100% Accurate Answers! May-2026 112-52 Actual Real Exam Questions Best Value Available! 2026 Realistic Verified Free 112-52 Exam Questions NEW QUESTION # 11 Which of the following is considered an insider threat? A. A malware infection from an email attachment B. A denial-of-service attack from an unknown external source C. A hacker exploiting a vulnerability in the firewall D. A disgruntled employee [...]

100% Accurate Answers! May-2026 112-52 Actual Real Exam Questions [Q11-Q35]

Share

100% Accurate Answers! May-2026 112-52 Actual Real Exam Questions

Best Value Available! 2026 Realistic Verified Free 112-52 Exam Questions

NEW QUESTION # 11
Which of the following is considered an insider threat?

  • A. A malware infection from an email attachment
  • B. A denial-of-service attack from an unknown external source
  • C. A hacker exploiting a vulnerability in the firewall
  • D. A disgruntled employee transmitting confidential data to a competitor

Answer: D


NEW QUESTION # 12
Which of the following BEST helps prevent session hijacking?

  • A. Changing network infrastructure frequently
  • B. Clearing browser cookies regularly
  • C. Disabling logging mechanisms
  • D. Use of HTTPS instead of HTTP

Answer: D


NEW QUESTION # 13
Which regulation specifically addresses the protection of personal data within the European Union?

  • A. HIPAA
  • B. Sarbanes-Oxley Act
  • C. GDPR
  • D. FISMA

Answer: C


NEW QUESTION # 14
What is the primary goal of an information security program?

  • A. To increase data processing speeds
  • B. To ensure usability of the system
  • C. To promote an open and shared environment
  • D. To protect the confidentiality, integrity, and availability of data

Answer: D


NEW QUESTION # 15
What is a critical aspect of defending against password cracking?

  • A. Allowing unlimited login attempts
  • B. Avoiding the use of multi-factor authentication
  • C. Using common passwords across systems
  • D. Regular user training on secure password creation

Answer: D


NEW QUESTION # 16
Which of the following is an example of a social engineering technique?

  • A. Code obfuscation
  • B. Pretexting
  • C. SQL injection
  • D. Malware injection

Answer: B


NEW QUESTION # 17
Which of the following is considered a physical threat?

  • A. Tailgating
  • B. Phishing
  • C. SQL injection
  • D. Cross-site scripting

Answer: A


NEW QUESTION # 18
Which activity is outside the scope of an ethical hacker?

  • A. Launching a DDoS attack to test system resilience
  • B. Identifying vulnerabilities in a client's systems
  • C. Informing hardware and software vendors of identified vulnerabilities
  • D. Exploiting vulnerabilities without intent to harm

Answer: A


NEW QUESTION # 19
Which practice BEST protects a mobile device against attacks?

  • A. Using open public Wi-Fi without VPN
  • B. Installing apps from unverified sources
  • C. Regularly updating the device operating system
  • D. Regularly updating the device operating system

Answer: C


NEW QUESTION # 20
What is a key security concern when using public cloud services?

  • A. Data visibility and control
  • B. Limited resource availability
  • C. Low scalability
  • D. Shared responsibility model

Answer: A


NEW QUESTION # 21
Which of the following is a common threat to cloud computing environments?

  • A. API vulnerabilities
  • B. Insecure interfaces and APIs
  • C. Automated scaling
  • D. Increased network bandwidth

Answer: B


NEW QUESTION # 22
What is considered a fundamental characteristic of IoT devices?

  • A. Requirement for manual control
  • B. Ability to operate independently of an internet connection
  • C. High mobility and portability
  • D. Interconnectivity and communication over networks

Answer: D


NEW QUESTION # 23
Which of the following is an effective countermeasure against cloud-based data breaches?

  • A. Disabling multi-factor authentication
  • B. Allowing unrestricted access to cloud storage
  • C. Using weak passwords for cloud accounts
  • D. Encrypting data at rest and in transit

Answer: D


NEW QUESTION # 24
Which of the following best describes a vulnerability in the context of information security?

  • A. An unauthorized attempt to access a system
  • B. A method for encrypting data
  • C. A weakness in a system that could be exploited
  • D. A tool used to assess security posture

Answer: C


NEW QUESTION # 25
What technique involves the social engineer pretending to be someone else to obtain sensitive information?

  • A. Pretexting
  • B. Baiting
  • C. Phishing
  • D. Tailgating

Answer: A


NEW QUESTION # 26
Which of the following statements about SQL injection attacks is true?

  • A. They can reveal sensitive data from the database.
  • B. They require the attacker to have direct access to the database server.
  • C. They are only successful on outdated database systems.
  • D. They can only be executed via GET requests.

Answer: A


NEW QUESTION # 27
Which attack involves unauthorized access to or theft of information from a Bluetooth device?

  • A. Bluesnarfing
  • B. Bluejacking
  • C. Man-in-the-Middle
  • D. War driving

Answer: A


NEW QUESTION # 28
Which of the following is a common wireless network-specific attack technique?

  • A. IV attack
  • B. Phishing
  • C. SQL injection
  • D. Cross-site scripting

Answer: A


NEW QUESTION # 29
Which mobile-specific attack can be performed through public Wi-Fi networks?

  • A. Brute force attack
  • B. Social engineering
  • C. Rogue AP attack
  • D. Buffer overflow

Answer: C


NEW QUESTION # 30
Which stage of the Cyber Kill Chain involves delivering the weaponized payload to the target?

  • A. Reconnaissance
  • B. Delivery
  • C. Installation
  • D. Weaponization

Answer: B


NEW QUESTION # 31
Which of the following is a common attack vector for mobile devices?

  • A. Man-in-the-middle
  • B. Phishing via SMS (Smishing)
  • C. SQL injection
  • D. Buffer overflow

Answer: B


NEW QUESTION # 32
Which of the following is an effective countermeasure against password cracking?

  • A. Using long, complex passwords
  • B. Storing passwords in plaintext
  • C. Disabling account lockout policies
  • D. Using the same password across systems

Answer: A


NEW QUESTION # 33
Which of the following best describes a zero-day vulnerability?

  • A. A vulnerability that does not require user interaction to be exploited
  • B. A vulnerability that is exploited before the vendor has issued a patch
  • C. A vulnerability that affects all versions of a software
  • D. A vulnerability that exists for zero days before being detected

Answer: B


NEW QUESTION # 34
What is a critical countermeasure for protecting OT environments?

  • A. Applying comprehensive patch management
  • B. Implementing deep packet inspection
  • C. Using a strong social media policy
  • D. Enforcing strict data retention policies

Answer: A


NEW QUESTION # 35
......

Actual Questions Answers Pass With Real 112-52 Exam Dumps: https://www.prep4surereview.com/112-52-latest-braindumps.html

Pass Your Exam Easily! 112-52 Real Question Answers Updated: https://drive.google.com/open?id=1MOJQ8oCetFkGqxjVjuDsOIwLGL6Ysn5w