312-50v12 Exam Dumps | Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that

<< Prev Question Next Question >>

Question 27/197

Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections. Which of the following attack techniques is used by Stella to compromise the web services?

A. XML injection

B. WS-Address spoofing

C. SOAPAction spoofing

D. Web services parsing attacks

Question List (197q): Question 1: A new wireless client is configured to join a 802.11 network...; Question 2: What is the known plaintext attack used against DES which gi...; Question 3: When discussing passwords, what is considered a brute force ...; Question 4: Alex, a cloud security engineer working in Eyecloud Inc. is ...; Question 5: Bill has been hired as a penetration tester and cyber securi...; Question 6: Switches maintain a CAM Table that maps individual MAC addre...; Question 7: What did the following commands determine? (Exhibit)...; Question 8: While examining audit logs, you discover that people are abl...; Question 9: In the context of password security, a simple dictionary att...; Question 10: Which wireless security protocol replaces the personal pre-s...; Question 11: Bob, a system administrator at TPNQM SA, concluded one day t...; Question 12: Which of the following steps for risk assessment methodology...; Question 13: In the field of cryptanalysis, what is meant by a "rubber-ho...; Question 14: What is the first step for a hacker conducting a DNS cache p...; Question 15: Your company performs penetration tests and security assessm...; Question 16: _________ is a type of phishing that targets high-profile ex...; Question 17: An attacker runs netcat tool to transfer a secret file betwe...; Question 18: An Internet Service Provider (ISP) has a need to authenticat...; Question 19: Which mode of IPSec should you use to assure security and co...; Question 20: Morris, a professional hacker, performed a vulnerability sca...; Question 21: An incident investigator asks to receive a copy of the event...; Question 22: Jude, a pen tester, examined a network from a hacker's persp...; Question 23: This kind of password cracking method uses word lists in com...; Question 24: Harris is attempting to identify the OS running on his targe...; Question 25: Which of these is capable of searching for and locating rogu...; Question 26: Every company needs a formal written document which spells o...; Question 27: Stella, a professional hacker, performs an attack on web ser...; Question 28: While using your bank's online servicing you notice the foll...; Question 29: Which of the following statements is TRUE?...; Question 30: You are attempting to run an Nmap port scan on a web server....; Question 31: Log monitoring tools performing behavioral analysis have ale...; Question 32: This type of injection attack does not show any error messag...; Question 33: what is the correct way of using MSFvenom to generate a reve...; Question 34: A newly joined employee. Janet, has been allocated an existi...; Question 35: While performing an Nmap scan against a host, Paola determin...; Question 36: Which of the following incident handling process phases is r...; Question 37: What is one of the advantages of using both symmetric and as...; Question 38: joe works as an it administrator in an organization and has ...; Question 39: George, an employee of an organization, is attempting to acc...; Question 40: An unauthorized individual enters a building following an em...; Question 41: Harry. a professional hacker, targets the IT infrastructure ...; Question 42: What is the following command used for? sqlmap.py-u ,,http:/...; Question 43: Eric has discovered a fantastic package of tools named Dsnif...; Question 44: When a security analyst prepares for the formal security ass...; Question 45: You need a tool that can do network intrusion prevention and...; Question 46: What is the purpose of DNS AAAA record?...; Question 47: John, a professional hacker, targeted CyberSol Inc., an MNC....; Question 48: Which of the following tools is used to analyze the files pr...; Question 49: Gilbert, a web developer, uses a centralized web API to redu...; Question 50: Mike, a security engineer, was recently hired by BigFox Ltd....; Question 51: What is GINA?; Question 52: Tony wants to integrate a 128-bit symmetric block cipher wit...; Question 53: Eric, a cloud security engineer, implements a technique for ...; Question 54: Tony is a penetration tester tasked with performing a penetr...; Question 55: The tools which receive event logs from servers, network equ...; Question 56: what firewall evasion scanning technique make use of a zombi...; Question 57: Which of the following types of SQL injection attacks extend...; Question 58: Upon establishing his new startup, Tom hired a cloud service...; Question 59: John is an incident handler at a financial institution. His ...; Question 60: A security analyst is performing an audit on the network to ...; Question 61: You have retrieved the raw hash values from a Windows 2000 D...; Question 62: What is the file that determines the basic configuration (sp...; Question 63: Larry, a security professional in an organization, has notic...; Question 64: Alice needs to send a confidential document to her coworker....; Question 65: Roma is a member of a security team. She was tasked with pro...; Question 66: An attacker changes the profile information of a particular ...; Question 67: Which of the following antennas is commonly used in communic...; Question 68: The change of a hard drive failure is once every three years...; Question 69: Upon establishing his new startup, Tom hired a cloud service...; Question 70: A security analyst uses Zenmap to perform an ICMP timestamp ...; Question 71: You are a Network Security Officer. You have two machines. T...; Question 72: The Payment Card Industry Data Security Standard (PCI DSS) c...; Question 73: John, a professional hacker, targeted an organization that u...; Question 74: Which among the following is the best example of the hacking...; Question 75: When analyzing the IDS logs, the system administrator notice...; Question 76: Which of the following LM hashes represent a password of les...; Question 77: Dorian Is sending a digitally signed email to Polly, with wh...; Question 78: While performing an Nmap scan against a host, Paola determin...; Question 79: Henry Is a cyber security specialist hired by BlackEye - Cyb...; Question 80: A pen tester is configuring a Windows laptop for a test. In ...; Question 81: David is a security professional working in an organization,...; Question 82: Which Nmap option would you use if you were not concerned ab...; Question 83: Sam is working as a system administrator In an organization....; Question 84: John, a professional hacker, performs a network attack on a ...; Question 85: Switches maintain a CAM Table that maps individual MAC addre...; Question 86: Fred is the network administrator for his company. Fred is t...; Question 87: What is the least important information when you analyze a p...; Question 88: Which of the following Metasploit post-exploitation modules ...; Question 89: Which type of sniffing technique is generally referred as Mi...; Question 90: In order to tailor your tests during a web-application scan,...; Question 91: Which type of security feature stops vehicles from crashing ...; Question 92: env x='(){ :;};echo exploit' bash -c 'cat/etc/passwd' What i...; Question 93: The security team of Debry Inc. decided to upgrade Wi-Fi sec...; Question 94: ping-* 6 192.168.0.101 Output: Pinging 192.168.0.101 with 32...; Question 95: An attacker identified that a user and an access point are b...; Question 96: A large mobile telephony and data network operator has a dat...; Question 97: Which of the following Metasploit post-exploitation modules ...; Question 98: The configuration allows a wired or wireless network interfa...; Question 99: Consider the following Nmap output: (Exhibit) what command-l...; Question 100: Mirai malware targets loT devices. After infiltration, it us...; Question 101: Heather's company has decided to use a new customer relation...; Question 102: You receive an e-mail like the one shown below. When you cli...; Question 103: Based on the below log, which of the following sentences are...; Question 104: To hide the file on a Linux system, you have to start the fi...; Question 105: Which tier in the N-tier application architecture is respons...; Question 106: Mason, a professional hacker, targets an organization and sp...; Question 107: Ricardo has discovered the username for an application in hi...; Question 108: You have successfully comprised a server having an IP addres...; Question 109: An LDAP directory can be used to store information similar t...; Question 110: Attacker Steve targeted an organization's network with the a...; Question 111: John wants to send Marie an email that includes sensitive in...; Question 112: Attacker Simon targeted the communication network of an orga...; Question 113: Annie, a cloud security engineer, uses the Docker architectu...; Question 114: You are analysing traffic on the network with Wireshark. You...; Question 115: A network administrator discovers several unknown files in t...; Question 116: Which of the following describes the characteristics of a Bo...; Question 117: What type of analysis is performed when an attacker has part...; Question 118: Becky has been hired by a client from Dubai to perform a pen...; Question 119: How can rainbow tables be defeated?...; Question 120: George is a security professional working for iTech Solution...; Question 121: Jacob works as a system administrator in an organization. He...; Question 122: infecting a system with malware and using phishing to gain c...; Question 123: Session splicing is an IDS evasion technique in which an att...; Question 124: In the context of Windows Security, what is a 'null' user?...; Question 125: John, a professional hacker, decided to use DNS to perform d...; Question 126: After an audit, the auditors Inform you that there is a crit...; Question 127: During the enumeration phase. Lawrence performs banner grabb...; Question 128: Judy created a forum, one day. she discovers that a user is ...; Question 129: This form of encryption algorithm is asymmetric key block ci...; Question 130: Nathan is testing some of his network devices. Nathan is usi...; Question 131: An organization decided to harden its security against web-a...; Question 132: When configuring wireless on his home router, Javik disables...; Question 133: What is correct about digital signatures?...; Question 134: What would be the fastest way to perform content enumeration...; Question 135: John is investigating web-application firewall logs and obse...; Question 136: Session splicing is an IDS evasion technique in which an att...; Question 137: This is an attack that takes advantage of a web site vulnera...; Question 138: Daniel Is a professional hacker who Is attempting to perform...; Question 139: Which tool can be used to silently copy files from USB devic...; Question 140: jane, an ethical hacker. Is testing a target organization's ...; Question 141: Clark, a professional hacker, was hired by an organization l...; Question 142: Techno Security Inc. recently hired John as a penetration te...; Question 143: Eric, a cloud security engineer, implements a technique for ...; Question 144: Which type of malware spreads from one system to another or ...; Question 145: Suppose your company has just passed a security risk assessm...; Question 146: Thomas, a cloud security professional, is performing securit...; Question 147: Peter extracts the SIDs list from Windows 2000 Server machin...; Question 148: In both pharming and phishing attacks, an attacker can creat...; Question 149: An Internet Service Provider (ISP) has a need to authenticat...; Question 150: You have been authorized to perform a penetration test again...; Question 151: During the process of encryption and decryption, what keys a...; Question 152: Don, a student, came across a gaming app in a third-party ap...; Question 153: SQL injection (SQLi) attacks attempt to inject SQL syntax in...; Question 154: Let's imagine three companies (A, B and C), all competing in...; Question 155: Under what conditions does a secondary name server request a...; Question 156: Bella, a security professional working at an it firm, finds ...; Question 157: You are a security officer of a company. You had an alert fr...; Question 158: This form of encryption algorithm is asymmetric key block ci...; Question 159: John, a disgruntled ex-employee of an organization, contacte...; Question 160: You have successfully logged on a Linux system. You want to ...; Question 161: Samuel a security administrator, is assessing the configurat...; Question 162: John, a professional hacker, decided to use DNS to perform d...; Question 163: Gavin owns a white-hat firm and is performing a website secu...; Question 164: Dayn, an attacker, wanted to detect if any honeypots are ins...; Question 165: which of the following information security controls creates...; Question 166: When you are getting information about a web server, it is v...; Question 167: The network administrator at Spears Technology, Inc has conf...; Question 168: You went to great lengths to install all the necessary techn...; Question 169: Bill is a network administrator. He wants to eliminate unenc...; Question 170: Which regulation defines security and privacy controls for F...; Question 171: John, a security analyst working for an organization, found ...; Question 172: Elante company has recently hired James as a penetration tes...; Question 173: You are a penetration tester tasked with testing the wireles...; Question 174: Which of the following options represents a conceptual chara...; Question 175: You are tasked to configure the DHCP server to lease the las...; Question 176: What is the proper response for a NULL scan if the port is c...; Question 177: When considering how an attacker may exploit a web server, w...; Question 178: Which of the following tools performs comprehensive tests ag...; Question 179: Robin, an attacker, is attempting to bypass the firewalls of...; Question 180: Harper, a software engineer, is developing an email applicat...; Question 181: How is the public key distributed in an orderly, controlled ...; Question 182: Which of the following is considered an exploit framework an...; Question 183: Mary, a penetration tester, has found password hashes in a c...; Question 184: An attacker identified that a user and an access point are b...; Question 185: Steve, a scientist who works in a governmental security agen...; Question 186: Shiela is an information security analyst working at HiTech ...; Question 187: Susan has attached to her company's network. She has managed...; Question 188: DHCP snooping is a great solution to prevent rogue DHCP serv...; Question 189: In this attack, a victim receives an e-mail claiming from Pa...; Question 190: Widespread fraud ac Enron. WorldCom, and Tyco led to the cre...; Question 191: What does the -oX flag do in an Nmap scan?...; Question 192: Robert, a professional hacker, is attempting to execute a fa...; Question 193: Boney, a professional hacker, targets an organization for fi...; Question 194: what are common files on a web server that can be misconfigu...; Question 195: which of the following Bluetooth hacking techniques refers t...; Question 196: From the following table, identify the wrong answer in terms...; Question 197: Elliot is in the process of exploiting a web application tha...

Question 27/197

LEAVE A REPLY

Download PDF File