In an enterprise environment, the network security team detects unusual behavior suggesting advanced sniffing techniques exploiting legacy protocols to intercept sensitive communications. Which of the following sniffing-related techniques presents the greatest challenge to detect and neutralize, potentially compromising confidential enterprise data?

• A. Encrypted data extraction via HTTP header field overflows
• B. Covert data interception via X2S packet fragmentation
• C. Steganographic payload embedding within SMTP email headers
• D. Covert channel establishment through Modbus protocol manipulation

Javier Ruiz from CyberFortress Solutions is tasked with auditing the mobile security practices of Apex Financial Services, a financial firm in Houston, Texas. During a covert penetration test, Javier targets employees ' personal smartphones used to access corporate financial systems. He exploits a vulnerability by installing a malicious app that bypasses access controls, granting him unauthorized entry to sensitive financial data because the devices lack a specific security measure to restrict app access. Based on this vulnerability, which BYOD security guideline is most likely missing in Apex Financial Services ' policy?

• A. Set passwords for apps to restrict others from accessing them
• B. Review permissions requested by apps before installing them
• C. Use encryption mechanisms to store data
• D. Enforce automatic device locking or implement biometric authentication

A penetration tester is tasked with compromising a company's wireless network, which uses WPA2-PSK encryption. The tester wants to capture the WPA2 handshake and crack the pre-shared key. What is the most appropriate approach to achieve this?

• A. Execute a Cross-Site Scripting (XSS) attack on the router ' s admin panel
• B. Conduct a Man-in-the-Middle attack by spoofing the router ' s MAC address
• C. Use a de-authentication attack to force a client to reconnect, capturing the WPA2 handshake
• D. Perform a brute-force attack directly on the WPA2 encryption

A technology consulting firm in Portland, Oregon began experiencing repeated topology recalculations across its switching infrastructure. Shortly after a newly connected device came online in a conference room, spanning-tree convergence events were triggered across multiple distribution switches.
Engineers determined that the access-layer interface connected to that device was influencing path-selection decisions, introducing a more favorable bridge priority value into the environment and affecting the established hierarchy.
To preserve the intended switching structure and prevent unauthorized devices from altering root selection decisions, which control should be employed?

• A. Applying Root Guard on designated interfaces
• B. Configuring Loop Guard on non-designated ports
• C. Enabling BPDU Guard on edge ports
• D. Activating UDLD on uplinks

In the quiet research wing of a cybersecurity firm in Seattle, Washington, ethical hacker Lucas Rivera was investigating a newly reported flaw in a widely used open-source library. He searched for the issue using a globally recognized reference value assigned to the specific flaw, which immediately provided a standardized description along with links to affected products and related advisories.
This reference allowed him to consistently track the issue across multiple tools and vendor reports without relying on product-specific details or manual correlation.
What resource was Lucas most likely using to reference this information?

• A. Common Vulnerabilities and Exposures (CVE)
• B. Common Weakness Enumeration (CWE)
• C. National Vulnerability Database (NVD)
• D. Common Vulnerability Scoring System (CVSS)