Pass with 312-50v13 Practice Materials 100% for sure

Arjun Mehta, a red team specialist at Sentinel Dynamics, is conducting a controlled reconnaissance assessment against the company's perimeter network. During testing, the security operations team observes that the firewall logs display several different originating systems associated with the same scanning activity, Arjun's objective is to ensure that his actual testing machine cannot be easily distinguished from other recorded entries. What technique is Arjun using in this scenario?

• A. Source Port Manipulation
• B. IP Address Decoy
• C. IP Address Spoofing
• D. Source Routing

During an authorized security assessment at a municipal power distribution facility in Omaha, Nebraska, a certified ethical hacker performs passive traffic analysis between the control center and several remote substations.
The tester observes structured request-response messages used to read coil status and write register values on industrial controllers. All communication occurs over TCP port 502, and the protocol does not provide built-in encryption or authentication.
Based on these characteristics, which OT communication protocol is operating within this environment?

• A. DNP3
• B. OPC UA
• C. IEC 60870-S-104
• D. MODBUS

During a red team engagement targeting a custom web application, a tester observes that the app takes a numeric id parameter from the URL and dynamically builds SQL queries. Suspecting SQL injection, the tester sends a crafted HTTP GET request like:
http://vulnerableapp.local/view.php?id=l; DROP TABLE users; --Shortly after, the application throws database errors, and the team confirms that the users table has been removed from the backend database.
Based on this behavior, which SQL injection method was most likely used?

• A. The attacker triggered errors to extract database information.
• B. The attacker executed a second malicious query alongside the first.
• C. The attacker appended a UNION clause to retrieve additional data.
• D. The attacker used Boolean logic to infer true/false responses.

Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. Identify the behavior of the adversary in the above scenario.

• A. Use of command-line interface
• B. Data staging
• C. Use of DNS tunneling
• D. Unspecified proxy activities

During a network analysis at a mid-sized enterprise, a security engineer detects irregular DHCP behavior. Multiple endpoints are being assigned incorrect gateway and DNS settings, causing loss of connectivity and redirection to unauthorized servers. Packet captures show that clients are receiving IP address offers from more than one DHCP source. Upon further investigation, the logs confirm that the access switch is forwarding DHCP responses from all connected ports without filtering. This indicates that an unauthorized (rogue) DHCP server has been introduced into the network, impersonating the legitimate server and responding to client DHCPDISCOVER messages. To prevent this type of attack from occurring in the future, what security feature should the administrator enable?

• A. Static DHCP reservations for clients
• B. Port security on all trunk ports
• C. DHCP snooping on trusted interfaces
• D. ARP inspection across VLANs