gratisexam.com-ECCouncil.BrainDumps.312-50.v2017-02-16.by.Tony.117q (1)
"Risks = Threats x Vulnerabilities" is also known as: A. BIA equation B. Disaster recovery formula C. Risk equation D. Threat assessment
C
A possibly malicious sequence of packets that were sent to a web server has been captured by an Intrusion Detection System (IDS) and was saved to a PCAP file. As a network administrator, you need to determine whether this packets are indeed malicious. What tool are you going to use? A. Intrusion Prevention System (IPS) B. Vulnerability scanner C. Protocol analyzer D. Network sniffer
C
A server has been infected by a certain type of Trojan. The hacker intended to utilize it to send and host junk mails. What type of Trojan did the hacker use? A. Turtle Trojans B. Ransomware Trojans C. Botnet Trojan D. Banking Trojans
C
Programs such as EtherPeek, TCPDUMP, WinDump, and Wireshark captures packets and save them to a file. Which tool can be used to analyze files created by such programs? A. Nessus B. tcptrace C. tcptraceroute D. OpenVAS
C
QUESTION 71 What should you implement if you want to deny network access to local area networks and other information assets by unauthorized wireless devices? A. Wireless Analyzer B. Wireless Access Point C. Wireless Intrusion Prevention System D. Wireless Access Control List
C
Which of the following regulations stipulates that all medical practices must ensure that all necessary measures are in place while saving, accessing, and sharing any electronic medical data to keep patient data secure? A. FISMA B. COBIT C. HIPAA D. ISO/IEC 27002
C
You've just gained root access to a Centos 6 server after days of trying. What tool should you use to maintain access? A. Disable Key Services B. Create User Account C. Download and Install Netcat D. Disable IPTables
C
What particular protocol does a man-in-the-middle attacker utilizes to guess a sequence number? A. UDP B. ICMP C. UPX D. TCP
D
What's the best counter-measure against network sniffers? A. Use static IP address B. Register all machines MAC address in a centralized database C. Restrict physical access to server rooms hosting critical servers D. Using encryption protocols to secure network communications
D
When a server and client communicate, it ensures that no third party may eavesdrop or tamper with any message. It is the successor to the Secure Sockets Layer (SSL). Which of the following is being described? A. RSA B. IPSec C. GRE D. TLS
D
When you are collecting information to perform a data analysis, Google commands are very useful to find sensitive information and files. These files may contain information about passwords, system functions, or documentation. Which of the following will help you find excel files on www.target.com? A. site: target.com file:xls username password email B. domain: target.com archive:xls username password email C. inurl: target.com filename:xls username password email D. site: target.com filetype:xls username password email
D
Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE? A. http-git B. http-headers C. http enum D. http-methods
D
Which of the following password-cracking methods takes the most effort and time? A. Shoulder surfing B. Dictionary attack C. Rainbow tables D. Brute force
D
While doing a pen test, you came to a point that you were able to unveil interesting info such as the administrator's online banking username and password and other secondary-level security info. What's the best thing to do? A. Transfer money from the administrator's account to another account B. Validate the info you've just acquired by logging in to the account. You'll just test authentication and that's all. C. Ignore it and continue the penetration test D. Report immediately to the administrator
D
XOR is a common cryptographic tool. 10110001 XOR 00111010 is? A. 10111100 B. 11011000 C. 10011101 D. 10001011
D
You were tasked to implement a DNS infrastructure wherein you create two zones for the same domain, one to be used by the internal network, the other used by the external network. What is this type of DNS configuration commonly called? A. DNSSEC B. DNS Scheme C. DynDNS D. Split DNS
D
If you are to determine the attack surface of an organization, which of the following is the BEST thing to do? A. Running a network scan to detect network services in the corporate DMZ B. Reviewing the need for a security clearance for each employee C. Using configuration management to determine when and where to apply security patches D. Training employees on the security policy regarding social engineering
a
It is a short-range wireless communication technology that allows mobile phones, computers and other devices to connect and communicate. This technology intends to replace cables connecting portable devices with high regards to security. A. Bluetooth B. Radio-Frequency Identification C. WLAN D. InfraRed
a
Jack was attempting to fingerprint all machines in the network using the following Nmap syntax: invictus@victim_server:~$ nmap -T4 -0 10.10.0.0/24 TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxx. QUITTING! Obviously, it is not going through. What is the issue here? A. OS Scan requires root privileges B. The nmap syntax is wrong. C. The outgoing TCP/IP fingerprinting is blocked by the host firewall D. This is a common behavior for a corrupted nmap application
