350-701 Practice Test

350-701 Practice Test practice questions, page 2 of 28, with answer review and explanations.

Question 6

Which form of attack is launched using botnets?

  1. TCP flood
  2. DDOS
  3. DOS
  4. virus

Question 7

In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?

  1. smurf
  2. distributed denial of service
  3. cross-site scripting
  4. rootkit exploit

Question 8

Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?

  1. user input validation in a web page or web application
  2. Linux and Windows operating systems
  3. database
  4. web page images

Question 9

What is the difference between deceptive phishing and spear phishing?

  1. Deceptive phishing is an attacked aimed at a specific user in the organization who holds a C-level role.
  2. A spear phishing campaign is aimed at a specific person versus a group of people.
  3. Spear phishing is when the attack is aimed at the C-level executives of an organization.
  4. Deceptive phishing hijacks and manipulates the DNS server of the victim and redirects the user to a false webpage.

Question 10

Which two behavioral patterns characterize a ping of death attack? (Choose two.)

  1. The attack is fragmented into groups of 16 octets before transmission.
  2. The attack is fragmented into groups of 8 octets before transmission.
  3. Short synchronized bursts of traffic are used to disrupt TCP connections.
  4. Malformed packets are used to crash systems.
  5. Publicly accessible DNS servers are typically used to execute the attack.