CEHv12 Practice Exam & Simulations

Jack sent an email to Jenny with a business proposal. Jenny accepted it and fulfilled all her obligations. Jack suddenly refused his offer when everything was ready and said that he had never sent an email. Which of the following digital signature properties will help Jenny prove that Jack is lying?

You have been assigned the task of defending the company from network sniffing. Which of the following is the best option for this task?

Which of the following SQL injection attack does an attacker usually bypassing user authentication and extract data by using a conditional OR clause so that the condition of the WHERE clause will always be true?

The firewall prevents packets from entering the organization through certain ports and applications. What does this firewall check?

Which of the following tools is a command-line vulnerability scanner that scans web servers for dangerous files/CGIs?

Which of the following incident handling process phases is responsible for defining rules, employees training, creating a back-up, and preparing software and hardware resources before an incident occurs?

Black hat hacker Ivan wants to implement a man-in-the-middle attack on the corporate network. For this, he connects his router to the network and redirects traffic to intercept packets. What can the administrator do to mitigate the attack?

Which of the following is a network software suite designed for 802.11 WEP and WPA-PSK keys cracking that can recover keys once enough data packets have been captured?

What is a set of extensions to DNS that provide to DNS clients (resolvers) origin authentication, authenticated denial of existence and data integrity, but not availability or confidentiality?

Which of the following best describes a software firewall?

Which of the following is an encryption technique where data is encrypted by a sequence of photons that have a spinning trait while travelling from one end to another?

Your company has a risk assessment, and according to its results, the risk of a breach in the main company application is 40%. Your cybersecurity department has made changes to the application and requested a re-assessment of the risks. The assessment showed that the risk fell to 12%, with a risk threshold of 20%. Which of the following options would be the best from a business point of view?

Which of the following can be designated as “Wireshark for CLI”?

Attacker uses various IDS evasion techniques to bypass intrusion detection mechanisms. At the same time, IDS is configured to detect possible violations of the security policy, including unauthorized access and misuse. Which of the following evasion method depend on the Time-to-Live (TTL) fields of a TCP/IP ?

John performs black-box testing. It tries to pass IRC traffic over port 80/TCP from a compromised web-enabled host during the test. Traffic is blocked, but outbound HTTP traffic does not meet any obstacles. What type of firewall checks outbound traffic?

Josh, a security analyst, wants to choose a tool for himself to examine links between data. One of the main requirements is to present data using graphs and link analysis. Which of the following tools will meet John’s requirements?

Session splicing is an IDS evasion technique that exploits how some IDSs do not reconstruct sessions before performing pattern matching on the data. The idea behind session splicing is to split data between several packets, ensuring that no single packet matches any patterns within an IDS signature. Which tool can be used to perform session splicing attacks?

Ferdinand installs a virtual communication tower between the two authentic endpoints to mislead the victim. What attack does Ferdinand perform?

Why is a penetration test considered to be better than a vulnerability scan?

Identify Secure Hashing Algorithm, which produces a 160-bit digest from a message on principles similar to those used in MD4 and MD5?

Rajesh, the system administrator analyzed the IDS logs and noticed that when accessing the external router from the administrator’s computer to update the router configuration, IDS registered alerts. What type of an alert is this?

Identify a vulnerability in OpenSSL that allows stealing the information protected under normal conditions by the SSL/TLS encryption used to secure the Internet?

For the company, an important criterion is the immutability of the financial reports sent by the financial director to the accountant. They need to be sure that the accountant received the reports and it hasn’t been changed. How can this be achieved?

Ivan, the black hat hacker, split the attack traffic into many packets such that no single packet triggers the IDS. Which IDS evasion technique does Ivan use?

What are the two main conditions for a digital signature?

Which of the following tools is packet sniffer, network detector and IDS for 802.11(a, b, g, n) wireless LANs?

John, a cybersecurity specialist, received a copy of the event logs from all firewalls, Intrusion Detection Systems (IDS) and proxy servers on a company’s network. He tried to match all the registered events in all the logs, and he found that their sequence didn’t match. What can cause such a problem?