a
Nation-state threat actors often discover vulnerabilities and hold on to them until they want to launch a sophisticated attack. - An example of which is the Stuxnet Attack. Stuxnet attack is an example of what style of attack? A. Zero-Day B. Zero-Sum C. Zero-Hour D. No-Day
a
QUESTION 90 Which of the following is an architectural pattern in computer software design which provides application functionality as services to other applications? A. Service Oriented Architecture B. Agile Process C. Object Oriented Architecture D. Lean Coding
a
Security and privacy of/on information systems are two entities that requires lawful regulations. Which of the following regulations defines security and privacy controls for Federal information systems and organizations? A. NIST SP 800-53 B. PCI-DSS C. EU Safe Harbor D. HIPAA
a
The chance of a hard drive failure is known to be once every four years. The cost of a new hard drive is $500. EF (Exposure Factor) is about 0.5. Calculate for the Annualized Loss Expectancy (ALE). A. $62.5 B. $250 C. $125 D. $65.2
a
The tester is obliged to restore the systems to a pretest state. Which of the following activities should not be included in "Post-attack Phase and Activities"? I. Removing all files uploaded on the system. II. Cleaning all registry entries. III. Mapping of network state. IV. Removing all tools and maintaining backdoor for reporting. A. III and IV B. All should be included C. III D. IV
a
What does "Collision attack" do? A. Collision attacks try to find two inputs producing the same hash. B. Collision attacks try to break the hash into three parts to get the plaintext value. C. Masquerading D. Collision attacks try to get the public key.
a
What kind of restriction does "gray box testing" methodology implement? A. The internal operation of a system is only partly accessible to the tester B. Only the internal operation of a system is known to the tester C. Only the external operation of a system is accessible to the tester D. The internal operation of a system is completely known to the tester
a
What kind of risk will remain even if all theoretically possible safety measures would be applied? A. Residual risk B. Inherent risk C. Impact risk D. Deferred risk
a
Which of the following implements the security concept - "separation of duties"? A. Firewall B. Bastion host C. Intrusion Detection System D. Honeypot
a
While you were gathering information as part of security assessments for one of your clients, you were able to gather data that show your client is involved with fraudulent activities. What should you do? A. Immediately stop work and contact the proper legal authorities B. Ignore the data and continue the assessment until completed as agreed C. Confront the client in a respectful manner and ask her about the data D. Copy the data to removable media and keep it in case you need it
a
A new wireless client that is 802.11 compliant cannot connect to a wireless network given that the client can see the network and it has compatible hardware and software installed. Upon further tests and investigation it was found out that the Wireless Access Point (WAP) was not responding to the association requests being sent by the wireless client. What MOST likely is the issue on this scenario? A. The client cannot see the SSID of the wireless network B. The WAP does not recognize the client's MAC address. C. The wireless client is not configured to use DHCP. D. Client is configured for the wrong channel
b
A possible breach of network security may have occurred in one of your clients' network. Hence, you requested a copy of event logs from all firewalls, proxy servers, and Intrusion Detection Systems (IDS). However, upon reviewing the logs, the sequence of many of the logged events do not match. What might be the case? A. The security breach was a false positive B. The network devices are not all synchronized C. The attacker altered or erased events from the logs D. Proper chain of custody was not observed while collecting the logs
b
A recent security audit revealed that there were indeed several occasions that the company's network was breached. After investigating, you discover that your IDS is not configured properly and therefore is unable to trigger alarms when needed. What type of alert is the IDS giving? A. True Positive B. False Negative C. False Positive D. False Positive
b
In 2007, this wireless security algorithm was rendered useless. Its security flaw led to a network invasion of TJ Maxx and data theft through a technique known as war-driving. Which of the following is the oldest and the weakest of the available wireless encryption protocols? A. Wi-Fi Protected Access 2 (WPA2) B. Wired Equivalent Privacy (WEP) C. Temporal Key Integrity Protocol (TKIP) D. Wi-Fi Protected Access (WPA)
b
