¡GoConqr estrena diseño! Cuéntanos qué te parece.

Regístrate gratis

Test

CCNP SCOR

Fernando Mayorga 157 preguntas

Hacer el test

Preguntas del test (157)

  1. 1In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?
    1. ASmurf
    2. Bdistributed denial of service
    3. Ccross-site scripting
    4. Drootkit exploita Telec
  2. 2Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?
    1. Auser input validation in a web page or web application
    2. BLinux and Windows operating systems
    3. Cdatabase
    4. Dweb page images
  3. 3Which two prevention techniques are used to mitigate SQL injection attacks? (Choose two)
    1. ACheck integer, float, or Boolean string parameters to ensure accurate values.
    2. BUse prepared statements and parameterized queries.
    3. CSecure the connection between the web and the app tier.
    4. DWrite SQL code instead of using object-relational mapping libraries.
    5. EBlock SQL code execution in the web application database login.
  4. 4Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two)
    1. APatch for cross-site scripting.
    2. BPerform backups to the private cloud.
    3. CProtect against input validation and character escapes in the endpoint.
    4. DInstall a spam and virus email filter.
    5. EProtect systems with an up-to-date antimalware program.
  5. 5Which two mechanisms are used to control phishing attacks? (Choose two)
    1. AEnable browser alerts for fraudulent websites.
    2. BRevoke expired CRL of the websites.
    3. CImplement email fitering techniques
    4. DDefine security group memberships.
    5. EUse antispyware software.
  6. 6Which two behavioral patterns characterize a ping of death attack? (Choose two)
    1. AThe attack is fragmented into groups of 16 octets before transmission.
    2. BThe attack is fragmented into groups of 8 octets before transmission.
    3. CShort synchronized bursts of traffic are used to disrupt TCP connections.
    4. DMalformed packets are used to crash systems.
    5. EPublicly accessible DNS servers are typically used to execute the attack.
  7. 7Which two preventive measures are used to control cross-site scripting? (Choose two)
    1. AEnable client-side scripts on a per-domain basis.
    2. BIncorporate contextual output encoding/escaping.
    3. CDisable cookie inspection in the HTML inspection engine.
    4. DRun untrusted HTML input through an HTML sanitization engine
    5. ESame Site cookie attribute should not be used.
  8. 8What is the difference between deceptive phishing and spear phishing?
    1. ADeceptive phishing is an attacked aimed at a specific user in the organization who holds a C-level role.
    2. BA spear phishing campaign is aimed at a specific person versus a group of people.
    3. CSpear phishing is when the attack is aimed at the C-level executives of an organization.
    4. DDeceptive phishing hijacks and manipulates the DNS server of the victim and redirects the user to a false webpage.
  9. 9Which attack is commonly associated with C and C++ programming languages?
    1. Across-site scripting
    2. Bwater holing
    3. CDDoS
    4. Dbuffer overflow
  10. 10What is a language format designed to exchange threat intelligence that can be transported over the TAXII protocol?
    1. ASMTP
    2. BpxGrid
    3. CXMPP
    4. DSTIX

Información

Descripción
Ingeniería Test sobre CCNP SCOR, creado por Fernando Mayorga el 18/06/2024.
Idioma
Español
Visitas
20
Etiquetas
ingeniería
Valoración
Aún sin valoraciones
Valora este test
Valora este test

Escríbenos

¿Sobre qué es tu mensaje?

¿Qué te parece el nuevo diseño?

¿Te gusta?