312-50 practice questions 181–190

1. Question 181 · 888 in bank

   What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

   • AThe request to the web server is not visible to the administrator of the vulnerable application.
   • BThe attack is called "Blind" because, although the application properly filters user input, it is still vulnerable to code injection.
   • CThe successful attack does not show an error message to the administrator of the affected application.
   • DThe vulnerable application does not display errors with information about the injection results to the attacker.

   Show answer

   Answer: D

   Explanation

   When an attacker exploits SQL injection, sometimes the web application displays error messages from the database complaining that the SQL Query’s syntax is incorrect. Blind SQL injection is nearly identical to normal SQL Injection, the only difference being the way the data is retrieved from the database. When the database does not output data to the web page, an attacker is forced to steal data by asking the database a series of true or false questions. This makes exploiting the SQL Injection vulnerability more difficult, but not impossible. .

   Source: Adapted from community discussion — WZ1122

   Next question

2. Question 182 · 888 in bank

   What does the `"oX flag do in an Nmap scan?

   • APerform an eXpress scan
   • BOutput the results in truncated format to the screen
   • COutput the results in XML format to a file
   • DPerform an Xmas scan

   Show answer

   Answer: C

   Next question

3. Question 183 · 888 in bank

   Allen, a professional pen tester, was hired by XpertTech Solutions to perform an attack simulation on the organization’s network resources. To perform the attack, he took advantage of the NetBIOS API and targeted the NetBIOS service. By enumerating NetBIOS, he found that port 139 was open and could see the resources that could be accessed or viewed on a remote system. He came across many NetBIOS codes during enumeration. Identify the NetBIOS code used for obtaining the messenger service running for the logged-in user?

   • A<00>
   • B<20>
   • C<03>
   • D<1B>

   Show answer

   Answer: C

   Next question

4. Question 184 · 888 in bank

   During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?

   • AUsing the Metasploit psexec module setting the SA / Admin credential
   • BInvoking the stored procedure xp_shell to spawn a Windows command shell
   • CInvoking the stored procedure cmd_shell to spawn a Windows command shell
   • DInvoking the stored procedure xp_cmdshell to spawn a Windows command shell

   Show answer

   Answer: D

   Next question

5. Question 185 · 888 in bank

   Code injection is a form of attack in which a malicious user:

   • AInserts text into a data field that gets interpreted as code
   • BGets the server to execute arbitrary code using a buffer overflow
   • CInserts additional code into the JavaScript running in the browser
   • DGains access to the codebase on the server and inserts new code

   Show answer

   Answer: A

   Next question

6. Question 186 · 888 in bank

   Don, a student, came across a gaming app in a third-party app store and installed it. Subsequently, all the legitimate apps in his smartphone were replaced by deceptive applications that appeared legitimate. He also received many advertisements on his smartphone after installing the app. What is the attack performed on Don in the above scenario?

   • ASIM card attack
   • BClickjacking
   • CSMS phishing attack
   • DAgent Smith attack

   Show answer

   Answer: D

   Next question

7. Question 187 · 888 in bank

   The precaution of prohibiting employees from bringing personal computing devices into a facility is what type of security control?

   • APhysical
   • BProcedural
   • CTechnical
   • DCompliance

   Show answer

   Answer: B

   Explanation

   Procedural security controls are security controls that mitigate identified risks by way of policies, procedures or guidelines. As opposed to other controls, procedural controls rely on users to follow rules or performs certain steps that are not necessarily enforced by technical or physical means.

   Source: Adapted from community discussion — simplimarvelous

   Next question

8. Question 188 · 888 in bank

   The collection of potentially actionable, overt, and publicly available information is known as

   • AOpen-source intelligence
   • BHuman intelligence
   • CSocial intelligence
   • DReal intelligence

   Show answer

   Answer: A

   Next question

9. Question 189 · 888 in bank

   Which Intrusion Detection System is best applicable for large environments where critical assets on the network need extra scrutiny and is ideal for observing sensitive network segments?

   • AHoneypots
   • BFirewalls
   • CNetwork-based intrusion detection system (NIDS)
   • DHost-based intrusion detection system (HIDS)

   Show answer

   Answer: C

   Next question

10. Question 190 · 888 in bank

    Samuel, a security administrator, is assessing the configuration of a web server. He noticed that the server permits SSLv2 connections, and the same private key certificate is used on a different server that allows SSLv2 connections. This vulnerability makes the web server vulnerable to attacks as the SSLv2 server can leak key information. Which of the following attacks can be performed by exploiting the above vulnerability?

    • APadding oracle attack
    • BDROWN attack
    • CDUHK attack
    • DSide-channel attack

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-50 practice, question 181. 888 questions available.