412-79v8

412-79v8 practice questions, page 5 of 8, with answer review and explanations.

Question 21

What is a goal of the penetration testing report?

  1. The penetration testing report helps you comply with local laws and regulations related to environmental conditions in the organization.
  2. The penetration testing report allows you to sleep better at night thinking your organization is protected
  3. The pen testing report helps executive management to make decisions on implementing security controls in the organization and helps the security team implement security controls and patch any flaws discovered during testing.
  4. The penetration testing report allows you to increase sales performance by effectively communicating with the internal security team.

Question 22

Which of the following is the range for assigned ports managed by the Internet Assigned Numbers Authority (IANA)?

  1. 3001-3100
  2. 5000-5099
  3. 6666-6674
  4. 0 – 1023

Question 23

Identify the injection attack represented in the diagram below:

  1. XPath Injection Attack
  2. XML Request Attack
  3. XML Injection Attack
  4. Frame Injection Attack

Question 24

Which of the following approaches to vulnerability assessment relies on the administrator providing baseline of system configuration and then scanning continuously without incorporating any information found at the time of scanning?

  1. Service-based Assessment Solutions
  2. Product-based Assessment Solutions
  3. Tree-based Assessment
  4. Inference-based Assessment

Question 25

The Web parameter tampering attack is based on the manipulation of parameters exchanged between client and server in order to modify application data, such as user credentials and permissions, price and quantity of products, etc. Usually, this information is stored in cookies, hidden form fields, or URL Query Strings, and is used to increase application functionality and control. This attack takes advantage of the fact that many programmers rely on hidden or fixed fields (such as a hidden tag in a form or a parameter in a URL) as the only security measure for certain operations. Attackers can easily modify these parameters to bypass the security mechanisms that rely on them. What is the best way to protect web applications from parameter tampering attacks?

  1. Validating some parameters of the web application
  2. Minimizing the allowable length of parameters
  3. Using an easily guessable hashing algorithm
  4. Applying effective input field filtering parameters