Objective 1.5 Exploiting Vulnerabilities in Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 13)

Questions 61–65

1. 61foundation · easy

   Which technique is used to mitigate session hijacking?

   • AUsing secure cookies with the HttpOnly and Secure flags
   • BAllowing session tokens to be sent in URLs
   • CDisabling all network encryption
   • DUsing predictable session IDs
   Reveal Solution Discussion Select an answer first
2. 62foundation · easy

   An employee receives an email that appears to be from the company's IT department, asking them to verify their account password by clicking a link. The link leads to a fake login page. Which type of attack is this?

   • AVishing
   • BSpear phishing
   • CPharming
   • DWhaling
   Reveal Solution Discussion Select an answer first
4. 63application · medium

   A security tester needs to perform network reconnaissance and then launch an ARP spoofing attack to sniff credentials on a wireless network. The tester wants a modern tool that supports both reconnaissance and MITM in a single framework. Which tool should the tester use?

   • ATShark
   • Bbettercap
   • CJohn the Ripper
   • DHydra
   Reveal Solution Discussion Select an answer first
5. 64foundation · easy

   What is a common use of Bash scripts in security testing?

   • ACreating graphical user interfaces
   • BAutomating repetitive tasks like scanning multiple hosts
   • CEncrypting files with strong algorithms
   • DCompiling C programs
   Reveal Solution Discussion Select an answer first
6. 65foundation · easy

   What is session hijacking?

   • ASending phishing emails to obtain credentials
   • BInstalling malware on a user's computer
   • CGuessing a user's password through brute force
   • DTaking over an authenticated user's session by stealing or predicting session tokens
   Reveal Solution Discussion Select an answer first