While simulating a reconnaissance phase against a cloud-hosted retail application, your team attempts to gather DNS records to map the infrastructure. You avoid brute-forcing subdomains and instead aim to collect specific details such as the domain's mail server, authoritative name servers, and potential administrative information such as serial number and refresh interval.
Given these goals, which DNS record type should you query to extract both administrative and technical metadata about the target zone?

• A. NS
• B. SOA
• C. TXT
• D. MX

During a security assessment, an attacker identifies a flaw in a multi-user file system. The system first verifies access rights to a temporary file created by a user. However, immediately after this verification, and before the file is processed, the attacker manages to swap the original file with a malicious version. This manipulation happens in the brief interval between the system ' s access verification and the moment it handles the file, resulting in the malicious file being treated as legitimate. Which vulnerability is the attacker exploiting?

• A. Integer overflow during arithmetic computations with limited memory bounds.
• B. Improper certificate validation in trusted communication channels.
• C. Time-of-validation/time-of-execution issue in resource management logic.
• D. Null pointer dereference leading to unexpected application behavior.

A red team specialist conducting an authorized wireless assessment for a technology firm in San Jose, California, targets employees connected to the corporate wireless network. After observing normal client activity, he transmits specially crafted management frames that cause several devices to temporarily disconnect from their current connection.
Shortly afterward, the affected devices attempt to reconnect to a nearby wireless signal controlled by the tester. When users access a web page through the connection, a hidden script silently sends requests to their network equipment. The requests execute actions without requiring user interaction and retrieve configuration information stored on the device.
The tester then allows the affected devices to return to their original network while the obtained information remains available for further analysis.
Which wireless attack technique is being demonstrated in this scenario?

• A. Rogue APs
• B. aLTEr Attack
• C. Evil Twin
• D. Wi-Jacking Attack

During a dynamic malware-analysis session in a secure laboratory at CyberGuard Solutions in Miami, Florida, ethical hacker Sofia Alvarez was monitoring a suspected ransomware sample running in a sandboxed environment. She executed a netstat command that listed all active TCP connections along with the exact process ID (PID), allowing her to immediately associate suspicious network activity with the malicious process.
This information helped her confirm that the malware was opening backdoor ports for command-and-control communication.
Which netstat parameter was Sofia most likely using?

• A. [-a]
• B. [-e]
• C. [-n]
• D. [-o]

A regional healthcare provider in Portland, Oregon, recently migrated its patient scheduling portal to a new cloud platform. Within days, multiple patients reported that when searching online for the clinic ' s appointment system, they were directed to a website that looked identical to the official portal. The fraudulent page appeared prominently in search engine results and prompted users to log in using their patient credentials. The URL closely resembled the legitimate domain name, and no internal DNS servers had been altered within the organization ' s infrastructure. Security analysts later determined that the attacker had created a convincing replica of the portal and manipulated search visibility so that unsuspecting users would voluntarily navigate to the malicious site. Which type of social engineering technique best explains this attack?

• A. Search Engine Phishing
• B. Whaling
• C. Spear Phishing
• D. Pharming