Question 1

Lee has established a new startup where they develop android applications. In order to meet memory requirements of the company, Lee has hired a Cloud Service Provider, who offered memory space along with virtual systems. Lee was dissatisfied with their service and wanted to move to another CSP, but was denied as a part of the contract, which reads that the user cannot switch to another CSP. What is this condition called?

Accepted Answer

This condition is called "Lock-in," where a customer is unable to switch to another service provider due to contractual or technical constraints.

Question 2

Jason is a penetration tester, and after completing the initial penetration test, he wanted to create a final penetration test report that consists of all activities performed throughout the penetration testing process. Before creating the final penetration testing report, which of the following reports should Jason prepare in order to verify if any crucial information is missed from the report?

Accepted Answer

The activity report provides a detailed account of all activities performed during the penetration testing process, making it an essential reference for verifying if any crucial information is missed from the final report.

Question 3

A penetration tester at Trinity Ltd. is performing IoT device testing. As part of this process, he is checking the IoT devices for open ports using port scanners such as Nmap. After identifying the open ports, he started using automated tools to check each open port for any exploitable vulnerabilities. Identify the IoT security issues the penetration tester is trying to uncover?

Accepted Answer

D

Question 4

James, a research scholar, received an email informing that someone is trying to access his Google account from an unknown device. When he opened his email message, it looked like a standard Google notification instructing him to click the link below to take further steps. This link was redirected to a malicious webpage where he was tricked to provide Google account credentials. James observed that the URL began with www.translate.google.com giving a legitimate appearance. In the above scenario, identify the type of attack being performed on James' email account?

Accepted Answer

This scenario describes a phishing attack, where James is tricked into providing his credentials through a fake webpage that appears legitimate.

Question 5

Identify the PRGA from the following screenshot:

Accepted Answer

The answer of Identify the PRGA from the following screenshot:...

Question 6

Henderson has completed the pen testing tasks. He is now compiling the final report for the client. Henderson needs to include the result of scanning that revealed a SQL injection vulnerability and different SQL queries that he used to bypass web application authentication. In which section of the pen testing report, should Henderson include this information?

Accepted Answer

The comprehensive technical report section is where detailed findings, such as specific vulnerabilities and the methods used to exploit them, are documented.

Question 7

A user unknowingly installed a fake malicious banking app in his Android mobile. This app includes a configuration file that consists of phone numbers of the bank. When the user makes a call to the bank, he is automatically redirected to the number being used by the attacker. The attacker impersonates as a banking official. Also, the app allows the attacker to call the user, then the app displays fake caller ID on the user's mobile resembling call from a legitimate bank. Identify the attack being performed on the Android mobile user?

Accepted Answer

The attack described is Vishing, which involves voice phishing where attackers impersonate legitimate entities over the phone to steal sensitive information.

Question 8

Karen is a Network engineer at ITSec, a reputed MNC based in Philadelphia, USA. She wants to retrieve the DNS records from the publicly available servers. She searched using Google for the providers DNS Information and found the following sites: http://www.dnsstuff.com https://dnsquery.org Through these sites she got the DNS records information as she wished. What information is contained in DNS records?

Accepted Answer

DNS records contain information such as mail server extensions, IP addresses, and other domain-related data.

Question 9

Stanley, a pen tester needs to perform various tests to detect SQL injection vulnerabilities. He has to make a list of all input fields whose values could be used in crafting a SQL query. This includes the hidden fields of POST requests and then test them separately, attempting to interfere with the query and cause an error to generate as a result. In which of the following tests is the source code of the application tested in a non-runtime environment to detect the SQL injection vulnerabilities?

Accepted Answer

Static Testing is performed in a non-runtime environment and involves analyzing the source code of the application to detect vulnerabilities.

Question 10

Tom is a networking manager in XYZ Inc. He and his team were assigned the task to store and update the confidential files present on a remote server using Network File System (NFS) client-server application protocol. Since the files are confidential, Tom was asked to perform this operation in a secured manner by limiting the access only to his team. As per the instructions provided to him, to use NFS securely, he employed the process of limiting the superuser access privileges only to his team by using authentication based on the team personnel identity. Identify the method employed by Tom for securing access controls in NFS?

Accepted Answer

The answer of Tom is a networking manager in XYZ...

Question 11

Michael, a penetration tester of Rolatac Pvt. Ltd., has completed his initial penetration testing and now he needs to create a penetration testing report for company's client, management, and top officials for their reference. For this, he created a report providing a detailed summary of the complete penetration testing process of the project that he has undergone, its outcomes, and recommendations for future testing and exploitation. In the above scenario, which type of penetration testing report has Michael prepared?

