Jack, a disgruntled ex-employee of Incalsol Ltd., decided to inject fileless malware into Incalsol's systems. To deliver the malware, he used the current employees' email IDs to send fraudulent emails embedded with malicious links that seem to be legitimate. When a victim employee clicks on the link, they are directed to a fraudulent website that automatically loads Flash and triggers the exploit. What is the technique used byjack to launch the fileless malware on the target systems?

1. A. In-memory exploits
2. B. Phishing
3. C. Legitimate applications
4. D. Script-based injection

Correct Answer: B

Which of the following is the BEST way to defend against network sniffing?

1. A. Using encryption protocols to secure network communications
2. B. Register all machines MAC Address in a Centralized Database
3. C. Use Static IP Address
4. D. Restrict Physical Access to Server Rooms hosting Critical Servers

Correct Answer: A

Mirai malware targets loT devices. After infiltration, it uses them to propagate and create botnets that then used to launch which types of attack?

1. A. MITM attack
2. B. Birthday attack
3. C. DDoS attack
4. D. Password attack

Correct Answer: C

Stella, a professional hacker, performs an attack on web services by exploiting a vulnerability that provides additional routing information in the SOAP header to support asynchronous communication. This further allows the transmission of web-service requests and response messages using different TCP connections. Which of the following attack techniques is used by Stella to compromise the web services?

1. A. XML injection
2. B. WS-Address spoofing
3. C. SOAPAction spoofing
4. D. Web services parsing attacks

Correct Answer: B
WS-Address provides additional routing information in the SOAP header to support asynchronous communication. This technique allows the transmission of web service requests and response messages using different TCP connections
https://www.google.com/search?client=firefox-b-d&q=WS-Address+spoofing CEH V11 Module 14 Page 1896

Given below are different steps involved in the vulnerability-management life cycle.
1) Remediation
2) Identify assets and create a baseline
3) Verification
4) Monitor
5) Vulnerability scan
6) Risk assessment
Identify the correct sequence of steps involved in vulnerability management.

1. A. 2-->5-->6-->1-->3-->4
2. B. 2-->1-->5-->6-->4-->3
3. C. 2-->4-->5-->3-->6--> 1
4. D. 1-->2-->3-->4-->5-->6

Correct Answer: A