Cybersecurity Assessment and Network Tools practice questions

Question 1

A malicious page causes an already-authenticated browser to submit a state-changing POST request to another site, and the browser automatically includes the victim’s session cookie. Which attack is this?

Accepted Answer

Cross-site request forgery (CSRF)

Answer

SQL injection

Answer

DNS cache poisoning

Answer

Password spraying

Question 2

In the historical command syntax used by the source assessment, which command asks theHarvester to search the Google data source for up to 200 results about someclouddomain.org?

Accepted Answer

theHarvester -d someclouddomain.org -l 200 -b google

Answer

nmap -sS someclouddomain.org -p 200

Answer

dig -l 200 google someclouddomain.org

Answer

tracert -b google someclouddomain.org

Question 3

A public scan shows that an application origin server can be reached directly, bypassing its CDN/WAF. Which finding and two remediations are correct? Select all that apply.

Accepted Answer

The origin can be contacted directly, bypassing the WAF.

Accepted Answer

Require a trusted authentication header between the CDN and origin.

Accepted Answer

Restrict origin access to approved CDN or infrastructure components.

Answer

Expose additional origin ports publicly.

Answer

Remove all authentication between the CDN and origin.

Cybersecurity Assessment and Network Tools practice questions

Question stream

Discussion

Manage your cookie preferences

Loading subject practice

Loading Brainliest

Loading subject practice

Cybersecurity Assessment and Network Tools practice questions

Question stream

Discussion

Practice overview