One day while working in the office, you receive a memo via email from the IT Security Department requiring all employees to delete all internet cookies every end of day. What sort of security breach is this policy attempting to mitigate? A. Attempts by attackers to access passwords stored on the user's computer without the user's knowledge B. Attempts by attackers to determine the user's Web browser usage patterns, including when sites were visited and for how long C. Attempts by attackers to access the user and password information stored in the company's SQL database D. Attempts by attackers to access Websites that trust the Web browser user by stealing the user's authentication credentials
b
QUESTION 95 You have successfully compromised a Linux Server. Unfortunately, a Network Based Intrusion Detection Systems (NIDS) is installed. Which of the following could help you evade any detection of the outgoing traffic you would be creating? A. Alternate Data Streams B. Encryption C. Protocol Isolation D. Out of band signaling
b
Supposed you are the Chief Network Engineer of a certain Telco. Your company is planning for a big business expansion and it requires that your network authenticate users connecting using analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network. Which AAA protocol would you implement? A. TACACS+ B. DIAMETER C. Kerberos D. RADIUS
b
The following are types of Bluetooth attack EXCEPT_____? A. Bluejacking B. Bluesmaking C. Bluesnarfing D. Bluedriving
b
What tool and process are you going to use in order to remain undetected by an IDS while pivoting and passing traffic over a server you've compromised and gained root access to? A. Install and use Telnet to encrypt all outgoing traffic from this server. B. Install Cryptcat and encrypt outgoing packets from this server. C. Use HTTP so that all traffic can be routed via a browser, thus evading the internal Intrusion Detection Systems. D. Use Alternate Data Streams to hide the outgoing packets from this server.
b
Which of the following is an IDS evasion technique that is very common in the web? A. Port knocking B. Unicode characters C. Subnetting D. Spyware
b
Which of the following statements regarding ethical hacking is wrong? A. Ethical hackers should never use tools or methods that have the potential of exploiting vulnerabilities in an organization's systems B. An organization should use ethical hackers who do not sell vendor hardware/software or other consulting services C. Testing should be remotely performed off site D. Ethical hacking should not involve writing to or modifying the target systems
b
Which of the following tools would MOST LIKELY be used to perform security audit on various of forms of network systems? A. Intrusion Detection System B. Vulnerability scanner C. Port scanner D. Protocol analyzer
b
Which specific element of security testing is being assured by using hash? A. Authentication B. Integrity C. Confidentiality D. Availability
b
While doing a Black box pen test via the TCP port (80), you noticed that the traffic gets blocked when you tried to pass IRC traffic from a web enabled host. However, you also noticed that outbound HTTP traffic is being allowed. What type of firewall is being utilized for the outbound traffic? A. Stateful B. Application C. Circuit D. Packet Filtering
b
A hacker was able to easily gain access to a website. He was able to log in via the frontend user login form of the website using default or commonly used credentials. This exploitation is an example of what Software design flaw? A. Insufficient security management B. Insufficient database hardening C. Insufficient input validation D. Insufficient exception handling
c
First thing you do every office day is to check your email inbox. One morning, you received an email from your best friend and the subject line is quite strange. What should you do? A. Delete the email and pretend nothing happened. B. Forward the message to your supervisor and ask for her opinion on how to handle the situation C. Forward the message to your company's security response team and permanently delete the message from your computer. D. Reply to the sender and ask them for more information about the message contents.
c
It is a widely used standard for message logging. It permits separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them.This protocol is specifically designed for transporting event messages. Which of the following is being described? A. SNMP B. ICMP C. SYSLOG D. SMS
c
Knowing the nature of backup tapes, which of the following is the MOST RECOMMENDED way of storing backup tapes? A. In a cool dry environment B. Inside the data center for faster retrieval in a fireproof safe C. In a climate controlled facility offsite D. On a different floor in the same building
c
One of the Forbes 500 companies has been subjected to a large scale attack. You are one of the shortlisted pen testers that they may hire. During the interview with the CIO, he emphasized that he wants to totally eliminate all risks. What is one of the first things you should do when hired? A. Interview all employees in the company to rule out possible insider threats. B. Establish attribution to suspected attackers. C. Explain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to acceptable levels. D. Start the Wireshark application to start sniffing network traffic.
