What technique is used to perform a Connection Stream Parameter Pollution (CSPP) attack?

• A.Setting a user's session identifier (SID) to an explicit known value
• B.Adding multiple parameters with the same name in HTTP requests
• C.Injecting parameters into a connection string using semicolons as a separator
• D.Inserting malicious Javascript code into input parameters

Comment: *

Name: *

Email: *

Verification: *

Suppose you've gained access to your client's hybrid network. On which port should you listen to in order to know which Microsoft Windows workstations has its file sharing enabled?

• A.3389
• B.161
• C.445
• D.1433

Comment: *

Name: *

Email: *

Verification: *

You are working as a Security Analyst in a company XYZ that owns the whole subnet range of 23.0.0.0/8 and
192.168.0.0/8.
While monitoring the data, you find a high number of outbound connections. You see that IP's owned by XYZ (Internal) and private IP's are communicating to a Single Public IP. Therefore, the Internal IP's are sending data to the Public IP.
After further analysis, you find out that this Public IP is a blacklisted IP, and the internal communicating devices are compromised.
What kind of attack does the above scenario depict?

• A.Botnet Attack
• B.Rootkit Attack
• C.Advanced Persistent Threats
• D.Spear Phishing Attack

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an adaptive SQL Injection testing technique used to discover coding errors by inputting massive amounts of random data and observing the changes in the output?

• A.Static Testing
• B.Function Testing
• C.Fuzzing Testing
• D.Dynamic Testing

Comment: *

Name: *

Email: *

Verification: *

Which of the following can the administrator do to verify that a tape backup can be recovered in its
entirety?

• A.Read the last 512 bytes of the tape
• B.Perform a full restore
• C.Read the first 512 bytes of the tape
• D.Restore a random file

Comment: *

Name: *

Email: *

Verification: *