An attacker decided to crack the passwords used by industrial control systems. In this process, he employed a loop strategy to recover these passwords. He used one character at a time to check whether the first character entered is correct; if so, he continued the loop for consecutive characters. If not, he terminated the loop. Furthermore, the attacker checked how much time the device took to finish one complete password authentication process, through which he deduced how many characters entered are correct.
What is the attack technique employed by the attacker to crack the passwords of the industrial control systems?

• A.Buffer overflow attack
• B.Side-channel attack
• C.Denial-of-service attack
• D.HMI-based attack

Comment: *

Name: *

Email: *

Verification: *

What is the main security service a cryptographic hash provides?

• A.Integrity and collision resistance
• B.Integrity and ease of computation
• C.Integrity and computational in-feasibility
• D.Message authentication and collision resistance

Comment: *

Name: *

Email: *

Verification: *

Which among the following is the best example of the third step (delivery) in the cyber kill chain?

• A.An intruder's malware is triggered when a target opens a malicious email attachment.
• B.An intruder sends a malicious attachment via email to a target.
• C.An intruder's malware is installed on a target's machine.
• D.An intruder creates malware to be used as a malicious attachment to an email.

Comment: *

Name: *

Email: *

Verification: *

Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?

• A.Data-driven firewall
• B.Packet firewall
• C.Web application firewall
• D.Stateful firewall

Comment: *

Name: *

Email: *

Verification: *

Gavin owns a white-hat firm and is performing a website security audit for one of his clients. He begins by running a scan which looks for common misconfigurations and outdated software versions. Which of the following tools is he most likely using?

• A.Nmap
• B.Armitage
• C.Metasploit
• D.Nikto

Comment: *

Name: *

Email: *

Verification: *