Question12Max. score: 2.00After establishing persistent access, the attacker aims to disrupt the organization's operational integrity by targeting the internal command and control (C&C) mechanisms. This includes manipulating scheduled tasks, altering automated workflows, and corrupting the integrity of administrative tools to sow chaos and further hide their tracks. How can organizations detect unauthorized alterations in their command and control mechanisms?By deploying artificial intelligence (AI) based anomaly detection systemsConducting daily manual audits of all system and network configurationsRelying on external audits for periodic security assessmentsUtilizing a decentralized model for all administrative controls

Question13Max. score: 2.00After establishing persistent access, the attacker aims to disrupt the organization's operational integrity by targeting the internal command and control (C&C) mechanisms. This includes manipulating scheduled tasks, altering automated workflows, and corrupting the integrity of administrative tools to sow chaos and further hide their tracks. How can organizations detect unauthorized alterations in their command and control mechanisms?By deploying artificial intelligence (AI) based anomaly detection systemsConducting daily manual audits of all system and network configurationsRelying on external audits for periodic security assessmentsUtilizing a decentralized model for all administrative controls

Question93Max. score: 1.00In which attack, application accepts input and allow these inputs to enter a database, shell command or operating system making the application susceptibleXXESecurity misconfigurationSensitive data exposureInjection

Question96Max. score: 2.00In which category does the lack access control policy fall?ThreatBugAttackVulnerability

Question21Max. score: 1.00Which of the following is characterized by a hacker's ability to intercept the communications between two devices?Man-in-the MiddleProactive AttacksReactive malwareDenial-of-Service

Question18Max. score: 2.00To ensure persistent access, the attacker deploys a complex network of backdoors and malware across the company’s infrastructure. These tools are designed to automatically adapt and mutate to avoid detection by antivirus software and to re-establish connections if discovered and removed. How can persistent threats like these be most effectively detected and eradicated?Routine penetration testing and red team exercisesDeploying behavior-based threat detection solutionsFrequent updates and scans by antivirus softwareEnhanced endpoint detection and response (EDR) mechanisms