Which regulation defines security and privacy controls for all U.S. federal information systems except those related to national security?

What is meant by a “rubber-hose” attack in cryptography?

Ivan, an evil hacker, is preparing to attack the network of a financial company. To do this, he wants to collect information about the operating systems used on the company’s computers. Which of the following techniques will Ivan use to achieve the desired result?

What identifies malware by collecting data from protected computers while analyzing it on the provider’s infrastructure instead of locally?

Which of the following does not apply to IPsec?

Which of the options presented below is not a Bluetooth attack?

What best describes two-factor authentication for a credit card (using a card and pin)?

Which of the following is the method of determining the movement of a data packet from an untrusted external host to a protected internal host through a firewall?

Which of the following best describes the “white box testing” methodology?

What is an automated software testing technique that involves providing invalid, unexpected, or random data as inputs to a computer program?

What means the flag “-oX” in a Nmap scan?

Which of the following cipher is based on factoring the product of two large prime numbers?

How works the mechanism of a Boot Sector Virus?

Which of the following is a protocol that used for querying databases that store the registered users or assignees of an Internet resource, such as a domain name, an IP address block or an autonomous system?

You managed to compromise a server with an IP address of 10.10.0.5, and you want to get fast a list of all the machines in this network. Which of the following Nmap command will you need?

Let’s assume that you decided to use PKI to protect the email you will send. At what layer of the OSI model will this message be encrypted and decrypted?

Define Metasploit module used to perform arbitrary, one-off actions such as port scanning, denial of service, SQL injection and fuzzing?

Often, for a successful attack, hackers very skillfully simulate phishing messages. To do this, they collect the maximum information about the company that they will attack: emails of real employees (including information about the hierarchy in the company), information about the appearance of the message (formatting, logos), etc. What is the name of this stage of the hacker’s work?

Elon plans to make it difficult for the packet filter to determine the purpose of the packet when scanning. Which of the following scanning techniques will Elon use?

The evil hacker Ivan has installed a remote access Trojan on a host. He wants to be sure that when a victim attempts to go to “www.site.com” that the user is directed to a phishing site. Which file should Ivan change in this case?

Maria is surfing the internet and try to find information about Super Security LLC. Which process is Maria doing?

Alex, a cyber security specialist, should conduct a pentest inside the network, while he received absolutely no information about the attacked network. What type of testing will Alex conduct?

Maria conducted a successful attack and gained access to a Linux server. She wants to avoid that NIDS will not catch the succeeding outgoing traffic from this server in the future. Which of the following is the best way to avoid detection of NIDS?

Michael works as a system administrator. He receives a message that several sites are no longer available. Michael tried to go to the sites by URL, but it didn’t work. Then he tried to ping the sites and enter IP addresses in the browser – it worked. What problem could Michael identify?

Andrew is conducting a penetration test. He is now embarking on sniffing the target network. What is not available for Andrew when sniffing the network?

Which one of the following Google search operators allows restricting results to those from a specific website?

Which type of viruses tries to hide from antivirus programs by actively changing and corrupting the chosen service call interruptions when they are being run?

Ivan, a black hat hacker, sends partial HTTP requests to the target webserver to exhaust the target server’s maximum concurrent connection pool. He wants to ensure that all additional connection attempts are rejected. What type of attack does Ivan implement?

With which of the following SQL injection attacks can an attacker deface a web page, modify or add data stored in a database and compromised data integrity?

John, a pentester, received an order to conduct an internal audit in the company. One of its tasks is to search for open ports on servers. Which of the following methods is the best solution for this task?

John, a system administrator, is learning how to work with new technology: Docker. He will use it to create a network connection between the container interfaces and its parent host interface. Which of the following network drivers is suitable for John?

Rajesh, a network administrator found several unknown files in the root directory of his FTP server. He was very interested in a binary file named “mfs”. Rajesh decided to check the FTP server logs and found that the anonymous user account logged in to the server, uploaded the files and ran the script using a function provided by the FTP server’s software. Also, he found that “mfs” file is running as a process and it listening to a network port. What kind of vulnerability must exist to make this attack possible?

