A penetration tester is evaluating a secure web application that uses HTTPS, secure cookie flags, and regenerates session IDs only during specific user actions. To hijack a legitimate user ' s session without triggering security alerts, which advanced session hijacking technique should the tester employ?

• A. Perform a man-in-the-middle attack by exploiting certificate vulnerabilities
• B. Implement a Cross-Site Scripting (XSS) attack to steal session tokens
• C. Conduct a session token prediction attack by analyzing session ID patterns
• D. Use a session fixation attack by setting a known session ID before the user logs in

During a penetration testing engagement at First Union Bank in Chicago, ethical hacker Rachel Morgan is assigned to assess the internal network for potential sniffing activity that could compromise sensitive customer data. While inspecting traffic in the loan processing department, Rachel observes that a workstation is receiving packets not addressed to it, raising suspicion of a sniffing tool operating in promiscuous mode. To validate her hypothesis, she prepares to conduct an active verification using a classic detection approach.
Which detection technique should Rachel use to confirm the presence of a sniffer in this case?

• A. Sniffer detection using an NSE script to check for promiscuous mode
• B. Ping method by sending packets with an incorrect MAC address
• C. ARP method by sending non-broadcast ARP requests
• D. DNS method by monitoring reverse DNS lookup traffic

A penetration tester performing a mobile security assessment for a fintech company in Chicago, Illinois installs a seemingly harmless utility application on a test Android smartphone.
During testing, the official banking application downloads account statements and stores them temporarily in the device ' s shared storage directory. The utility application, which has access to the same storage area, automatically detects the files and reads their contents before the banking application can retrieve and display the data.
The entire process occurs locally without intercepting any network traffic or requiring root privileges.
Which Android exploitation technique does this scenario describe?

• A. Camfecting Attack
• B. Spearphone Attack
• C. Simjacker Attack
• D. Man-in-the-Disk Attack

You are Riley, an incident responder at NovaEx Crypto in San Antonio, Texas, tasked with investigating a recent double-spend reported by a retail merchant that accepts the exchange ' s token. Your telemetry shows that a reseller node used by the merchant received blocks only from a small, fixed set of peers for several hours and accepted a conflicting history that later allowed the attacker to reverse a confirmed payment. The attacker appears to have controlled which peers that node communicated with and supplied it a private chain until they were ready to reveal it. Which blockchain attack does this behavior most closely describe?

• A. Eclipse Attack
• B. DeFi Sandwich Attack
• C. Finney Attack
• D. 51% Attack

On 10th of July this year, during a security penetration test at IntelliCore Systems in Raleigh, North Carolina, the ethical hacking team evaluates the stability of the company's file-sharing server. Sofia crafts and transmits a sequence of oversized, malformed packets designed to test how the server handles unexpected input. Shortly after, the system begins crashing intermittently due to processing failures triggered by these anomalous network requests. The security team onsite is tasked with identifying the root cause behind the packet-induced instability and attributing it to a known DoS tactic.
Which of the following best explains the technique Sofia used to trigger the server crashes?

• A. Ping of Death PoD
• B. ACK Flood Attack
• C. Smurf Attack
• D. ICMP Flood Attack