- (Exam Topic 1)
The establishment of a TCP connection involves a negotiation called three-way handshake. What type of message does the client send to the server in order to begin this negotiation?

1. A. ACK
2. B. SYN
3. C. RST
4. D. SYN-ACK

Correct Answer: B

- (Exam Topic 3)
CyberTech Inc. recently experienced SQL injection attacks on its official website. The company appointed Bob, a security professional, to build and incorporate defensive strategies against such attacks. Bob adopted a practice whereby only a list of entities such as the data type, range, size, and value, which have been approved for secured access, is accepted. What is the defensive technique employed by Bob in the above scenario?

1. A. Output encoding
2. B. Enforce least privileges
3. C. Whitelist validation
4. D. Blacklist validation

Correct Answer: C

- (Exam Topic 3)
When considering how an attacker may exploit a web server, what is web server footprinting?

1. A. When an attacker implements a vulnerability scanner to identify weaknesses
2. B. When an attacker creates a complete profile of the site's external links and file structures
3. C. When an attacker gathers system-level data, including account details and server names
4. D. When an attacker uses a brute-force attack to crack a web-server password

Correct Answer: B

- (Exam Topic 3)
You are a penetration tester and are about to perform a scan on a specific server. The agreement that you signed with the client contains the following specific condition for the scan: “The attacker must scan every port on the server several times using a set of spoofed sources IP addresses. ” Suppose that you are using Nmap to perform this scan. What flag will you use to satisfy this requirement?

1. A. The -A flag
2. B. The -g flag
3. C. The -f flag
4. D. The -D flag

Correct Answer: D
flags –source-port and -g are equivalent and instruct nmap to send packets through a selected port. this option is used to try to cheat firewalls whitelisting traffic from specific ports. the following example can scan the target from the port twenty to ports eighty, 22, 21,23 and 25 sending fragmented packets to LinuxHint.

- (Exam Topic 2)
Nedved is an IT Security Manager of a bank in his country. One day. he found out that there is a security breach to his company's email server based on analysis of a suspicious connection from the email server to an unknown IP Address.
What is the first thing that Nedved needs to do before contacting the incident response team?

1. A. Leave it as it Is and contact the incident response te3m right away
2. B. Block the connection to the suspicious IP Address from the firewall
3. C. Disconnect the email server from the network
4. D. Migrate the connection to the backup email server

Correct Answer: C