1, and variations like AND 1=2, observing how the application responds to each modification. By comparing differences in the application's output and behavior after each structured input change, the analyst evaluates whether the parameter affects the underlying query processing. Which SQL injection detection method is being applied?
Static Testing
Dynamic Testing
Function Testing
Fuzz Testing
Question 198
As part of a controlled red-team engagement, an ethical hacker evaluates the resilience of a corporate campus against radio-frequency disruption. The tester activates a portable multi-antenna signal suppression device from a nearby building. The interference affects wireless communication across several departments within an estimated coverage radius of approximately 120 meters. The disruption persists for slightly over an hour before the device requires recharge. Analysis confirms that multiple frequency bands, including Wi-Fi and cellular standards, were simultaneously impacted. Based on the operational characteristics observed, identify the jamming device most consistent with this activity.
PCB-1016 Jammer
CPB-2612H-SG Jammer
CPB-2920 Jammer
PCB-4510 Jammer
Question 199
During a scheduled red team engagement at a regional investment firm in Phoenix, Arizona, security consultants were permitted limited after-hours access to employee workstations. As part of the evaluation, a small intermediary device was placed inline between a keyboard and its connected desktop system. Over time, the device began forwarding captured keystroke activity through the company's established wireless environment, allowing the assessment team to collect periodic log data without interacting further with the workstation. What type of keylogger does this scenario describe?
Hardware Keylogger
Acoustic/CAM Keylogger
Wi-Fi Keylogger
Bluetooth Keylogger
Question 200
During an internal assessment, a penetration tester sends specially crafted TCP packets to a target system without initiating a standard three-way handshake. Packet captures show that when these probes reach closed ports, the host responds with a TCP RST segment. However, when the probes reach open ports, the host does not return any response. Further inspection of the probe structure reveals that the packets contain an uncommon combination of TCP control bits rather than a single flag. What scanning technique is being performed?