Review 200 412-79V8 practice questions with answer explanations and community insights.
Question 1
Which of the following password cracking techniques is used when the attacker has some information about the password?
Hybrid Attack
Dictionary Attack
Syllable Attack
Rule-based Attack
Question 2
Which of the following is an application alert returned by a web application that helps an attacker guess a valid username?
Invalid username or password
Account username was not found
Incorrect password
Username or password incorrect
Question 3
A pen tester has extracted a database name by using a blind SQL injection. Now he begins to test the table inside the database using the below query and finds the table: http://juggyboy.com/page.aspx?id=1; IF (LEN(SELECT TOP 1 NAME from sysobjects where xtype='U')=3) WAITFOR DELAY '00:00:10'-- http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),1,1)))=101) WAITFOR DELAY '00:00:10'-- http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),2,1)))=109) WAITFOR DELAY '00:00:10'-- http://juggyboy.com/page.aspx?id=1; IF (ASCII(lower(substring((SELECT TOP 1 NAME from sysobjects where xtype=char(85)),3,1)))=112) WAITFOR DELAY '00:00:10' What is the table name?
CTS
QRT
EMP
ABC
Question 4
When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?
Passive IDS
Active IDS
Progressive IDS
NIPS
Question 5
HTTP protocol specifies that arbitrary binary characters can be passed within the URL by using %xx notation, where 'xx' is the
ASCII value of the character
Binary value of the character
Decimal value of the character
Hex value of the character
We are moving to a new platform
CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.