A health-tech startup in Raleigh, North Carolina operates a Kubernetes cluster supporting patient- facing microservices. During an authorized security assessment, a certified ethical hacker reviews internal cluster activity records available to operations personnel.
While analyzing these records, the tester notices that authentication artifacts associated with service accounts are recorded within system-generated output. The tester determines that if an individual obtained access to these records, they could reuse the captured authentication material to interact with cluster resources under the same privileges.
Which Kubernetes vulnerability best corresponds to this condition?

• A. Exposed Bearer Tokens in Logs
• B. Unauthenticated HTTPS Connections
• C. No Certificate Revocation
• D. No Non-repudiation

Emma, an ethical hacker at a Chicago-based healthcare provider, is performing a penetration test on the organization's patient record system following a recent data breach. During her investigation, she discovers that attackers gained access to a large volume of encrypted patient records but had no knowledge of the original data or encryption keys. Emma observes that the system uses a block cipher and suspects the attackers may have applied a cryptanalytic method that examines encrypted outputs in bulk to detect structural or statistical patterns in the encrypted data. Which cryptanalysis technique should Emma investigate to assess the system's vulnerability in this scenario?

• A. Known plaintext attack
• B. Ciphertext-only attack
• C. Chosen-ciphertext attack
• D. Chosen-plaintext attack

An ethical hacker is hired to conduct a comprehensive network scan of a large organization that strongly suspects potential intrusions into their internal systems. The hacker decides to employ a combination of scanning tools to obtain a detailed understanding of the network. Which sequence of actions would provide the most comprehensive information about the network's status?

• A. Initiate with Nmap for a ping sweep, then use Metasploit to scan for open ports and services, and finally use Hping3 to perform remote OS fingerprinting.
• B. Begin with NetScanTools Pro for a general network scan, then use Nmap for OS detection and version detection, and finally perform an SYN flooding with Hping3.
• C. Start with Hping3 for a UDP scan on random ports, then use Nmap for a version detection scan, and finally use Metasploit to exploit detected vulnerabilities.
• D. Use Hping3 for an ICMP ping scan on the entire subnet, then use Nmap for a SYN scan on identified active hosts, and finally use Metasploit to exploit identified vulnerabilities.

As part of a controlled red-team engagement, an ethical hacker evaluates the resilience of a corporate campus against radio-frequency disruption. The tester activates a portable multi- antenna signal suppression device from a nearby building.
The interference affects wireless communication across several departments within an estimated coverage radius of approximately 120 meters. The disruption persists for slightly over an hour before the device requires recharge. Analysis confirms that multiple frequency bands, including Wi-Fi and cellular standards, were simultaneously impacted.
Based on the operational characteristics observed, identify the jamming device most consistent with this activity.

• A. PCB-1016 Jammer
• B. CPB-2612H-SG Jammer
• C. PCB-4510 Jammer
• D. CPB-2920 Jammer