112-52 Exam Questions

In which phase does the attacker gather background information on the target?

What is a common vulnerability in OT systems that can be exploited in cyber-physical attacks?

Which of the following is a key element of information security laws and regulations?

Which type of attack specifically targets the safety mechanisms of industrial control systems to cause physical damage?

In web application security, what does the term vulnerability stack refer to?

Which phase in the social engineering process involves developing a relationship with the target for manipulation?

Which regulation specifically addresses the protection of personal data within the European Union?

What is the primary goal of session hijacking attacks?

Which type of malware is specifically designed to remain hidden while providing attackers persistent privileged access?

What feature is essential for IoT devices to adapt and respond to their environments?

What is a common countermeasure against rainbow table attacks?

What is a crucial guideline to follow when conducting penetration testing?

How does understanding the web application architecture assist in securing it?

Which method involves guessing passwords through an automated process of trial and error?

Which type of malware is designed to steal sensitive information from a system?

Which type of attack floods a network with excessive traffic to render a service unavailable?

What is the main goal of password cracking?

What is considered a fundamental characteristic of IoT devices?

What is the purpose of Mobile Device Management (MDM) in an enterprise?

What is the outcome of a successful vulnerability exploitation?

Which of the following is a common attack vector for mobile devices?

Which of the following best defines a 'threat actor'?

What mechanism is typically exploited in a Cross-Site Request Forgery (CSRF) attack?

Which of the following is a primary security concern associated with container technology?

Which of the following is a strong indicator of a potential insider threat?

Which attack involves inserting malicious SQL statements into a web application's input fields?

Which wireless encryption method is currently considered the most secure?

Which of the following is an example of a social engineering technique?

Which cloud computing service model provides the user with the highest level of control over the operating systems, applications, and network?

What is a primary ethical consideration for an ethical hacker?

Which type of attack uses a precomputed table of hash values to recover a password?

What is an effective countermeasure for mitigating DDoS attacks?

Which type of attack involves taking control of multiple IoT devices to launch coordinated attacks?

Which standard provides a framework for managing sensitive company information?

What is the primary goal of the 'Exploitation' stage in the Cyber Kill Chain?

Which of the following is a common password cracking technique?

What is a primary security concern with IoT devices?

Which attack involves unauthorized access to or theft of information from a Bluetooth device?

Which of the following is a common threat to cloud computing environments?

What principle is aimed at minimizing the number of individuals who have access to secure information?

What is a primary feature of the Ophcrack tool?

What is a common method to prevent malware spread in an organization?

Which of the following is an example of a tool used in penetration testing for web applications?

Which attack is characterized by overwhelming a target with traffic from multiple sources?

Which practice should be implemented to secure a cloud environment effectively?

Which of the following is a type of malware?

Which password cracking technique uses precomputed hash values?

Which wireless-specific attack involves capturing and analyzing Wi-Fi traffic on a network?

In which phase of the hacking cycle does the hacker maintain access to use the network as a launch pad for other attacks?

What is the main goal of Cross-Site Scripting (XSS) attacks?