QUESTION: 77

An authentication system that uses challenge and response was recently implemented on an organization's network, because the organization conducted an annual penetration test showing that testers were able to move laterally using authenticated credentials. Which attack method was MOST likely used to achieve this?

Hash collision
Pass the ticket
Brute force
Cross-Site Scripting (XSS)

Answer(s): B

Reveal Solution Next Question

QUESTION: 78

Which of the following would qualify as an exception to the "right to be forgotten" of the General Data Protection Regulation (GDPR)?

For the establishment, exercise, or defense of legal claims
The personal data has been lawfully processed and collected
For the reasons of private interest
The personal data remains necessary to the purpose for which it was collected

Answer(s): A

Reveal Solution Next Question

QUESTION: 79

Dumpster diving is a technique used in which stage of penetration testing methodology?

Attack
Reporting
Planning
Discovery

Answer(s): D

Reveal Solution Next Question

QUESTION: 80

Which of the following is performed to determine a measure of success of a security awareness training program designed to prevent social engineering attacks?

Employee evaluation of the training program
Internal assessment of the training program's effectiveness
Multiple choice tests to participants
Management control of reviews

Answer(s): B

Reveal Solution Next Question

Free CISSP Exam Braindumps (page: 20)

QUESTION: 77

QUESTION: 78

QUESTION: 79

QUESTION: 80