ECSS 試験問題を無料オンラインアクセス

Peter, an attacker aiming to disrupt organizational services, targeted a configuration protocol that issues IP addresses to host systems. To disrupt the issuance of IP addresses. Peter flooded the target server with spoofed MAC addresses so that valid users cannot receive IP addresses to access the network.
Identify the type of attack Peter has performed in the above scenario.

• A.Session hijacking
• B.Ping-of-death attack
• C.ARP spoofing
• D.DHCP starvation attack

Below are the various steps involved in establishing a network connection using the shared key authentication process.
l.The AP sends a challenge text to the station.
2.The station connects to the network.
3.The station encrypts the challenge text using its configured 128-bit key and sends the encrypted text to the AP.
4.The station sends an authentication frame to the AP.
5.The AP uses its configured WEP key to decrypt the encrypted text and compares it with the original challenge text.
What is the correct sequence of steps involved in establishing a network connection using the shared key authentication process?

• A.4->2->1->3->5
• B.2 >4>3
• C.4->1->3->5->2
• D.4-->5->3->2-->1

Melanie, a professional hacker, is attempting to break into a target network through an application server. In this process, she identified a logic flaw in the target web application that provided visibility into the source code. She exploited this vulnerability to launch further attacks on the target web application.
Which of the web application vulnerabilities was identified by Melanie in the above scenario?

• A.Command injection
• B.Broken authentication
• C.Security misconfiguration
• D.Insecure deserialization

Bob.
a security specialist at an organization, extracted the following IIS log from a Windows-based server:
"2019-12-12 06:11:41 192.168.0.10 GET /images/content/bg_body_l.jpg - 80 - 192.168.0.27 Mozilla/5.0 (Windows*NT 6.3:*WOW64)*AppleWebKit/537.36*(KHTML.*like Cecko)*Chrome/48.0.2564.103 Safari/5
http://www.movie5cope.com/css/style.c5s 200 0 0 365"
Identify the element in the above IIS log entry that indicates the request was fulfilled without error.

• A.200
• B.537
• C.192
• D.80

In which of the following levels of the OSI model does an attacker gain control over the HTTP user session by obtaining the session IDs and create new unauthorized sessions by using the stolen data?

• A.Presentation level
• B.Network-level
• C.Transport level
• D.Application-level