<< Prev Question Next Question >>

Question 54/289

Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections.
Which of the following attack techniques is used by Stella to compromise the web services?

A. Web services parsing attacks

B. XML injection

C. SOAPAction spoofing

D. WS-Address spoofing

Recent Comments (The most recent comments are at the top.)

ashish - Sep 04, 2022

WS-Address provides additional routing information in the SOAP header to support asynchronous communication. This technique allows the transmission of web service requests and response messages using different TCP connections

Question List (289q): 1 commentQuestion 1: in the Common Vulnerability Scoring System (CVSS) v3.1 sever...; Question 2: _________ is a type of phishing that targets high-profile ex...; Question 3: By performing a penetration test, you gained access under a ...; 1 commentQuestion 4: SQL injection (SOU) attacks attempt to inject SOL syntax int...; Question 5: An attacker is trying to redirect the traffic of a small off...; Question 6: in an attempt to increase the security of your network, you ...; Question 7: SQL injection (SQLi) attacks attempt to inject SQL syntax in...; Question 8: Which of the following tools can be used to perform a zone t...; Question 9: Mason, a professional hacker, targets an organization and sp...; Question 10: Richard, an attacker, aimed to hack IoT devices connected to...; Question 11: Why containers are less secure that virtual machines?...; Question 12: You have retrieved the raw hash values from a Windows 2000 D...; Question 13: Don, a student, came across a gaming app in a third-party ap...; Question 14: Boney, a professional hacker, targets an organization for fi...; Question 15: You have successfully comprised a server having an IP addres...; Question 16: Which of the following LM hashes represent a password of les...; Question 17: Ralph, a professional hacker, targeted Jane, who had recentl...; Question 18: What is the first step for a hacker conducting a DNS cache p...; Question 19: Robin, a professional hacker, targeted an organization's net...; Question 20: Which of the following options represents a conceptual chara...; Question 21: Johnson, an attacker, performed online research for the cont...; Question 22: Let's imagine three companies (A, B and C), all competing in...; Question 23: Richard, an attacker, aimed to hack loT devices connected to...; Question 24: Under what conditions does a secondary name server request a...; Question 25: Bob is going to perform an active session hijack against Bro...; Question 26: There are multiple cloud deployment options depending on how...; Question 27: Richard, an attacker, aimed to hack loT devices connected to...; Question 28: Study the snort rule given below: (Exhibit) From the options...; Question 29: Mirai malware targets loT devices. After infiltration, it us...; Question 30: Which ios jailbreaking technique patches the kernel during t...; Question 31: Mary found a high vulnerability during a vulnerability scan ...; 1 commentQuestion 32: An attacker identified that a user and an access point are b...; Question 33: Ethical hacker jane Smith is attempting to perform an SQL in...; Question 34: Which of the following is a low-tech way of gaining unauthor...; Question 35: Jason, an attacker, targeted an organization to perform an a...; Question 36: DHCP snooping is a great solution to prevent rogue DHCP serv...; 2 commentQuestion 37: Alice needs to send a confidential document to her coworker....; Question 38: Sam is working as a system administrator in an organization....; Question 39: Take a look at the following attack on a Web Server using ob...; Question 40: Robert, a professional hacker, is attempting to execute a fa...; Question 41: What is the common name for a vulnerability disclosure progr...; Question 42: Dorian Is sending a digitally signed email to Polly, with wh...; Question 43: Sam is working as a system administrator In an organization....; Question 44: Kate dropped her phone and subsequently encountered an issue...; Question 45: Jake, a professional hacker, installed spyware on a target i...; Question 46: A security analyst uses Zenmap to perform an ICMP timestamp ...; Question 47: Leverox Solutions hired Arnold, a security professional, for...; Question 48: An organization is performing a vulnerability assessment tor...; Question 49: Susan, a software developer, wants her web API to update oth...; Question 50: Todd has been asked by the security officer to purchase a co...; Question 51: Ricardo has discovered the username for an application in hi...; Question 52: Gilbert, a web developer, uses a centralized web API to redu...; Question 53: What is the proper response for a NULL scan if the port is c...; 1 commentQuestion 54: Stella, a professional hacker, performs an attack on web ser...; Question 55: What is the file that determines the basic configuration (sp...; Question 56: An attacker, using a rogue wireless AP, performed an MITM at...; Question 57: You have been authorized to perform a penetration test again...; Question 58: What is the purpose of DNS AAAA record?...; Question 59: You are tasked to configure the DHCP server to lease the las...; Question 60: Andrew is an Ethical Hacker who was assigned the task of dis...; Question 61: _________ is a tool that can hide processes from the process...; Question 62: Which address translation scheme would allow a single public...; Question 63: Sam, a professional hacker. targeted an organization with in...; Question 64: A "Server-Side Includes" attack refers to the exploitation o...; Question 65: You have successfully logged on a Linux system. You want to ...; Question 66: Andrew is an Ethical Hacker who was assigned the task of dis...; Question 67: Gerard, a disgruntled ex-employee of Sunglass IT Solutions, ...; Question 68: A company's security policy states that all Web browsers mus...; Question 69: Which of these is capable of searching for and locating rogu...; Question 70: Josh has finished scanning a network and has discovered mult...; Question 71: An attacker attaches a rogue router in a network. He wants t...; Question 72: If a token and 4-digit personal identification number (PIN) ...; Question 73: CyberTech Inc. recently experienced SQL injection attacks on...; Question 74: You are using a public Wi-Fi network inside a coffee shop. B...; Question 75: Which of the following provides a security professional with...; Question 76: Ralph, a professional hacker, targeted Jane, who had recentl...; 1 commentQuestion 77: Robin, a professional hacker, targeted an organization's net...; Question 78: Miley, a professional hacker, decided to attack a target org...; Question 79: Johnson, an attacker, performed online research for the cont...; Question 80: Which of the following Bluetooth hacking techniques refers t...; Question 81: which type of virus can change its own code and then cipher ...; Question 82: Study the snort rule given below: (Exhibit) From the options...; Question 83: You are a security officer of a company. You had an alert fr...; Question 84: An attacker redirects the victim to malicious websites by se...; Question 85: The security team of Debry Inc. decided to upgrade Wi-Fi sec...; Question 86: Bob was recently hired by a medical company after it experie...; Question 87: Firewalk has just completed the second phase (the scanning p...; Question 88: which of the following protocols can be used to secure an LD...; Question 89: A "Server-Side Includes" attack refers to the exploitation o...; Question 90: You receive an e-mail like the one shown below. When you cli...; Question 91: A DDOS attack is performed at layer 7 to take down web infra...; Question 92: Eve is spending her day scanning the library computers. She ...; Question 93: Harper, a software engineer, is developing an email applicat...; Question 94: What is the BEST alternative if you discover that a rootkit ...; Question 95: Email is transmitted across the Internet using the Simple Ma...; Question 96: Allen, a professional pen tester, was hired by xpertTech sol...; Question 97: What type of virus is most likely to remain undetected by an...; Question 98: As a Certified Ethical Hacker, you were contracted by a priv...; 1 commentQuestion 99: Tony is a penetration tester tasked with performing a penetr...; Question 100: Johnson, an attacker, performed online research for the cont...; Question 101: At what stage of the cyber kill chain theory model does data...; Question 102: If a tester is attempting to ping a target that exists but r...; Question 103: A hacker is an intelligent individual with excellent compute...; Question 104: Which Metasploit Framework tool can help penetration tester ...; Question 105: What type of a vulnerability/attack is it when the malicious...; Question 106: Which among the following is the best example of the hacking...; Question 107: In Trojan terminology, what is a covert channel? (Exhibit)...; Question 108: George is a security professional working for iTech Solution...; Question 109: Which of the following allows attackers to draw a map or out...; Question 110: Wilson, a professional hacker, targets an organization for f...; Question 111: Sam is a penetration tester hired by Inception Tech, a secur...; Question 112: A penetration tester is conducting