312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 6 of 42, with answer review and explanations.

Question 26

A web app deserializes untrusted data leading to RCE. What flaw exists?

  1. SSTI
  2. Insecure deserialization
  3. SQLi
  4. XSS

Question 27

An attacker abuses PowerShell heavily. Which log helps most?

  1. DNS logs
  2. Firewall logs
  3. Syslog
  4. PowerShell script block logs

Question 28

What does TTL manipulation help evade?

  1. Encryption
  2. Firewall
  3. IDS
  4. Router

Question 29

What does an ACK scan mainly identify?

  1. Services
  2. Firewall rules
  3. Closed ports
  4. Open ports

Question 30

What does AXFR allow?

  1. Zone transfer
  2. Encryption
  3. DNS tunneling
  4. Resolution