The attacker posted a message and an image on the forum, in which he embedded a malicious link. When the victim clicks on this link, the victim’s browser sends an authenticated request to a server. What type of attack did the attacker use?

You know that the application you are attacking is vulnerable to an SQL injection, but you cannot see the result of the injection. You send a SQL query to the database, which makes the database wait before it can react. You can see from the time the database takes to respond, whether a query is true or false. What type of SQL injection did you use?

The evil hacker Antonio is trying to attack the IoT device. He will use several fake identities to create a strong illusion of traffic congestion, affecting communication between neighbouring nodes and networks. What kind of attack does Antonio perform?

Which of the following option is a security feature on switches leverages the DHCP snooping database to help prevent man-in-the-middle attacks?

Which of the following is the type of violation when an unauthorized individual enters a building following an employee through the employee entrance?

According to the Payment Card Industry Data Security Standard, when is it necessary to conduct external and internal penetration testing?

Which of the following Nmap’s commands allows you to most reduce the probability of detection by IDS when scanning common ports?

Which of the following layers in IoT architecture helps bridge the gap between two endpoints, such as a device and a client, and carries out message routing, message identification, and subscribing?

Ivan, an evil hacker, conducts an SQLi attack that is based on True/False questions. What type of SQLi does Ivan use?

Which of the following options represents a conceptual characteristic of an anomaly-based IDS over a signature-based IDS?

Identify Bluetooth attck techniques that is used in to send messages to users without the recipient’s consent, for example for guerrilla marketing campaigns?

Which of the following UDP ports is usually used by Network Time Protocol (NTP)?

Which of the following command will help you launch the Computer Management Console from” Run ” windows as a local administrator Windows 7?

Which of the following will allow you to prevent unauthorized network access to local area networks and other information assets by wireless devices?

Which of the following wireless standard has bandwidth up to 54 Mbit/s and signals in a regulated frequency spectrum around 5 GHz?

Alex, the penetration tester, performs a server scan. To do this, he uses the method where the TCP Header is split into many packets so that it becomes difficult to determine what packages are used for. Determine the scanning technique that Alex uses?

Michael, a technical specialist, discovered that the laptop of one of the employees connecting to a wireless point couldn’t access the Internet, but at the same time, it can transfer files locally. He checked the IP address and the default gateway. They are both on 192.168.1.0/24. Which of the following caused the problem?

Which of the following program attack both the boot sector and executable files?

Which of the following protocols is used in a VPN for setting up a secure channel between two devices?

What actions should you take if you find that the company that hired you is involved with human trafficking?

Identify the type of jailbreaking which allows user-level access and does not allow iboot-level access?

Which of the following flags will trigger Xmas scan?

What is a “Collision attack”?

Which of the following web application attack inject the special character elements “Carriage Return” and “Line Feed” into the user’s input to trick the web server, web application, or user into believing that the current object is terminated and a new object has been initiated?

Which of the following command-line flags set a stealth scan for Nmap?

The attacker enters its malicious data into intercepted messages in a TCP session since source routing is disabled. He tries to guess the responses of the client and server. What hijacking technique is described in this example?

What actions should be performed before using a Vulnerability Scanner for scanning a network?

Which of the following is the risk that remains after the amount of risk left over after natural or inherent risks have been reduced?

You are configuring the connection of a new employee’s laptop to join an 802.11 network. The new laptop has the same hardware and software as the laptops of other employees. You used the wireless packet sniffer and found that it shows that the Wireless Access Point (WAR) is not responding to the association requests being sent by the laptop. What can cause this problem?

Which of the following methods is best suited to protect confidential information on your laptop which can be stolen while travelling?

Which layer 3 protocol allows for end-to-end encryption of the connection?

Wireshark is one of the most important tools for a cybersecurity specialist. It is used for network troubleshooting, analysis, software, etc. And you often have to work with a packet bytes pane. In what format is the data presented in this pane?

Which of the following Nmap options will you use if you want to scan fewer ports than the default?

