You are an ethical hacker at Vanguard Cyber Defense, hired by Sunrise Logistics, a freight management company in Houston, Texas, to evaluate the security of their shipment tracking portal. During your engagement, you analyze how the application handles user-submitted data. You observe the behavior of the shipment search feature and monitor the HTTP GET requests being sent to the server. Your objective is to determine how user input is processed by the backend system and whether those parameters can be used to manipulate SQL queries. Based on this activity, which step of the SQL injection methodology are you performing?

• A. Launching SQL Injection Attacks
• B. Advanced SQL Injection
• C. Identifying Data Entry Paths
• D. Database Enumeration

At a digital marketing firm in Atlanta, Georgia, employees began reporting that access to a widely used cloud collaboration portal was intermittently redirecting them to a counterfeit interface hosted on an unfamiliar IP address. Security engineers observed that when multiple users across different departments attempted to access the legitimate domain, they consistently received the same incorrect IP resolution. The anomalous behavior persisted across sessions and affected numerous internal clients until the organization ' s name resolution service was restarted, after which normal resolution resumed. What DNS manipulation technique best explains this scenario?

• A. Executing Proxy Server DNS Poisoning to alter resolution paths
• B. Conducting Internet DNS Spoofing from a remote network
• C. Injecting malicious records through DNS Cache Poisoning
• D. Performing Intranet DNS Spoofing within the local network

During a red team exercise, a Certified Ethical Hacker (CEH) is attempting to exploit a potential vulnerability in a target organization's web server. The CEH has completed the information gathering and footprinting phases and has mirrored the website for offline analysis. It has also been discovered that the server is vulnerable to session hijacking. Which of the following steps is most likely to be part of a successful attack methodology while minimizing the possibility of detection?

• A. Hijack an active session and immediately modify server configuration files.
• B. Attempt SQL injection to extract sensitive database information.
• C. Perform vulnerability scanning using automated tools to identify additional weaknesses.
• D. Launch a direct brute-force attack to crack the server's administrative password.

At a large insurance technology firm in Dublin, Ireland, a security assessment team was evaluating the resilience of an internal HTTPS-based claims-processing platform. The application relied heavily on encrypted communication channels to protect sensitive customer transactions exchanged between client systems and backend services.
During controlled testing, a penetration tester positioned within the internal network began analyzing encrypted traffic flows between employee workstations and the application gateway. While the payload contents remained unreadable, the tester observed repeated patterns in certain cryptographic parameters associated with multiple secure sessions established over time. By carefully correlating these patterns across numerous requests, the tester identified that specific values expected to remain unique during encrypted exchanges were being reused under certain conditions.
At this stage, the tester was able to derive sufficient information to construct forged communication data accepted by the server as authentic.
What technique best accounts for this cryptographic weakness?

• A. Man-in-the-Browser (MITB) attack
• B. Forbidden attack
• C. Man-in-the-Middle (MITM) attack
• D. CRIME attack