EC-Council Certified Ethical Hacker (C|EH v13)

A Spearphone attack covertly derives speech information through smartphone sensor behavior, turning a device sensor into an eavesdropping channel. That mechanism directly matches covert listening through sensors. The other choices describe application exploitation, external-storage manipulation, or a different mobile attack rather than this sensor-based acoustic technique.

The camera transmits sensitive video using obsolete encryption and lacks authentication, allowing the traffic to be intercepted and decrypted in transit. This is an insecure data transfer condition because confidentiality and authenticity are not adequately protected while the video moves across the network. It falls under insecure data transfer and storage rather than RF jamming.

Cross-site request forgery causes a victim's browser to send a request to a server without the user's knowledge or intent. The browser may automatically include an existing authenticated session, causing the server to treat the forged request as legitimate. The request originates from the browser, not from a proxy or another server.

ARIN maintains registration information for Internet number resources. Starting with a server IP address, Clark can use ARIN to identify the registered organization and allocated network range, providing a foundation for mapping the target's address space. AOL, DuckDuckGo, and Baidu are not dedicated IP-allocation registries, so they do not provide the same authoritative range lookup.

A stealth SYN scan sends the opening SYN and determines port state from the target's response without completing a full TCP connection. Avoiding the final handshake reduces connection logging and overhead compared with a TCP Connect scan while still mapping listening ports. This half-open behavior supports service discovery with a smaller observable footprint.

The weakness is in the transport-security protocol, so exploitation requires access to the communication path rather than an application input field. A man-in-the-middle attack places the tester between client and server, enabling interception and attacks against the outdated TLS session to recover traffic. XSS and SQL injection target separate application-layer flaws.

Slowloris exhausts a web server's capacity by creating many HTTP connections and keeping them incomplete for long periods. Data is sent slowly enough to prevent the server from closing each connection, so connection-handling resources are consumed without requiring a high-bandwidth flood. That behavior matches the observed application-layer outage.

Containers isolate processes while sharing the host operating system kernel, whereas virtual machines generally place workloads behind separate guest operating systems and a hypervisor boundary. Because every container depends on the shared host OS, exposed kernel interfaces and container-runtime interactions enlarge the common attack surface. A host-level compromise can therefore affect multiple containers.

The logic tier contains the application's processing rules and coordinates the movement of information between the user-facing presentation tier and the data tier. It receives requests, applies the required operations, and passes results or data-access requests between layers. This intermediary processing role makes the logic tier responsible for the described work.