Incorrect Study Questions

Question 1

Frank wants to verify that no unnecessary ports and services are available on his systems, but he cannot run a vulnerability scanner. What is his best option?

1. Passive network capture to detect services
2. Configuration review

Answer 1

configuration review

Question 2

Ahmed has hundreds of systems spread across multiple locations and wants to better handle the amount of data that they create. Which of the following two technologies can help?

1. snetiment analysis and user behaviour analysis
2. security monitoring and log collectors
3. packet capture and log aggregation
4. log aggregation and log collectors

Answer 2

4

Question 3

Frank finds that an attacker has used a vulnerability in a web app that his company runs and has then used that exploit to obtain root privileges on the web server. Which of the following types of attacks has he found?

Privilege escelation

cross-site scripting

Answer 3

Privilege escelation

Question 4

Which of the following types of penetration tests is being done when the tester is suplied with extensive knowledge of the target network?

Full disclosure

Known environment

Answer 4

Known environment

Question 5

Which of the following are the two most common goals of invoice scams?

Receiving money or stealing cryptocurrency

Receiving money or acquiring credentials

Answer 5

receiving money or aquiring credentials

Question 6

What browser feature is used to help prevent successful URL redirection attacks?

displaying the full real URL

cert expiration tracking

enabling javascript

disabiling cookies

Answer 6

displaying the full real URL

Question 7

Which of the following types of attacks is an SSL stripping attack?

Downgrade attack

on-path attack

Answer 7

on-path attack

Question 8

A penetration tester calls a staff member for her target organization and introduces herself as a member of the IT team. She inquires if the staff member has addressed a problem with their system, then proceeds to ask for details about the individual, claiming she needs to verify that she is talking to the right person. Which of the following types of social engineering attack is this?

watering hole

pretexting

shoulder surfing

prepending

Answer 8

pretexting

• Social engineering type that involves using false motive and lyting to obtain information