A Client Is Asking a Penetration Tester to Evaluate a New

question 145

Multiple Choice

A client is asking a penetration tester to evaluate a new web application for availability. Which of the following types of attacks should the tester use?

• A) TCP SYN flood
• B) SQL injection
• C) XSS
• D) XMAS scan

Understand the concepts and importance of information security within an organization.

Identify and describe common threats to information security, such as identity theft and ransomware attacks.

Recognize the role and types of information security controls, including preventative and responsive measures.

Understand risk management in the context of information security, including assessment, mitigation strategies, and the importance of ongoing risk evaluation.

---

Definitions:

Chi-square Statistic

A statistic that measures the difference between observed counts and counts expected under a specific hypothesis, used in tests of independence and goodness-of-fit.

Binomial Proportions

The probabilities of outcomes for a binomial distribution, which describes the number of successes in a fixed number of binary experiments.

Two-tail Test

A statistical hypothesis test in which the area of interest, or rejection region, is in both tails of the probability distribution, used to determine if there is a significant difference in either direction.

Z-test

A statistical test used to determine if there is a significant difference between sample and population means under the assumption of a normal distribution.