a port scan on a specific...; Question 113: Which of the following programs is usually targeted at Micro...; Question 114: In the context of Windows Security, what is a 'null' user?...; Question 115: Becky has been hired by a client from Dubai to perform a pen...; Question 116: Your organization has signed an agreement with a web hosting...; Question 117: What is the following command used for? sqlmap.py-u ,,http:/...; Question 118: What does the following command in netcat do? nc -l -u -p555...; Question 119: Ricardo has discovered the username for an application in hi...; Question 120: You are programming a buffer overflow exploit and you want t...; Question 121: What would be the fastest way to perform content enumeration...; Question 122: You are trying to break into a highly classified top-secret ...; Question 123: Alice, a professional hacker, targeted an organization's clo...; Question 124: Which of the following program infects the system boot secto...; Question 125: Which wireless security protocol replaces the personal pre-s...; Question 126: How can rainbow tables be defeated?...; Question 127: Samuel, a professional hacker, monitored and intercepted alr...; Question 128: You are analysing traffic on the network with Wireshark. You...; Question 129: what is the correct way of using MSFvenom to generate a reve...; Question 130: Session splicing is an IDS evasion technique in which an att...; Question 131: In order to tailor your tests during a web-application scan,...; Question 132: Attempting an injection attack on a web server based on resp...; Question 133: Attacker Steve targeted an organization's network with the a...; Question 134: You are performing a penetration test for a client and have ...; Question 135: Daniel Is a professional hacker who Is attempting to perform...; Question 136: Steve, an attacker, created a fake profile on a social media...; Question 137: John, a professional hacker, decided to use DNS to perform d...; Question 138: An organization has automated the operation of critical infr...; Question 139: Attempting an injection attack on a web server based on resp...; Question 140: During the process of encryption and decryption, what keys a...; Question 141: You have the SOA presented below in your Zone. Your secondar...; Question 142: You are a penetration tester working to test the user awaren...; Question 143: Which of the following is a passive wireless packet analyzer...; Question 144: You are logged in as a local admin on a Windows 7 system and...; Question 145: which of the following protocols can be used to secure an LD...; Question 146: There are multiple cloud deployment options depending on how...; Question 147: Which tool can be used to silently copy files from USB devic...; Question 148: What is the main security service a cryptographic hash provi...; Question 149: Jane, an ethical hacker, is testing a target organization's ...; Question 150: Attacker Lauren has gained the credentials of an organizatio...; Question 151: Bob, a network administrator at BigUniversity, realized that...; Question 152: Bob, a network administrator at BigUniversity, realized that...; Question 153: Samuel a security administrator, is assessing the configurat...; Question 154: jane, an ethical hacker. Is testing a target organization's ...; Question 155: Your company was hired by a small healthcare provider to per...; Question 156: Joel, a professional hacker, targeted a company and identifi...; Question 157: Windows LAN Manager (LM) hashes are known to be weak. Which ...; Question 158: Which is the first step followed by Vulnerability Scanners f...; Question 159: A company's policy requires employees to perform file transf...; Question 160: Bill is a network administrator. He wants to eliminate unenc...; Question 161: which of the following Bluetooth hacking techniques refers t...; Question 162: Let's imagine three companies (A, B and C), all competing in...; Question 163: Alice needs to send a confidential document to her coworker....; Question 164: The network users are complaining because their systems are ...; Question 165: After an audit, the auditors Inform you that there is a crit...; Question 166: In this attack, a victim receives an e-mail claiming from Pa...; Question 167: You are a penetration tester and are about to perform a scan...; Question 168: jane, an ethical hacker. Is testing a target organization's ...; Question 169: Steve, an attacker, created a fake profile on a social media...; Question 170: is a set of extensions to DNS that provide the origin authen...; Question 171: Which Intrusion Detection System is best applicable for larg...; Question 172: Why