c
QUESTION 24 What is the best Nmap command to use when you want to list all devices in the same network quickly after you successfully identified a server whose IP address is 10.10.0.5? A. nmap -T4 -F 10.10.0.0/24 B. nmap -T4 -q 10.10.0.0/24 C. nmap -T4 -O 10.10.0.0/24 D. nmap -T4 -r 10.10.1.0/24
c
Suppose you've gained access to your client's hybrid network. On which port should you listen to in order to know which Microsoft Windows workstations has its file sharing enabled? A. 1433 B. 161 C. 445 D. 3389
c
The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk? A. Accept B. Mitigate C. Delegate D. Avoid
c
This configuration allows NIC to pass all traffic it receives to the Central Processing Unit (CPU), instead of passing only the frames that the controller is intended to receive. Select the option that BEST describes the above statement. A. Multi-cast mode B. WEM C. Promiscuous mode D. Port forwarding
c
What is the term coined for logging, recording and resolving events in a company? A. Internal Procedure B. Security Policy C. Incident Management Process D. Metrics
c
What tool should you use when you need to analyze extracted metadata from files you collected when you were in the initial stage of penetration test (information gathering)? A. Armitage B. Dimitry C. Metagoofil D. cdpsnarf
c
When security and confidentiality of data within the same LAN is of utmost priority, which IPSec mode should you implement? A. AH Tunnel mode B. AH promiscuous C. ESP transport mode D. ESP confidential
c
Which of the following Nmap commands looks for IP addresses? A. >host -t soa hackeddomain.com B. >host -t AXFR hackeddomain.com C. >host -t a hackeddomain.com D. >host -t ns hackeddomain.com
c
Which of the following is NOT an ideal choice for biometric controls? A. Iris patterns B. Fingerprints C. Height and weight D. Voice
c
Which of the following is designed to verify and authenticate individuals taking part in a data exchange within an enterprise? A. SOA B. Single-Sign On C. PKI D. Biometrics
c
Which of the following is the BEST way to protect Personally Identifiable Information (PII) from being exploited due to vulnerabilities of varying web applications? A. Use cryptographic storage to store all PII B. Use full disk encryption on all hard drives to protect PII C. Use encrypted communications protocols to transmit PII D. Use a security token to log into all Web applications that use PII
c
Which of the following monitors network or system activities for malicious activities or policy violations and produces reports to a management station? A. Proxy B. Router C. Intrusion Detection System D. Firewall
c
Which of the following tools is used by pen testers and analysts specifically to analyze links between data using link analysis and graphs? A. Metasploit B. Wireshark C. Maltego D. Cain & Abel
c
While doing a technical assessment to determine network vulnerabilities, you used the TCP XMAS scan. What would be the response of all open ports? A. The port will send an ACK B. The port will send a SYN C. The port will ignore the packets D. The port will send an RST
c
While performing online banking using a Web browser, Kyle receives an email that contains an image of a well-crafted art. Upon clicking the image, a new tab on the web browser opens and shows an animated GIF of bills and coins being swallowed by a crocodile. After several days, Kyle noticed that all his funds on the bank was gone. What Web browser-based security vulnerability got exploited by the hacker? A. Clickjacking B. Web Form Input Validation C. Cross-Site Request Forgery D. Cross-Site Scripting
c
You are about to be hired by a well known Bank to perform penetration tests. Which of the following documents describes the specifics of the testing, the associated violations, and essentially protects both the bank's interest and your liabilities as a tester? A. Service Level Agreement B. Non-Disclosure Agreement C. Terms of Engagement D. Project Scope
c
You've just discovered a server that is currently active within the same network with the machine you recently compromised. You ping it but it did not respond. What could be the case? A. TCP/IP doesn't support ICMP B. ARP is disabled on the target server C. ICMP could be disabled on the target server D. You need to run the ping command with root privileges
c
