112-52 Exam Questions

Which of the following is a core principle of the CIA triad?

Which technique helps mitigate DoS and DDoS attacks by controlling traffic flow?

Which countermeasure can mitigate the risk of a rogue access point?

Which of the following is a common method used in identity theft?

What is the MOST effective countermeasure against packet sniffing?

What is a key security concern when using public cloud services?

Which device is commonly used to perform packet sniffing?

Which type of sniffing technique is used on a switch-based network?

Which phase in the mobile attack anatomy involves exploiting a vulnerability to gain unauthorized access?

Which countermeasure is effective in protecting cloud environments against data breaches?

Which of the following BEST helps prevent session hijacking?

Which action MOST improves IoT device security?

Which stage of the Cyber Kill Chain involves delivering the weaponized payload to the target?

What is the primary focus of Operational Technology (OT) systems?

Which phase of penetration testing involves attempting to exploit identified vulnerabilities?

In the context of vulnerability assessment, what is the significance of false positives?

What is the purpose of the Health Insurance Portability and Accountability Act (HIPAA)?

Which statement BEST describes a limitation of ethical hacking?

Ethical hackers should follow which important guideline?

What primarily distinguishes a grey hat hacker from a black hat hacker?

Which of the following is an effective countermeasure against cloud-based data breaches?

What is an effective countermeasure against web server attacks?

The term ethical hacking is defined by which of the following actions?

An attacker tries every possible password combination systematically. What attack is this?

Which SQL injection character is commonly used to comment out the rest of a SQL query?

Which type of XSS is stored on the server and executed when users access the page?

Which attack sends a massive number of ICMP echo requests?

Which of the following statements about SQL injection attacks is true?

In the context of information security, what does the 'CIA triad' stand for?

Which attack targets the configuration and administration of the web server itself?

Which is the MOST effective countermeasure against social engineering attacks?

Which term refers to an unauthorized device that connects to a wireless network?

What technique involves the social engineer pretending to be someone else to obtain sensitive information?

Which activity is outside the scope of an ethical hacker?

Which of the following is typically identified during a vulnerability assessment?

What is the purpose of the post-exploitation phase in penetration testing?

Which of the following is a key component of web application security?

In which phase of penetration testing is information gathered to identify potential targets and their vulnerabilities?

What is a key benefit of conducting penetration testing?

Which type of hacker works ethically to improve system security?

Which of the following is a web application attack?

What is an effective countermeasure against pretexting?

Which wireless encryption standard provides the highest level of security?

In the context of network security, what is session hijacking?

What is the primary purpose of a packet sniffer?

Which technique is MOST effective in preventing SQL Injection attacks?

Which of the following is a common cloud computing threat?

Which of the following is a sign of a potential vishing attack?

Which technique allows an attacker to see data in transit over a network?

Which type of hacker is considered ethical and works with organizations to improve their security?