You are a penetration tester and are about to perform a scan on a specific server. The agreement that you signed with the client contains the following specific condition for the scan: "The attacker must scan every port on the server several times using a set of spoofed sources IP addresses. " Suppose that you are using Nmap to perform this scan. What flag will you use to satisfy this requirement?

• A.The -A flag
• B.The -g flag
• C.The -f flag
• D.The -D flag

Comment: *

Name: *

Email: *

Verification: *

BitLocker encryption has been implemented for all the Windows-based computers in an organization. You are concerned that someone might lose their cryptographic key. Therefore, a mechanism was implemented to recover the keys from Active Directory. What is this mechanism called in cryptography?

• A.Key renewal
• B.Key archival
• C.Key escrow.
• D.Certificate rollover

Comment: *

Name: *

Email: *

Verification: *

Suppose that you test an application for the SQL injection vulnerability. You know that the backend database is based on Microsoft SQL Server. In the login/password form, you enter the following credentials:
Username: attack' or 1=1 -
Password: 123456
Based on the above credentials, which of the following SQL commands are you expecting to be executed by the server, if there is indeed an SQL injection vulnerability?

• A.select * from Users where UserName ='attack or 1=1 -and UserPassword = '123456"
• B.select * from Users where UserName ='attack" or 1=1 -and UserPassword = '123456'
• C.select * from users where UserName"'attack'or 1=1 - and UserPassword "'123456'
• D.select * from users wherefuserName = 'attack' or 1=1 --'and UserPassword = '123456'

Comment: *

Name: *

Email: *

Verification: *

Jason, an attacker, targeted an organization to perform an attack on its Internet-facing web server with the intention of gaining access to backend servers, which are protected by a firewall. In this process, he used a URL https://xyz.com/feed.php?url:externaIsile.com/feed/to to obtain a remote feed and altered the URL input to the local host to view all the local resources on the target server. What is the type of attack Jason performed In the above scenario?

• A.website defacement
• B.Server-side request forgery (SSRF) attack
• C.Web server misconfiguration
• D.web cache poisoning attack

Comment: *

Name: *

Email: *

Verification: *

Consider the following Nmap output:

what command-line parameter could you use to determine the type and version number of the web server?

• A.-Pn
• B.-V
• C.-ss
• D.-sv

Comment: *

Name: *

Email: *

Verification: *