determine if a software program properly handles a wide range of invalid input? A. Mutating B. Randomizing C. Fuzzing D. Bounding
c
A big company, who wanted to test their security infrastructure, wants to hire elite pen testers like you. During the interview, they asked you to show sample reports from previous penetration tests. What should you do? A. Share reports, after NDA is signed B. Share full reports, not redacted C. Decline but, provide references D. Share full reports with redactions
d
A company recently hired your team of Ethical Hackers to test the security of their network systems. The company wants to have the attack be as realistic as possible. They did not provide any information besides the name of their company. What phase of security testing would your team jump in right away? A. Scanning B. Reconnaissance C. Escalation D. Enumeration
d
Backing up data is a security must. However, it also have certain level of risks when mishandled. Which of the following is the greatest threat posed by backups? A. A backup is the source of Malware or illicit information B. A backup is incomplete because no verification was performed C. A backup is unavailable during disaster recovery D. An unencrypted backup can be misplaced or stolen
d
In order to prevent particular ports and applications from getting packets into an organization, what does a firewall check? A. Network layer headers and the session layer port numbers B. Presentation layer headers and the session layer port numbers C. Application layer port numbers and the transport layer headers D. Transport layer port numbers and application layer headers
d
LM hash is a compromised password hashing function. Which of the following parameters describe LM Hash:? I - The maximum password length is 14 characters. II - There are no distinctions between uppercase and lowercase. III - It's a simple algorithm, so 10,000,000 hashes can be generated per second. A. I B. I, II, and III C. II D. I and II
d
QUESTION 44 Which of the following is the BEST approach to prevent Cross-site Scripting (XSS) flaws? A. Use digital certificates to authenticate a server prior to sending data. B. Verify access right before allowing access to protected information and UI controls. C. Use security policies and procedures to define and implement proper security settings. D. Validate and escape all information sent to a server.
d
TCP/IP stack fingerprinting is the passive collection of configuration attributes from a remote device during standard layer 4 network communications. Whichof the following tools can be used for passive OS fingerprinting? A. nmap B. ping C. tracert D. tcpdump
d
What could be the best perspective for doing "Unannounced Pen Test"? A. Network security would be in a "best state" posture B. The tester could not provide an honest analysis C. It is best to catch critical infrastructure unpatched D. The tester will have an actual security posture visibility of the target network
d
What is the approximate cost of replacement and recovery operation per year of a hard drive that has a value of $300 given that the technician who charges $10/hr would need 10 hours to restore OS and Software and needs further 4 hours to restore the database from the last backup to the new hard disk? Calculate the SLE, ARO, and ALE. Assume the EF = 1 (100%). A. $440 B. $100 C. $1320 D. $146
d
Which of the following BEST describes how Address Resolution Protocol (ARP) works? A. It sends a reply packet for a specific IP, asking for the MAC address B. It sends a reply packet to all the network elements, asking for the MAC address from a specific IP C. It sends a request packet to all the network elements, asking for the domain name from a specific IP D. It sends a request packet to all the network elements, asking for the MAC address from a specific IP
d
Which of the following is a Linux based tool that has the ability to change any user's password or to activate disabled Windows accounts? A. John the Ripper B. Cain & Abel C. SET D. CHNTPW
d
Which of the following is the BEST approach to prevent Cross-site Scripting (XSS) flaws? A. Use digital certificates to authenticate a server prior to sending data. B. Verify access right before allowing access to protected information and UI controls. C. Use security policies and procedures to define and implement proper security settings. D. Validate and escape all information sent to a server.
