QUESTION: 17

Scenario:
1. Victim opens the attacker’s web site.
2. Attacker sets up a web site which contains interesting and attractive content like ‘Do you want to make$1000 in a day?’.
3. Victim clicks to the interesting and attractive content URL.
4. Attacker creates a transparent ‘iframe’ in front of the URL which the victim attempts to click, so the victim thinks that he/she clicks on the ‘Do you want to make $1000 in a day?’ URL but actually he/she clicks on the content or URL that exists in the transparent 'iframe' which is setup by the attacker.

What is the name of the attack which is mentioned in the scenario?

Session Fixation
HTML Injection
HTTP Parameter Pollution
Clickjacking Attack

Answer(s): D

Reveal Solution Next Question

QUESTION: 18

A network administrator discovers several unknown files in the root directory of his Linux FTP server. One of the files is a tarball, two are shell script files, and the third is a binary file is named “nc.” The FTP server’s access logs show that the anonymous user account logged in to the server, uploaded the files, and extracted the contents of the tarball and ran the script using a function provided by the FTP server’s software. The ps command shows that the nc file is running as process, and the netstat command shows the nc process is listening on a network port.

What kind of vulnerability must be present to make this remote attack possible?

File system permissions
Privilege escalation
Directory traversal
Brute force login

Answer(s): A

Reveal Solution Next Question

QUESTION: 19

Which of the following programming languages is most susceptible to buffer overflow attacks, due to its lack of a built-in bounds checking mechanism?

Code:
#include <string.h>intmain(){____________char buffer[8];
strcpy(buffer, ““11111111111111111111111111111””);} Output: Segmentation fault

C#
Python
Java
C++

Answer(s): D

Reveal Solution Next Question

QUESTION: 20

Internet Protocol Security IPsec is actually a suite pf protocols. Each protocol within the suite provides different functionality. Collective IPsec does everything except.

Protect the payload and the headers
Encrypt
Work at the Data Link Layer
Authenticate

Answer(s): C

Explanation:

https://en.wikipedia.org/wiki/IPsec Usage of IPsec Authentication Header format in Tunnel and Transport modes

Reveal Solution Next Question

Free 312-50v11 Exam Braindumps (page: 5)

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20

Explanation: