Question 926
At a Chicago-based healthcare provider, security engineer Emily reviews the migration of critical applications to a cloud service. During her evaluation, she notes that administrators can provision new servers, increase storage, and expand compute power instantly through a web dashboard without any manual involvement from the cloud provider. Which NIST-defined characteristic of cloud computing best explains this capability?
Question 927
A penetration tester wants to capture network traffic without actively transmitting packets onto the network. Which network interface mode allows the tester to receive all frames visible to the network adapter?
Question 928
While reviewing a web application's authentication mechanism, a penetration tester notices that the session identifier remains unchanged before and after successful login. Which security weakness does this MOST likely indicate?
Question 929
What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stacheldraht have in common?
Question 930
You work for Acme Corporation as Sales Manager. The company has tight network security restrictions. You are trying to steal data from the company's Sales database (Sales.xls) and transfer them to your home computer. Your company filters and monitors traffic that leaves from the internal network to the Internet.
How will you achieve this without raising suspicion?
How will you achieve this without raising suspicion?
