Question 1

An ethical hacker is testing the security of a website's database system against SQL Injection attacks. They discover that the IDS has a strong signature detection mechanism to detect typical SQL injection patterns. Which evasion technique can be most effectively used to bypass the IDS signature detection while performing a SQL Injection attack?

Options :

A : Implement case variation by altering the case of SQL statements

B : Employ IP fragmentation to obscure the attack payload

C : Use Hex encoding to represent the SQL query string

D : Leverage string concatenation to break identifiable keywords

Answer: D

Question 2

Annie, a cloud security engineer, uses the Docker architecture to employ a client/server model in the application she is working on. She utilizes a component that can process API requests and handle various Docker objects, such as containers, volumes. Images, and networks. What is the component of the Docker architecture used by Annie in the above scenario?

Options :

A : Docker client

B : Docker objects

C : Docker daemon

D : Docker registries

Answer: C

Question 3

The Payment Card Industry Data Security Standard (PCI DSS) contains six different categories of control objectives. Each objective contains one or more requirements, which must be followed in order to achieve compliance. Which of the following requirements would best fit under the objective, "Implement strong access control measures"?

Options :

A : Regularly test security systems and processes.

B : Encrypt transmission of cardholder data across open, public networks.

C : Assign a unique ID to each person with computer access.

D : Use and regularly update anti-virus software on all systems commonly affected by malware.

Answer: C

Question 4

What is the purpose of a demilitarized zone on a network?

Options :

A : To scan all traffic coming through the DMZ to the internal network

B : To only provide direct access to the nodes within the DMZ and protect the network behind it

C : To provide a place to put the honeypot

D : To contain the network devices you wish to protect

Answer: B

Question 5

These hackers have limited or no training and know how to use only basic techniques or tools. What kind of hackers are we talking about?

Options :

A : Black-Hat Hackers A

B : Script Kiddies

C : White-Hat Hackers

D : Gray-Hat Hacker

Answer: B

Confidently Practice Online with Free 312-50v13 Exam Cram

Buying Options: