212-82 Exam Dumps : Certified Cybersecurity Technician (CCT)

Exception handling is a secure application design principle that states that the application should handle errors and exceptions gracefully and securely, without exposing sensitive information or compromising the system’s functionality. Exception handling can help prevent attackers from exploiting errors or exceptions to gain access to data or resources or cause denial-of-service attacks. In the scenario, Miguel identified a flaw in the end-point communication that can disclose the target application’s data, which means that the application did not meet the exception handling principle.

 FTP Unencrypted Cleartext Login is the vulnerability that may affect the website according to the severity factor in the above scenario. A vulnerability is a weakness or flaw in a system or network that can be exploited by an attacker to compromise its security or functionality. A vulnerability assessment is a process that involves identifying, analyzing, and evaluating vulnerabilities in a system or network using various tools and techniques. Greenbone is a tool that can perform vulnerability assessment on various targets using various tests and scans. To perform a vulnerability assessment on the given IP address 20.20.10.26, one has to follow these steps:

Open a web browser and type 20.20.10.26:9392

Press Enter key to access the Greenbone web interface.

Enter admin as username and password as password.

Click on Login button.

Click on Scans menu and select Tasks option.

Click on Start Scan icon next to IP Address Scan task.

Wait for the scan to complete and click on Report icon next to IP Address Scan task.

Observe the vulnerabilities found by the scan.

The vulnerabilities found by the scan are:

The vulnerability that may affect the website according to the severity factor is FTP Unencrypted Cleartext Login, which has a medium severity level. FTP Unencrypted Cleartext Login is a vulnerability that allows an attacker to intercept or sniff FTP login credentials that are sent in cleartext over an unencrypted connection. An attacker can use these credentials to access or modify files or data on the FTP server. TCP timestamps and UDP timestamps are vulnerabilities that allow an attacker to estimate the uptime of a system or network by analyzing the timestamp values in TCP or UDP packets. Anonymous FTP Login Reporting is a vulnerabilitythat allows an attacker to access an FTP server anonymously without providing any username or password.

To analyze the IoT network traffic capture and identify the command sent to IoT devices, follow these steps:

Open the Capture File:

Use a network analysis tool like Wireshark to open theIoT_capture.pcapngfile.

Filter and Analyze:

Apply appropriate filters to isolate relevant traffic. Look for command patterns typically sent to IoT devices.

Identify the Command:

Upon analyzing the captured traffic, the commandForest_Fire_Alert444is identified as the one sent over the network to IoT devices during the attack.

References:

Wireshark User Guide: Wireshark Documentation

Analysis of IoT network traffic:IoT Security