Accepted Answer

Michael has prepared an Executive report, which is designed for clients, management, and top officials, summarizing the penetration testing process, outcomes, and recommendations.

Question 12

Rebecca, a security analyst, was auditing the network in her organization. During the scan, she found a service running on a remote host, which helped her to enumerate information related to user accounts, network interfaces, network routing and TCP connections. Which among the following services allowed Rebecca to enumerate the information?

Accepted Answer

SNMP (Simple Network Management Protocol) is used for network management and can provide information about user accounts, network interfaces, routing, and TCP connections.

Question 13

Veronica, a penetration tester at a top MNC company, is trying to breach the company's database as a part of SQLi penetration testing. She began to use the SQLi techniques to test the database security level. She inserted new database commands into the SQL statement and appended a SQL Server EXECUTE command to the vulnerable SQL statements. Which of the following SQLi techniques was used to attack the database?

Accepted Answer

Function call injection involves inserting database commands or functions into SQL statements, which aligns with Veronica's actions of appending an EXECUTE command.

Question 14

Steven is performing a wireless network audit. As part of the engagement, he is trying to crack a WPA-PSK key. Steven has captured enough packets to run aircrack-ng and discover the key, but aircrack-ng did not yield any result, as there were no authentication packets in the capture. Which of the following commands should Steven use to generate authentication packets?

Accepted Answer

Steven should use the aireplay-ng command with the --deauth option to deauthenticate clients from the network, which will force them to reauthenticate and generate the necessary authentication packets.

Question 15

An organization hosted a website to provide services to its customers. A visitor of this website has reported a complaint to the organization that they are getting an error message with code 502 when they are trying to access the website. This issue was forwarded to the IT department in the organization. The IT department identified the reason behind the error and started resolving the issue by checking whether the server is overloaded, whether the name resolution is working properly, whether the firewall is configured properly, etc. Identify the error message corresponding to code 502 that the visitors obtained when they tried to access the organization's website?

Accepted Answer

A 502 error code indicates a "Bad Gateway" error, which occurs when a server acting as a gateway or proxy receives an invalid response from an inbound server.

Question 16

You are working on a pen testing assignment. Your client has asked for a document that shows them the detailed progress of the pen testing. Which document is the client asking for?

Accepted Answer

The engagement log is a document that tracks the detailed progress of the pen testing assignment, including activities performed, findings, and any issues encountered.

Question 17

HDC Networks Ltd. is a leading security services company. Matthew works as a penetrating tester with this firm. He was asked to gather information about the target company. Matthew begins with social engineering by following the steps:

Accepted Answer

The answer of HDC Networks Ltd. is a leading security...

Question 18

Richard, a penetration tester was asked to assess a web application. During the assessment, he discovered a file upload field where users can upload their profile pictures. While scanning the page for vulnerabilities, Richard found a file upload exploit on the website. Richard wants to test the web application by uploading a malicious PHP shell, but the web page denied the file upload. Trying to get around the security, Richard added the ' jpg ' extension to the end of the file. The new file name ended with '.php. jpg '. He then used the Burp suite tool and removed the ' jpg '' extension from the request while uploading the file. This enabled him to successfully upload the PHP shell. Which of the following techniques has Richard implemented to upload the PHP shell?

Accepted Answer

Richard used parameter tampering by altering the file extension parameter in the request to bypass the file upload restrictions and successfully upload the PHP shell.

Question 19

Ross performs security test on his company's network assets and creates a detailed report of all the findings. In his report, he clearly explains the methodological approach that he has followed in finding the loopholes in the network. However, his report does not mention about the security gaps that can be exploited or the amount of damage that may result from the successful exploitation of the loopholes. The report does not even mention about the remediation steps that are to be taken to secure the network. What is the type of test that Ross has performed?

Accepted Answer

Ross performed a vulnerability assessment, which involves identifying and reporting on security weaknesses without necessarily detailing the potential impact or remediation steps.

Question 20

Recently, Jacob was assigned a project to test the perimeter security of one of a client. As part of the project, Jacob wants to test whether or not a particular port on the firewall is open or closed. He used the hping utility with the following syntax: #hping -S -c 1 -p -t What response will indicate the particular port is allowed in the firewall?

Accepted Answer

A lack of response (No Response) typically indicates that the port is open and allowed through the firewall, as the firewall does not block the SYN packet and the port does not send a RST packet back.

Exam 6: EC-Council Certified Security Analyst

Identify the PRGA from the following screenshot:

You are working on a pen testing assignment. Your client has asked for a document that shows them the detailed progress of the pen testing. Which document is the client asking for?

HDC Networks Ltd. is a leading security services company. Matthew works as a penetrating tester with this firm. He was asked to gather information about the target company. Matthew begins with social engineering by following the steps: