There have been concerns in your network that the wireless network component is not sufficiently secure. You perform a vulnerability scan of the wireless network and find that it is using an old encryption protocol that was designed to mimic wired encryption, what encryption protocol is being used?

• A.WEP
• B.RADIUS
• C.WPA
• D.WPA3

Comment: *

Name: *

Email: *

Verification: *

The following is an entry captured by a network IDS. You are assigned the task of analyzing this entry. You notice the value 0x90, which is the most common NOOP instruction for the Intel processor. You figure that the attacker is attempting a buffer overflow attack.
You also notice "/bin/sh" in the ASCII part of the output.
As an analyst what would you conclude about the attack?

• A.The attacker is attempting an exploit that launches a command-line shell
• B.The attacker is attempting a buffer overflow attack and has succeeded
• C.The attacker is creating a directory on the compromised machine
• D.The buffer overflow attack has been neutralized by the IDS

Comment: *

Name: *

Email: *

Verification: *

When configuring wireless on his home router, Javik disables SSID broadcast. He leaves authentication "open" but sets the SSID to a 32-character string of random letters and numbers.
What is an accurate assessment of this scenario from a security perspective?

• A.Javik's router is still vulnerable to wireless hacking attempts because the SSID broadcast setting can be enabled using a specially crafted packet sent to the hardware address of the access point.
• B.It is still possible for a hacker to connect to the network after sniffing the SSID from a successful wireless association.
• C.Since the SSID is required in order to connect, the 32-character string is sufficient to prevent brute-force attacks.
• D.Disabling SSID broadcast prevents 802.11 beacons from being transmitted from the access point, resulting in a valid setup leveraging "security through obscurity".

Comment: *

Name: *

Email: *

Verification: *

Thomas, a cloud security professional, is performing security assessment on cloud services to identify any loopholes. He detects a vulnerability in a bare-metal cloud server that can enable hackers to implant malicious backdoors in its firmware. He also identified that an installed backdoor can persist even if the server is reallocated to new clients or businesses that use it as an laaS.
What is the type of cloud attack that can be performed by exploiting the vulnerability discussed in the above scenario?

• A.Metadata spoofing attack
• B.Man-in-the-cloud (MITC) attack
• C.Cloud cryptojacking
• D.Cloudborne attack

Comment: *

Name: *

Email: *

Verification: *

What would be the fastest way to perform content enumeration on a given web server by using the Gobuster tool?

• A.Performing content enumeration using the bruteforce mode and 10 threads
• B.Shipping SSL certificate verification
• C.Performing content enumeration using a wordlist
• D.Performing content enumeration using the bruteforce mode and random file extensions

Comment: *

Name: *

Email: *

Verification: *