9.4 Final Assessment

Question 1

Service Desk is receiving complaints about users not being able to connect to the wireless network. After some analysis, you find indications of a wireless attack designed to block Wi-Fi signals. Which best describes this attack?

Answer 1

Jamming

Question 2

Your organization requires that you explain to the software development team that they must take precautions not to allow inputs of this kind of text: ‘ or 1=1–. What attack is related to this text?

Answer 2

SQL injection

Question 3

Your websites need protection against cross-site scripting and SQL injection. Which best describes a practice for defending against those two specific attacks?

Answer 3

Input validation

Question 4

You instruct developers about a type of attack that exploits site vulnerabilities using the Document Object Model (DOM). What best describes this type of attack?

Answer 4

XSS

Question 5

Software development teams use defined logic to avoid the condition of a pointer returning NULL because this may allow threat actors to run arbitrary code. What best describes the application behavior in this situation?

Answer 5

A dereference exception

Question 6

Spam over Internet messaging services is known as?

Answer 6

SPIM

Question 7

Unusual outbound network traffic, geolocation oddities, and high database reads are examples of what threat intelligence key element?

Answer 7

Indicators of compromise

Question 8

Providers like SpamHaus and VirusTotal are examples of what type of threat intelligence source?

Answer 8

Open Source Intelligence (OSINT)

Question 9

What bad programming practice can cause a web application vulnerability concerning invalid data?

Answer 9

Improper input handling

Question 10

You have received reports from some users on your network that their financial credentials have been stolen. All of them use the same financial organization for their personal banking. The users report that they visited a fake bank website, and their logins were compromised. All the website’s bank visits were made from your organization’s network, and all of them said they typed in the correct URL. What is the most likely explanation for this situation?

Answer 10

DNS poisoning

Question 11

Mapping wireless networks while driving is known as:

Answer 11

War driving

Question 12

You have received reports that certain OS versions might produce memory leaks. Why is that potential condition a security issue?

Answer 12

It may signal malicious processes

Question 13

During a scan review of the infrastructure, you found a server reporting the Internet Information Server is vulnerable to an exploit reported by the manufacturer months ago. This is despite your belief that the server was fully patched. After checking to see if IIS is missing patches, you find that it is indeed fully patched. What could be the cause of this discrepancy?

Answer 13

A false positive

Question 14

You have been assigned as the network security administrator for a company. After some analysis, you discover the company’s networks have sustained a series of advanced attacks over a period of time. Which of the following options describes this attack best?

Answer 14

APT

Question 15

Entering JavaScript into an input text box to enter text that will be viewed by other users is an example of what type of attack?

Answer 15

Cross-site scripting