d
Which of the following is the most important phase of ethical hacking wherein you need to spend considerable amount of time? A. Gaining access B. Escalating privileges C. Network mapping D. Footprinting
d
Which type of cryptography does SSL, IKE and PGP belongs to? A. Secret Key B. Hash Algorithm C. Digest D. Public Key
d
An attacker has installed a Remote Access Trojan on a host. The attacker aims to redirect the user/victim to a phishing site whenever he visits his banking websites. Which file does the attacker need to modify? A. Hosts B. Boot.ini C. Networks D. Sudoers
A
Defining rules, collaborating human workforce, creating a backup plan, and testing the plans are within what phase of the Incident Handling Process? A. Preparation phase B. Containment phase C. Recovery phase D. Identification phase
A
QUESTION 82 The Open Web Application Security Project (OWASP) Top Ten is a powerful awareness document for web application security. The OWASP Top Ten represents a broad consensus about what the most critical web application security flaws are. Based from OWASP Top Ten, which among the following is most critical web app security flaw? A. Injection B. Cross Site Scripting C. Cross Site Request Forgery D. Path disclosure
A
What type of malware is it that restricts access to a computer system that it infects and demands that the user pay a certain amount of money, cryptocurrency, etc. to the operators of the malware to remove the restriction? A. Ransomware B. Riskware C. Adware D. Spyware
A
What would be the result of the command or code shown below on a vulnerable Linux host? env x=`(){ :; };echo exploit` bash -c 'cat /etc/passwd A. Display passwd content to prompt B. Changes all passwords in passwd C. Removes the passwd file D. Add new user to the passwd file
A
What would you type on the Windows command line in order to launch the Computer Management Console provided that you are logged in as an admin? A. c:\compmgmt.msc B. c:\gpedit C. c:\ncpa.cpl D. c:\services.msc
A
Which of the following BEST describes the mechanism of a Boot Sector Virus? A. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR B. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR C. Overwrites the original MBR and only executes the new virus code D. Modifies directory table entries so that directory entries point to the virus code instead of the actual program
A
Which of the following is a form of penetration testing that relies heavily on human interaction and often involves tricking people into breaking normal security procedures? A. Social Engineering B. Piggybacking C. Tailgating D. Eavesdropping
A
Which of the following is a vulnerability in GNU's bash shell (discovered in September of 2014) that gives attackers access to run remote commands on a vulnerable system? A. Shellshock B. Rootshell C. Rootshock D. Shellbash
A
Which of the following is a wireless network detector that is commonly found on Linux? A. Kismet B. Abel C. Netstumbler D. Nessus
A
Which of the following statements is TRUE about sniffers? A. Sniffers operate on both Layer 2 & Layer 3 of the OSI model B. Sniffers operate on Layer 2 of the OSI model C. Sniffers operate on Layer 3 of the OSI model D. Sniffers operate on the Layer 1 of the OSI model
A
You are the Systems Administrator for a large corporate organization. Which tool could help you monitor network traffic and could alert you whenever there are suspicious activities especially when there is an attack? A. Network-based IDS B. Proxy C. Host-based IDS D. Firewall
A
A new client hired you to do a security audit of their firm. When you get to start the audit, you found out that they don't have any documents pertaining to their security procedures. What's the best thing to do? A. Terminate the audit B. Identify and evaluate existing practices C. Create a procedures document D. Conduct compliance testing
B
An anonymous user has compromised a Linux FTP server. He uploaded a tarball file, two shell script files and, lastly, a binary file. He then extracted the contents of the tarball and ran the script using a function provided by the FTP server's software. The binary file is running as a process and is listening on a network port. What kind of vulnerability must be present to make this remote attack possible? A. Brute force login B. Privilege escalation C. File system permissions D. Directory traversal
B
One practical use of this tool is when you're reviewing firewall logs to evaluate network traffic. Which of the following is a command-line utility for searching plain-text data sets for lines matching a regular expression? A. MS Excel B. Grep C. Notepad D. Relational Database
B
This tool is a suite of detector, packet sniffer, WEP and WPA/WPA2-PSK cracker and analysis tool for 802.11 wireless LANs. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the PTW attack, thus making the attack much faster compared to other WEP cracking tools. Which of the following tools is being described? A. wificracker B. Aircrack-ng C. Airguard D. WLAN-crack
B
Which of the following is a restriction being enforced in "white box testing?" A. Only the internal operation of a system is known to the tester B. The internal operation of a system is completely known to the tester C. The internal operation of a system is only partly accessible to the tester D. Only the external operation of a system is accessible to the tester
B
Which of the following is an asymmetry cipher that is based on factoring the product of two large prime numbers? A. RC5 B. RSA C. MD5 D. SHA
B
Which of the following is an entity or event with the potential to adversely impact a system through unauthorized access, destruction, disclosure, denial of service or modification of data? A. Vulnerability B. Threat C. Risk D. Attack
B
