312-50v13 — Frequently Asked Questions

Delivery is the transmission step. Since it's not an option, and the question emphasizes 'creating' the backdoor, Weaponization is the intended focus.

Weaponization is assembling the exploit and payload. Exploitation is the actual triggering of that payload on the target system.

Tethered jailbreaking requires a computer to be connected every time the device reboots to restore the jailbreak. Untethered jailbreaking persists automatically after reboots without external help.

Option A (Tethered) is incorrect because it implies the device loses its jailbroken state upon reboot unless manually restored via a computer connection, which contradicts the 'no assistance' requirement of the question.

DNS Tunneling is used for covert data transmission or C2 channels. This scenario describes using domains to hide identity/location, which is an evasion/proxy tactic.

Data Staging is the process of collecting stolen data in a temporary directory on a compromised system before final exfiltration. It is unrelated to domain management.

THC-Hydra can perform dictionary attacks against various protocols and also support hash cracking for specific formats, making it relevant to password attacks.

Yes, Netcat can be used to exfiltrate cracked password files or establish reverse shells after gaining access, but it does not perform the cracking process itself.

ICMP pings are often blocked by restrictive firewalls. ARP operates at Layer 2 and is used for local address resolution, making it less likely to be filtered.

ACK scans can infer firewall rules but are not reliable for comprehensive host discovery, especially compared to ARP on the local segment.

AES uses 128-bit blocks and key sizes of 128/192/256 bits, whereas the question specifies 64-bit blocks and 56-bit keys.

It uses three 56-bit keys (K1, K2, K3), though often implemented as two keys (K1=K3) for backward compatibility.

Phishing typically involves mass digital communications like emails. This scenario involves a direct, personalized phone call where the attacker offers a specific service.

Quid pro quo involves an exchange of a promised benefit (like support) for action. Elicitation focuses on drawing out information through conversation without necessarily offering a tangible service.

getuid displays the current user ID of the session, while getsystem attempts to elevate the session to SYSTEM privileges.

No, autoroute is used to add routes to the routing table so traffic can reach other networks via the compromised host.

Maimon scans use FIN/ACK flags, while Xmas scans use FIN/PSH/URG flags. Both aim to evade logging but have different flag compositions.

An open port ignores the FIN flag because the TCP handshake was never completed. It waits for further data or a reset, whereas a closed port immediately sends a RST.

IntentFuzzer is designed for fuzzing RESTful APIs to find web application vulnerabilities. It does not provide the network traffic analysis or anomaly detection capabilities needed to secure Industrial Control Systems.

Flowmon specializes in network flow analysis and uses Anomaly Detection Systems (ADS) to identify deviations from normal industrial protocol behavior, making it ideal for detecting threats in OT networks without causing disruption.

Yes, LDAP supports anonymous binds by default, but this allows anyone to query the directory. Authentication protocols like NTLM or Kerberos are needed to restrict this.

RADIUS is primarily for network access control (like Wi-Fi or VPN), whereas NTLM/Kerberos are native to the Windows domain environment where LDAP resides.