Free ML0-320 Exam Braindumps
certified penetration testing professional Questions 204–208 (page: 24)

Updated On: 31-Jan-2026

Julius has been hired to perform a test on abc.com networks.
Julius knows that abc.com has a large team of security administrators who are very proactive in their security approach.
Most likely there are some Intrusion Detection Systems (IDS) in place that would quickly identify Julius IP address and he would then be blocked from accessing the network he is supposed to test.
How can Julius avoid having his IP address identified and then blocked? Which of the following would be the most practical solution and the easiest to implement?

  1. By using public key encryption; it is well known that IDS cannot make any sense of encrypted traffic and they would not be able to determine the source of the probes
  2. By using Secure Socket Layer (SSL) Which will shield the intruder from the IDS and they wont be able to determine the source of the probes
  3. By using only computers within the local internet catfalls traffic will be traced to the internet cafe instead of being traced to the security tester
  4. By using an internet anonymizer instead of connecting directly to the target. The anonymizer will shield the real source of the probes.

Answer(s): D



Bob has accessed a nice site that sells high end wireless network equipment. However, after looking around for a while it was obvious that most items were too expensive for his low income salary.
After fiddling around for a while, he identified that modifying some of the page variables would allow him to modify the price easily and then he could save the page locally and resubmit the page in order to get a significant rebate.
What weakness within the page code did he use to perform his attack?

  1. HTML code
  2. Hidden From Field code
  3. Java Code
  4. ActiveX

Answer(s): B



BASIC authentication for HTTP authentication is universally understood but has the disadvantage of passing username and password in BASE64 encoding.
What technology could be used to encrypt the BASE64 encoding and thus secure BASIC authentication for all web browsers and all Internet users? Choose the best

  1. SSH
  2. IPsec
  3. SSL
  4. IKE

Answer(s): C



Joshua, a specialist in Penetration Testing, has been hired by abc.com to perform a security test on some of their servers. Joshua has been challenged to remain undetected by abc.com internal security team.
Over the past few days Joshua has been collecting tons of information about his target. He did so by accessing public database and never sending any packets to his target. How would you call this type of information gathering?

  1. Active Information Gathering
  2. Passive Information Gathering
  3. Stealth Information Gathering
  4. Secret Information Gathering

Answer(s): B



The process of flooding a local segment with thousands of random MAC addresses can result in some switches behaving like a hub. The goal of the hacker is to accomplish what?

  1. Denial of service
  2. ARP cache poisoning
  3. Sniffing in a switched network
  4. SYN flood

Answer(s): C



Viewing page 24 of 51
Viewing questions 116 - 120 out of 247 questions


Post your Comments and Discuss Mile2 ML0-320 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!