should the security analyst disable/remove unnecessary I...; Question 173: Ethical hacker Jane Doe is attempting to crack the password ...; Question 174: DNS cache snooping is a process of determining if the specif...; Question 175: Consider the following Nmap output: (Exhibit) what command-l...; Question 176: Morris, an attacker, wanted to check whether the target AP i...; Question 177: Thomas, a cloud security professional, is performing securit...; Question 178: Which of the following tools is used to analyze the files pr...; Question 179: You are tasked to perform a penetration test. While you are ...; Question 180: Techno Security Inc. recently hired John as a penetration te...; Question 181: Clark, a professional hacker, attempted to perform a Btlejac...; Question 182: Clark, a professional hacker, attempted to perform a Btlejac...; Question 183: OpenSSL on Linux servers includes a command line tool for te...; Question 184: Jude, a pen tester, examined a network from a hacker's persp...; Question 185: What did the following commands determine? (Exhibit)...; Question 186: If a tester is attempting to ping a target that exists but r...; Question 187: Which among the following is the best example of the hacking...; Question 188: Scenario: Joe turns on his home computer to access personal ...; Question 189: Consider the following Nmap output: (Exhibit) what command-l...; Question 190: Wilson, a professional hacker, targets an organization for f...; Question 191: Emily, an extrovert obsessed with social media, posts a larg...; Question 192: You are a penetration tester working to test the user awaren...; Question 193: Which of the following Google advanced search operators help...; Question 194: An attacker decided to crack the passwords used by industria...; Question 195: To invisibly maintain access to a machine, an attacker utili...; Question 196: Alice needs to send a confidential document to her coworker....; Question 197: Susan, a software developer, wants her web API to update oth...; Question 198: Which of the following Linux commands will resolve a domain ...; Question 199: Andrew is an Ethical Hacker who was assigned the task of dis...; Question 200: Clark is a professional hacker. He created and configured mu...; Question 201: Gilbert, a web developer, uses a centralized web API to redu...; Question 202: infecting a system with malware and using phishing to gain c...; Question 203: You have compromised a server on a network and successfully ...; Question 204: The security administrator of ABC needs to permit Internet t...; Question 205: Which of the following types of SQL injection attacks extend...; Question 206: What is the most common method to exploit the "Bash Bug" or ...; Question 207: A DDOS attack is performed at layer 7 to take down web infra...; Question 208: what is the port to block first in case you are suspicious t...; Question 209: Which of the following allows attackers to draw a map or out...; Question 210: in this attack, an adversary tricks a victim into reinstalli...; Question 211: What type of analysis is performed when an attacker has part...; Question 212: Samuel a security administrator, is assessing the configurat...; Question 213: Bob is doing a password assessment for one of his clients. B...; Question 214: A newly joined employee. Janet, has been allocated an existi...; Question 215: Internet Protocol Security IPsec is actually a suite pf prot...; Question 216: Which of the following are well known password-cracking prog...; Question 217: Nicolas just found a vulnerability on a public-facing system...; Question 218: You are attempting to run an Nmap port scan on a web server....; Question 219: At what stage of the cyber kill chain theory model does data...; Question 220: What is the common name for a vulnerability disclosure progr...; Question 221: To create a botnet. the attacker can use several techniques ...; Question 222: During a black-box pen test you attempt to pass IRC traffic ...; Question 223: You work for Acme Corporation as Sales Manager. The company ...; Question 224: While testing a web application in development, you notice t...; Question 225: You have been authorized to perform a penetration test again...; Question 226: A company's policy requires employees to perform file transf...; Question 227: The establishment of a TCP connection involves a negotiation...; Question 228: What does a firewall check to prevent particular ports and a...; Question 229: Which file is a rich target to discover the structure of a w...; Question 230: Bella, a security professional working at an it firm, finds ...; Question 231: What is the purpose of a demilitarized