You makes a series of interactive queries, choosing subsequent plaintexts based on the information from the previous encryptions. What type of attack are you trying to perform?

Rajesh, a system administrator, noticed that some clients of his company were victims of DNS Cache Poisoning. They were redirected to a malicious site when they tried to access Rajesh’s company site. What is the best recommendation to deal with such a threat?

Determine what of the list below is the type of honeypots that simulates the real production network of the target organization?

Ivan, a black hat hacker, tries to call numerous random numbers inside the company, claiming he is from the technical support service. It offers company employee services in exchange for confidential data or login credentials. What method of social engineering does Ivan use?

The attacker tries to take advantage of vulnerability where the application does not verify if the user is authorized to access the internal object via its name or key. Which of the following queries best describes an attempt to exploit an insecure direct object using the name of the valid account “User 1”?

Which of the following is not included in the list of recommendations of PCI Data Security Standards?

Which of the following best describes code injection?

John, a penetration tester, decided to conduct SQL injection testing. He enters a huge amount of random data and observes changes in output and security loopholes in web applications. What SQL injection testing technique did John use?

The Web development team is holding an urgent meeting, as they have received information from testers about a new vulnerability in their Web software. They make an urgent decision to reduce the likelihood of using the vulnerability. The team beside to modify the software requirements to disallow users from entering HTML as input into their Web application. Determine the type of vulnerability that the test team found?

Which of the following requires establishing national standards for electronic health care transactions and national identifiers for providers, health insurance plans, and employers?

Philip, a cybersecurity specialist, needs a tool that can function as a network sniffer, record network activity, prevent and detect network intrusion. Which of the following tools is suitable for Philip?

Viktor, the white hat hacker, conducts a security audit. He gains control over a user account and tries to access another account’s sensitive information and files. How can he do this?

John needs to choose a firewall that can protect against SQL injection attacks. Which of the following types of firewalls is suitable for this task?

What is the purpose of the demilitarized zone?

You conduct an investigation and finds out that the browser of one of your employees sent malicious requests that the employee knew nothing about. Identify the web page vulnerability that the attacker used when the attack to your employee?

Alex, a cybersecurity specialist, received a task from the head to scan open ports. One of the main conditions was to use the most reliable type of TCP scanning. Which of the following types of scanning should Alex use?

After several unsuccessful attempts to extract cryptography keys using software methods, Mark is thinking about trying another code-breaking methodology. Which of the following will best suit Mark based on his unsuccessful attempts?

Which of the following is a logical collection of Internet-connected devices such as computers, smartphones or Internet of things (IoT) devices whose security has been breached and control ceded to a third party?

Which of the following application security testing method of white-box testing, in which only the source code of applications and their components is scanned for determines potential vulnerabilities in their software and architecture?

He sends this message over the Internet, and a “Usual company ” employee receives it. This means that the gateway of this company doesn’t prevent _____.

Johnny decided to gather information for identity theft from the target organization. He wants to redirect the organization’s web traffic to a malicious website. After some thought, he plans to perform DNS cache poisoning by exploiting the vulnerabilities in the DNS server software and wants to modify the original IP address of the target website to that of a malicious website.

Which of the following techniques does Johnny plan to use?

You need to transfer sensitive data of the organization between industrial systems securely. For these purposes, you have decided to use short-range wireless communication technology that meets the following requirements:

– Protocol based on the IEEE 203.15.4 standard;

– Range of 10-100 m.

– Designed for small-scale projects which need wireless connection.

Which of the following protocols will meet your requirements?

You need to assess the system used by your employee. During the assessment, you found that compromise was possible through user directories, registries, and other system parameters. Also, you discovered vulnerabilities such as native configuration tables, incorrect registry or file permissions, and software configuration errors.

Which of the following types of vulnerability assessments that you conducted?

Justin, the evil hacker, wants to steal Joanna’s data. He sends Joanna an email with a malicious link that looks legitimate. Joanna unknowingly clicks on the link, and it redirects her to a malicious web page, and John steals Joanna’s data.

Which of the following attacks is described in this scenario?

Which of the following is a type of virus detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities?

