During a penetration test at IntelliCore Systems in Raleigh, North Carolina, ethical hacker Javier directs a wave of repetitive web requests against the company ' s portal that overloads backend scripts which process search queries and form submissions. As a result, legitimate customers experience long delays and occasional timeouts while attempting to log in or complete transactions.
Which DoS/DDoS technique is Javier most likely demonstrating?

• A. Peer-to-Peer Attack
• B. HTTP GET/POST Attack
• C. Slowloris
• D. UDP Flood

During a controlled red team engagement at a financial institution in New Jersey, ethical hacker Ryan tests the bank ' s resilience against stealth-based malware. He plants a custom malicious program on an employee workstation. After execution, he observes that the infected files continue to function normally, but his malware conceals its modifications by intercepting operating system calls. Antivirus scans repeatedly return
"no threats detected," even though the malicious code remains active and hidden on the system.
Which type of virus did Ryan most likely deploy in this assessment?

• A. Stealth Virus
• B. Polymorphic Virus
• C. Macro Virus
• D. Cavity Virus

During a security assessment, an attacker identifies a flaw in a multi-user file system. The system first verifies access rights to a temporary file created by a user. However, immediately after this verification, and before the file is processed, the attacker manages to swap the original file with a malicious version. This manipulation happens in the brief interval between the system ' s access verification and the moment it handles the file, resulting in the malicious file being treated as legitimate. Which vulnerability is the attacker exploiting?

• A. Integer overflow during arithmetic computations with limited memory bounds.
• B. Null pointer dereference leading to unexpected application behavior.
• C. Time-of-validation/time-of-execution issue in resource management logic.
• D. Improper certificate validation in trusted communication channels.

During a review for DoS threats, several IP addresses generate excessive traffic. Packet inspection shows the TCP three-way handshake is never completed, leaving many connections in a SYN_RECEIVED state and consuming server resources without completing sessions. What type of DoS attack is most likely occurring?

• A. Ping of Death
• B. SYN Flood
• C. Smurf Attack
• D. UDP Flood