Question 56
The security team reviews a web server for XSS and runs the following Nmap scan:
Which of the following most accurately describes the result of the scan?
A. An output of characters > and " as the parameters used in the attempt
B. The vulnerable parameter ID and unfiltered characters returned
C. The vulnerable parameter ID and unfiltered or encoded characters passed > and " as unsafe
D. The vulnerable parameter ID with a SQL Injection attempt
Show Answer
Correct Answer: C
Explanation:
An Nmap XSS script typically reports the vulnerable parameter and shows how special characters like > and " are handled in the server response. The result described indicates that the parameter is identified and that unsafe characters are passed back either unfiltered or encoded, which aligns with detecting an XSS condition rather than SQL injection or merely listing test characters.
Question 57
Which of the following threat-hunting concepts is most concerned with identifying the behaviors of the bad actor?
A. Threat intelligence sharing
B. Indicators of compromise
C. Insider threat analysis
D. Tactics, techniques, and procedures
Show Answer
Correct Answer: D
Explanation:
Tactics, techniques, and procedures (TTPs) focus on how adversaries operate—their methods, behaviors, and patterns of action. Threat hunting that looks for bad-actor behavior is therefore most aligned with analyzing TTPs, rather than static artifacts like indicators of compromise or broader activities like intelligence sharing.
Question 58
Which of the following is the best authentication method to secure access to sensitive data?
A. An assigned device that generates a randomized code for log-in
B. Biometrics and a device with a personalized code for log-in
C. Alphanumeric/special character username and passphrase for log-in
D. A one-time code received by email and push authorization for log-in
Show Answer
Correct Answer: B
Explanation:
The strongest authentication combines multiple independent factors. Option B uses biometrics (something you are) together with a device and personalized code (something you have and/or something you know), providing true multi‑factor authentication. The other options rely on single factors or weaker combinations that are more vulnerable to phishing, credential theft, or interception.
Question 59
Which of the following best explains the importance of the implementation of a secure software development life cycle in a company with an internal development team?
A. Increases the product price by using the implementation as a piece of marketing
B. Decreases the risks of the software usage and complies with regulatory requirements
C. Improves the agile process and decreases the amount of tests before the final deployment
D. Transfers the responsibility for security flaws to the vulnerability management team
Show Answer
Correct Answer: B
Explanation:
A secure software development life cycle integrates security practices throughout design, development, testing, and deployment, which reduces vulnerabilities and operational risk while helping the organization meet regulatory and compliance requirements.
Question 60
SIMULATION
-
Approximately 100 employees at your company have received a phishing email. As a security analyst, you have been tasked with handling this situation.
INSTRUCTIONS
-
Review the information provided and determine the following:
1. How many employees clicked on the link in the phishing email?
2. On how many workstations was the malware installed?
3. What is the executable file name of the malware?
If at any time you would like to bring back the initial state of the simulation. please click the Reset All button.