Identify the attack technique by description:

The attacker gains unauthorized access to the target network, remains there without being detected for a long time, and obtains sensitive information without sabotaging the organization.

Which of the following rootkit types sits undetected in the core components of the operating system?

Your company has decided to purchase a subscription to a cloud-hosted solution. After purchasing this solution, the only administrative task of your employees will be the management of user accounts. The provider will cover all hardware, operating system, and software administration (including patching and monitoring).

Which of the following is this type of solution?

You were instructed to check the configuration of the webserver and you found that the server permits SSLv2 connections, and the same private key certificate is used on a different server that allows SSLv2 connections. You understand that this vulnerability makes the web server vulnerable to attacks as the SSLv2 server can leak key information.

Which of the following attacks can an attacker perform using this vulnerability?

Identify the correct syntax for ICMP scan on a remote computer using hping2.

Which of the following Metasploit Framework tool can be used to bypass antivirus?

Identify the attack by description:

When performing this attack, an attacker installs a fake communication tower between two authentic endpoints to mislead a victim. He uses this virtual tower to interrupt the data transmission between the user and the real tower, attempting to hijack an active session. After that, the attacker receives the user’s request and can manipulate the virtual tower traffic and redirect a victim to a malicious website.

Which of the following is the firewall evasion scanning technique that uses a zombie system with low network activity?

Which of the following online tools allows attackers to gather information related to the model of the IoT device and the certifications granted to it?

You found that sensitive data, employee usernames, and passwords are shared in plaintext, paving the way for hackers to perform successful session hijacking.

Which of the following protocols, which can send data using encryption and digital certificates, will help solve this problem?

The attacker, during the attack, installed a scanner on a machine belonging to one of the employees of the target organization and scanned several machines on the same network to identify vulnerabilities to exploit further.

Which of the following type of vulnerability assessment tools employed the attacker?

Your organization’s network uses the network address 192.168.1.64 with mask 255.255.255.192, and servers in your organization’s network are in the addresses 192.168.1.140, 192.168.1.141 and 192.168.1.142. The attacker who wanted to find them couldn’t do it. He used the following command for the network scanning:

nmap 192.168.1.64/28

Why couldn’t the attacker find these servers?

You need to use information security controls that create an appealing isolated environment for hackers to prevent them from compromising critical targets while simultaneously gathering information about the hacker.

Which of the following will you use for this purpose?

The attacker plans to compromise the systems of organizations by sending malicious emails. He decides to use the tool to track the target’s emails and collect information such as senders’ identities, mail servers, sender IP addresses, and sender locations from different public sources. It also checks email addresses for leaks using haveibeenpwned.com API.

Which of the following tools is used by the attacker?

Andy, the evil hacker, wants to collect information about Nick. He discovered that Nick’s organization recently purchased new equipment. Andy decided to call Nick masquerading as a legitimate customer support executive, informing him that their new systems need to be serviced for proper functioning and notified him that customer support would send a computer technician. Nick agreed and agreed on a date for a meeting with Andy. A few days later, Andy entered the territory of Nick’s organization unhindered and gathered sensitive information by scanning terminals for passwords, searching for important documents in desks, and rummaging bins.

What is the type of attack technique Andy used on Nick?

While browsing his social media feed, Jacob noticed Jane’s photo with the caption: “Learn more about your friends,” as well as several personal questions under the post. Jacob is suspicious and texts Jane with questions about this post. Jane confirms that she did indeed post it. With the assurance that the post is legitimate, Jacob responds to the questions on the friend’s post. A few days later, Jacob tries to log into his bank account and finds out that it has been compromised and the password was changed.

What most likely happened?

You come to a party with friends and ask the apartment owner about access to his wireless network. It tells you the name of the wireless point and its password, but when you try to connect to it, the connection occurs without asking for a password.

Which of the following attacks could have occurred?

The attacker wants to attack the target organization’s Internet-facing web server. In case of a successful attack, he will also get access to back-end servers protected by a firewall. The attacker plans to use URL https://mainurl.com/feed.php?url=externalsite.com/feed/to to obtain a remote feed and alter the URL to the localhost to view all the local resources on the target server.

Which of the following types of attacks is the attacker planning to perform?

Which of the following algorithms uses a 64-bit block size that is encrypted three times with 56-bit keys?

Your organization is implementing a vulnerability management program to evaluate and control the risks and vulnerabilities in IT infrastructure. At the moment, your security department is in the vulnerability management lifecycle phase in which is executing the process of applying fixes on vulnerable systems to reduce the impact and severity of vulnerabilities.

Which of the following vulnerability-management phases is your security department in?

Identify the phase of the APT lifecycle that the hacker is in at the moment according to the scenario given below:

The hacker prepared for an attack and attempted to enter the target network using techniques such as sending spear-phishing emails and exploiting vulnerabilities on publicly available servers. Thanks to the successful attack, he deployed malware on the target system to establish an outbound connection and began to move on.

Which of the following is API designed to reduce complexity and increase the integrity of updating and changing which uses a web service that uses HTTP methods such as PUT, POST, GET, and DELETE and can improve the overall performance, visibility, scalability, reliability, and portability of an application?

The attacker created a fake account on a dating site and wrote to John with an offer to get acquainted. Fake profile photos enthralled John, and he initiated a conversation with the attacker’s fake account. After a few hours of communication, the attacker began asking about his company and eventually gathered all the essential information about the target company.

What is the social engineering technique the attacker used in this scenario?

Viktor, a professional hacker, targeted an organization’s network to sniff all the traffic. During this process, Viktor plugged in a rogue switch to an unused port in the LAN with a priority lower than any other switch in the network so that he could make it a root bridge that will later allow him to sniff all the traffic in the network.

What is the attack performed by Viktor in the above scenario?

Your friend installed the application from a third-party app store. After a while, some of the applications in his smartphone were replaced by malicious applications that appeared legitimate, and he began to receive a lot of advertising spam.

Which of the following attacks has your friend been subjected to?

Which of the following is a piece of hardware on a motherboard that generates encryption keys and only releases a part of the key so that decrypting a disk on a new piece of hardware is impossible?

Your organization conducts a vulnerability assessment for mitigating threats. Your task is to scan the organization by building an inventory of the protocols found on the organization’s machines to detect which ports are attached to services such as a web server, an email server or a database server. After this, you will need to select the vulnerabilities on each machine and start executing only the relevant tests.

Which of the following type of vulnerability assessment solutions will you perform?

You need to send an email containing confidential information. Your colleague advises you to use PGP to be sure that the data will be safe.
What should you use to communicate correctly using this type of encryption?

Your company follows the five-tier container technology architecture. Your colleagues use container technology to deploy applications/software. In this process, they include all dependencies, such as libraries and configuration files, binaries, and other resources that run independently from other processes in the cloud environment. Now they verify and validate image contents, sign images, and send them to the registries.

At which of the following tiers are your colleagues currently working according to the five-tier container technology architecture?

Ron, the hacker, is trying to crack an employee’s password of the target organization utilizing a rainbow table. During the break-in, he discovered that upon entering a password that extra characters are added to the password after submitting.

Which of the following countermeasures is the target company using to protect against rainbow tables?

You use Docker architecture in your application to employ a client/server model. And you need to use a component that can process API requests and handle various Docker objects, such as containers, volumes, images, and networks.

Which of the following Docker components will you use for these purposes?

Which of the following types of attack (that can use either HTTP GET or HTTP POST) allows an attacker to induce users to perform actions that they do not intend to perform?

Which of the following type of viruses avoid detection changing their own code, and then cipher itself multiple times as it replicates?

During a port scan on the target host, your colleague sends FIN/ACK probes and finds that an RST packet is sent in response by the target host, indicating that the port is closed.

Which of the following port scanning techniques did your colleague use?

Imagine the following scenario:

The hacker monitored and intercepted already established traffic between the victim and a host machine to predict the victim’s ISN. The hacker sent spoofed packets with the victim’s IP address to the host machine using the ISN. After this manipulation, the host machine responded with a packet having an incremented ISN. After this manipulation, the host machine responded with a packet having an incremented ISN. The victim’s connection was interrupted, and the hacker was able to connect with the host machine on behalf of the victim.

