350-701 Practice Test

350-701 Practice Test practice questions, page 5 of 28, with answer review and explanations.

Question 21

How does DNS Tunneling exfiltrate data?

  1. An attacker registers a domain that a client connects to based on DNS records and sends malware through that connection.
  2. An attacker opens a reverse DNS shell to get into the client's system and install malware on it.
  3. An attacker sends an email to the target with hidden DNS resolvers in it to redirect them to a malicious domain.
  4. An attacker uses a non-standard DNS port to gain access to the organization's DNS servers in order to poison the resolutions.

Question 22

An attacker needs to perform reconnaissance on a target system to help gain access to it. The system has weak passwords, no encryption on the VPN links, and software bugs on the system's applications. Which vulnerability allows the attacker to see the passwords being transmitted in clear text?

  1. unencrypted links for traffic
  2. weak passwords for authentication
  3. improper file security
  4. software bugs on applications

Question 23

A user has a device in the network that is receiving too many connection requests from multiple machines. Which type of attack is the device undergoing?

  1. SYN flood
  2. slowloris
  3. phishing
  4. pharming

Question 24

Which two preventive measures are used to control cross-site scripting? (Choose two.)

  1. Enable client-side scripts on a per-domain basis.
  2. Incorporate contextual output encoding/escaping.
  3. Disable cookie inspection in the HTML inspection engine.
  4. Run untrusted HTML input through an HTML sanitization engine.
  5. SameSite cookie attribute should not be used.

Question 25

Which threat involves software being used to gain unauthorized access to a computer system?

  1. ping of death
  2. HTTP flood
  3. NTP amplification
  4. virus