A Security Engineer Has Been Hired to Design a Device

question 150

Multiple Choice

A security engineer has been hired to design a device that will enable the exfiltration of data from within a well-defended network perimeter during an authorized test. The device must bypass all firewalls and NIDS in place, as well as allow for the upload of commands from a centralized command and control server . The total cost of the device must be kept to a minimum in case the device is discovered during an assessment. Which of the following tools should the engineer load onto the device being designed?

• A) Custom firmware with rotating key generation
• B) Automatic MITM proxy
• C) TCP beacon broadcast software
• D) Reverse shell endpoint listener

---

Definitions:

Truth in Lending Act

A U.S. federal law designed to promote the informed use of consumer credit by requiring disclosures about its terms and cost.

Residential Mortgage Loans

Loans borrowed by individuals for the purpose of purchasing residential properties, secured by the property itself.

Restrictive Covenants

Clauses in a contract or deed that limit how a piece of property can be used, to protect the value of adjacent properties or enforce a particular standard.

Eminent Domain

The authority of a government to take private property for public purposes, providing payment to the property owner.