- (Exam Topic 2)
Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection.
Identify the behavior of the adversary In the above scenario.

1. A. use of command-line interface
2. B. Data staging
3. C. Unspecified proxy activities
4. D. Use of DNS tunneling

Correct Answer: C
A proxy server acts as a gateway between you and therefore the internet. It’s an intermediary server separating end users from the websites they browse. Proxy servers provide varying levels of functionality, security, and privacy counting on your use case, needs, or company policy.If you’re employing a proxy server, internet traffic flows through the proxy server on its thanks to the address you requested. A proxy server is essentially a computer on the web with its own IP address that your computer knows. once you send an internet request, your request goes to the proxy server first. The proxy server then makes your web request on your behalf, collects the response from the online server, and forwards you the online page data so you’ll see the page in your browser.

- (Exam Topic 3)
Which of the following statements is TRUE?

1. A. Packet Sniffers operate on the Layer 1 of the OSI model.
2. B. Packet Sniffers operate on Layer 2 of the OSI model.
3. C. Packet Sniffers operate on both Layer 2 & Layer 3 of the OSI model.
4. D. Packet Sniffers operate on Layer 3 of the OSI model.

Correct Answer: B

- (Exam Topic 3)
What type of virus is most likely to remain undetected by antivirus software?

1. A. Cavity virus
2. B. Stealth virus
3. C. File-extension virus
4. D. Macro virus

Correct Answer: B

- (Exam Topic 2)
David is a security professional working in an organization, and he is implementing a vulnerability management program in the organization to evaluate and control the risks and vulnerabilities in its IT infrastructure. He is currently executing the process of applying fixes on vulnerable systems to reduce the impact and severity of vulnerabilities. Which phase of the vulnerability-management life cycle is David currently in?

1. A. verification
2. B. Risk assessment
3. C. Vulnerability scan
4. D. Remediation

Correct Answer: D

- (Exam Topic 3)
What type of a vulnerability/attack is it when the malicious person forces the user’s browser to send an authenticated request to a server?

1. A. Session hijacking
2. B. Server side request forgery
3. C. Cross-site request forgery
4. D. Cross-site scripting

Correct Answer: C