Objective 1.5 Exploiting Vulnerabilities in Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 12)

Questions 56–60

1. 56foundation · easy

   Which tool is commonly used to capture and analyze network traffic for credential sniffing?

   • AJohn the Ripper
   • BNmap
   • CWireshark
   • DHydra
   Reveal Solution Discussion Select an answer first
2. 57foundation · easy

   What is a botnet?

   • AA network of compromised computers controlled by an attacker
   • BA type of encryption algorithm
   • CA software tool used for network scanning
   • DA type of firewall that blocks malicious traffic
   Reveal Solution Discussion Select an answer first
4. 58application · medium

   A user reports that typing a legitimate banking website's URL in the browser always redirects to a fraudulent page that looks identical to the real site. The user's hosts file is clean, and the browser is not configured with a malicious proxy. Which attack is most likely occurring?

   • ADNS poisoning
   • BPhishing
   • CSession hijacking
   • DARP poisoning
   Reveal Solution Discussion Select an answer first
5. 59foundation · easy

   What is the goal of ARP poisoning?

   • ATo encrypt all traffic on a local network
   • BTo associate an attacker's MAC address with the IP address of a legitimate host
   • CTo change the DNS resolution of a domain name
   • DTo flood a network with excessive traffic
   Reveal Solution Discussion Select an answer first
6. 60foundation · easy

   What is the consequence of weak access control?

   • ANetwork traffic is encrypted
   • BUnauthorized users may gain access to sensitive data
   • CAll data is automatically backed up
   • DSystem performance improves
   Reveal Solution Discussion Select an answer first