zone on a network?...; Question 232: What port number is used by LDAP protocol?...; Question 233: Jim's company regularly performs backups of their critical s...; Question 234: The network users are complaining because their system are s...; Question 235: Garry is a network administrator in an organization. He uses...; Question 236: which of the following Bluetooth hacking techniques refers t...; Question 237: An organization decided to harden its security against web-a...; Question 238: You are a penetration tester working to test the user awaren...; Question 239: Which of the following options represents a conceptual chara...; Question 240: Heather's company has decided to use a new customer relation...; Question 241: Which of the following tools are used for enumeration? (Choo...; Question 242: Techno Security Inc. recently hired John as a penetration te...; Question 243: Garry is a network administrator in an organization. He uses...; Question 244: John, a professional hacker, performs a network attack on a ...; Question 245: What term describes the amount of risk that remains after th...; Question 246: Which of the following is the best countermeasure to encrypt...; Question 247: Alice, a professional hacker, targeted an organization's clo...; Question 248: There have been concerns in your network that the wireless n...; Question 249: Calvin, a software developer, uses a feature that helps him ...; Question 250: What is the role of test automation in security testing?...; Question 251: User A is writing a sensitive email message to user B outsid...; Question 252: Richard, an attacker, targets an MNC. In this process, he us...; Question 253: Harry. a professional hacker, targets the IT infrastructure ...; Question 254: You want to do an ICMP scan on a remote computer using hping...; Question 255: While testing a web application in development, you notice t...; Question 256: An attacker scans a host with the below command. Which three...; Question 257: While browsing his Facebook teed, Matt sees a picture one of...; Question 258: A large company intends to use Blackberry for corporate mobi...; Question 259: Bobby, an attacker, targeted a user and decided to hijack an...; Question 260: Judy created a forum, one day. she discovers that a user is ...; Question 261: What is the file that determines the basic configuration (sp...; Question 262: If you want to only scan fewer ports than the default scan u...; Question 263: Abel, a cloud architect, uses container technology to deploy...; Question 264: Dorian is sending a digitally signed email to Poly. With whi...; Question 265: Dayn, an attacker, wanted to detect if any honeypots are ins...; Question 266: In an internal security audit, the white hat hacker gains co...; Question 267: You are a penetration tester tasked with testing the wireles...; Question 268: jane, an ethical hacker. Is testing a target organization's ...; Question 269: Bob is acknowledged as a hacker of repute and is popular amo...; Question 270: Security administrator John Smith has noticed abnormal amoun...; Question 271: What piece of hardware on a computer's motherboard generates...; Question 272: if you send a TCP ACK segment to a known closed port on a fi...; Question 273: There have been concerns in your network that the wireless n...; Question 274: In Trojan terminology, what is a covert channel? (Exhibit)...; Question 275: which of the following Bluetooth hacking techniques refers t...; Question 276: This form of encryption algorithm is asymmetric key block ci...; Question 277: what is the port to block first in case you are suspicious t...; Question 278: What is one of the advantages of using both symmetric and as...; Question 279: Upon establishing his new startup, Tom hired a cloud service...; Question 280: in the Common Vulnerability Scoring System (CVSS) v3.1 sever...; Question 281: Attacker Rony installed a rogue access point within an organ...; Question 282: An attacker decided to crack the passwords used by industria...; Question 283: what are common files on a web server that can be misconfigu...; Question 284: Taylor, a security professional, uses a tool to monitor her ...; Question 285: The configuration allows a wired or wireless network interfa...; Question 286: While performing online banking using a Web browser, a user ...; Question 287: You just set up a security system in your network. In what k...; Question 288: A security analyst is performing an audit on the network to ...; Question 289: Bella, a security professional working at an it firm, finds ...

Question 54/289

Recent Comments (The most recent comments are at the top.)

LEAVE A REPLY

Download PDF File