Instantly download 312-50v13 training test engine

A security analyst conducting an authorized assessment of an online procurement platform used by manufacturing firms in Columbus, Ohio, reviews how the application processes parameters supplied through HTTP requests.
While testing a product lookup parameter, he intentionally inserts special characters such as single quotes and semicolons into the input field to observe how the system responds. In several cases, the application returns error messages containing references to specific database drivers and providers.
By examining these responses, he identifies clues about the underlying platform responsible for the application ' s backend processing. The analyst uses this information to better understand the environment before attempting further testing.
Determine the information-gathering technique demonstrated in this scenario.

• A. Parameter Tampering
• B. Type Mismatch
• C. Grouping Error
• D. Determining Database Engine Type

While analyzing suspicious network activity, you observe a slow, stealthy scanning technique that is difficult to trace back to the attacker. Which scenario best describes the scanning technique being used?

• A. The attacker uses a "zombie" machine to perform scans, hiding their true identity
• B. The attacker performs full TCP connect scans on all ports
• C. The attacker sends packets with all TCP flags set
• D. The attacker sends FIN packets to infer port states based on responses

In a controlled testing environment in Houston, Sarah, an ethical hacker, is tasked with evaluating the security posture of a financial firm's network using the cyber kill chain methodology. She begins by simulating an attack, starting with gathering publicly available data about the company's employees and infrastructure.
Next, she plans to craft a mock phishing email to test employee responses, followed by deploying a harmless payload to assess system vulnerabilities. As part of her authorized penetration test, what phase of the cyber kill chain should Sarah prioritize to simulate the adversary's approach effectively?

• A. Reconnaissance
• B. Weaponization
• C. Delivery
• D. Exploitation

During a social engineering simul-ation at BrightPath Consulting in Denver, ethical hacker Liam emails employees a message that appears to come from the company's security team. The email urgently warns that
"all systems will shut down within 24 hours" unless staff download a patch from a provided link. The message is deliberately false and contains no actual malware, but it causes confusion and prompts several employees to call IT for clarification. Which social engineering technique is Liam demonstrating?

• A. Spam
• B. Baiting
• C. Pretexting
• D. Hoax

A penetration tester is tasked with assessing the security of a smart home IoT device that communicates with a mobile app over an unencrypted connection. The tester wants to intercept the communication and extract sensitive information. What is the most effective approach to exploit this vulnerability?

• A. Perform a brute-force attack on the device ' s Wi-Fi credentials
• B. Use a man-in-the-middle (MitM) attack to intercept and analyze the unencrypted traffic
• C. Execute a SQL injection attack on the IoT device's cloud management portal
• D. Use a dictionary attack to guess the admin login credentials of the device