Which of the following attacks did the hacker perform?

You need to identify the OS of the target host. You want to use the Unicornscan tool to do this.

As a result of using the tool, you got the TTL value and determined that the target system is running a Windows OS.

Which of the following TTL values did you get when using the program?

Which of the following encryption algorithms is a symmetric key block cipher that has a 128-bit block size, and its key size can be up to 256 bits?

Antonio wants to infiltrate the target organization’s network. To accomplish this task, he used a technique using which he encoded packets with Unicode characters. The target company’s IDS cannot recognize the packets, but the target web server can decode them.

Which of the following techniques did Antonio use to evade the IDS system?

What is the common name of vulnerability disclosure programs opened by companies on HackerOne, Bugcrowd, etc.?

Marketing department employees complain that their computers are working slow and every time they attempt to go to a website, they receive a series of pop-ups with advertisements.

Which of the following type of malwares infected their systems?

The attacker performs an attack during which, using a MITM attack technique, he sends his session ID using. Firstly the attacker obtains a valid session ID by logging into a service and later feeds the same session ID to the victim. The session ID links the victim to the attacker’s account page without disclosing any information to the victim. Then the attacker waits until the victim clicks on the link, and after this, the sensitive payment details entered in a form are linked to the attacker’s account.

Which of the following attacks was the attacker performing?

Your organization uses LDAP for accessing distributed directory services. An attacker knowing this can try to take advantage of an automated tool to anonymously query the LDAP service for sensitive information such as usernames, addresses, departmental details, and server names to launch further attacks on your organization.

Which of the following tools can an attacker use to gather information from the LDAP service?

Your company has hired Jack, a cybersecurity specialist, to conduct another pentest. Jack immediately decided to get to work. He launched an attack on the DHCP servers by broadcasting forged DHCP requests and leased all the DHCP addresses available in the DHCP scope until the server could not issue any more IP addresses. As a result of these actions, a DDoS attack occurred, and legitimate employees could not access the company’s network.

Which of the following attacks did Jack perform?

You want to make your life easier and automate the process of updating applications. You decide to use a user-defined HTTP callback or push APIs that are raised based on trigger events. When this feature invokes, data is supplied to other applications so that users can instantly receive real-time information.

What is the name of this technique?

During testing execution, you established a connection with your computer using the SMB service and entered your login and password in plaintext. After the testing is completed, you need to delete the data about the login and password you entered so that no one can use it.

Which of the following files do you need to clear?

You simulate an attack on your organization’s network resources and target the NetBIOS service. You decided to use the NetBIOS API for this attack and perform an enumeration. After finishing, you found that port 139 was open, and you could see the resources that could be accessed or viewed on a remote system. Also, you came across many NetBIOS codes during enumeration.

Which of the following NetBIOS codes is used for obtaining the messenger service running for the logged-in user?

While checking your organization’s wireless network, you found that the wireless network component is not sufficiently secure. It uses an old encryption protocol designed to mimic wired encryption.

Which of the following protocols is used in your organization’s wireless network?

You must to identifying open ports in the target network and determining whether the ports are online and any firewall rule sets are encountered.

Which of the following nmap commands do you must use to perform the TCP SYN ping scan?

A post-breach forensic investigation revealed that a known vulnerability in Apache Struts was to blame for the Equifax data breach that affected 147 million people In September of 2017. At the same time fix was available from the software vendor for several months before the intrusion.

In which of the following security processes has failed?

Identify the technique by description:

The attacker wants to create a botnet. Firstly, he collects information about a large number of vulnerable machines to create a list. Secondly, they infect the machines. The list is divided by assigning half of the list to the newly compromised machines. The scanning process runs simultaneously. This technique ensures a very fast spreading and installation of malicious code.

Which of the following is the hacker’s first step in conducting a DNS cache poisoning attack on a target organization?

Identify the protocol used to secure an LDAP service against anonymous queries?