Mirai malware targets loT devices. After infiltration, it uses them to propagate and create botnets that then used to launch which types of attack?

• A.Password attack
• B.Birthday attack
• C.DDoS attack
• D.MITM attack

Comment: *

Name: *

Email: *

Verification: *

Abel, a cloud architect, uses container technology to deploy applications/software including all its dependencies, such as libraries and configuration files, binaries, and other resources that run independently from other processes in the cloud environment. For the containerization of applications, he follows the five-tier container technology architecture. Currently, Abel is verifying and validating image contents, signing images, and sending them to the registries.
Which of the following tiers of the container technology architecture is Abel currently working in?

• A.Tier-3: Registries
• B.Tier-1: Developer machines
• C.Tier-4: Orchestrators
• D.Tier-2: Testing and accreditation systems

Comment: *

Name: *

Email: *

Verification: *

The following is an entry captured by a network IDS. You are assigned the task of analyzing this entry. You notice the value 0x90, which is the most common NOOP instruction for the Intel processor. You figure that the attacker is attempting a buffer overflow attack.
You also notice "/bin/sh" in the ASCII part of the output.
As an analyst what would you conclude about the attack?

• A.The attacker is creating a directory on the compromised machine
• B.The attacker is attempting a buffer overflow attack and has succeeded
• C.The attacker is attempting an exploit that launches a command-line shell
• D.The buffer overflow attack has been neutralized by the IDS

Comment: *

Name: *

Email: *

Verification: *

John, a professional hacker, decided to use DNS to perform data exfiltration on a target network. In this process, he embedded malicious data into the DNS protocol packets that even DNSSEC cannot detect. Using this technique, John successfully injected malware to bypass a firewall and maintained communication with the victim machine and C&C server.
What is the technique employed by John to bypass the firewall?

• A.DNS tunneling method
• B.DNSSEC zone walking
• C.DNS enumeration
• D.DNS cache snooping

Comment: *

Name: *

Email: *

Verification: *

Suppose that you test an application for the SQL injection vulnerability. You know that the backend database is based on Microsoft SQL Server. In the login/password form, you enter the following credentials:
Username: attack' or 1=1 -
Password: 123456
Based on the above credentials, which of the following SQL commands are you expecting to be executed by the server, if there is indeed an SQL injection vulnerability?

• A.select * from Users where UserName = 'attack' or 1=1 -- and UserPassword = '123456'
• B.select * from Users where UserName = 'attack' or 1=1 --' and UserPassword = '123456'
• C.select * from Users where UserName = 'attack or 1=1 -- and UserPassword = '123456'
• D.select * from Users where UserName = 'attack' ' or 1=1 -- and UserPassword = '123456'

Comment: *

Name: *

Email: *

Verification: *