Software-defined southbound application program interfaces (SDN southbound APIs) are used to communicate between the SDN Controller and the switches and routers of the network.

A, C are correct answers.

Available request methods are:

GET – Retrieves data from the specified object.

PUT – Adds the supplied information to the specified object; returns a 404 Resource Not Found error if the object does not exist.

POST – Creates the object with the supplied information.

DELETE – Deletes the specified object.

PATCH – Applies partial modifications to the specified object.

https://www.cisco.com/c/en/us/td/docs/security/asa/api/qsg-asa-api.html

Correct answer is D: SDN Controller and the management solution.

How Do Northbound APIs Work?

Northbound APIs are the link between the applications and the SDN controller. The applications can tell the network what they need (data, storage, bandwidth, and so on) and the network can deliver those resources, or communicate what it has.

The Cisco DNA Center open platform for intent-based networking provides 360-degree extensibility across multiple components, including:

● Intent-based APIs

● Process adapters,

● Domain adapters,

● SDKs

https://en.wikipedia.org/wiki/Botnet

Correct answer is DDOS.

Cross site scripting (also known as XSS) occurs when a web application gathers malicious data from a user. The data is usually gathered in the form of a hyperlink which contains malicious content within it. The user will most likely click on this link from another website, instant message, or simply just reading a web board or email message.

Usually the attacker will encode the malicious portion of the link to the site in HEX (or other encoding methods) so the request is less suspicious looking to the user when clicked on.

For example the code below is written in hex:

<a href=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>Click Here</a>

is equivalent to:

<a href=javascript:alert('XSS')>Click Here</a>

Note: In the format “&#xhhhh“, hhhh is the code point in hexadecimal form.

A is correct answer.

A SQL injection attack involves the alteration of SQL statements that are used within a web application through the use of attacker-supplied data. Insufficient input validation and improper construction of SQL statements in web applications can expose them to SQL injection attacks.

You can easily google it, and you can find that Spear phishing relates to attacks targeted to individuals. Spear phishing always focuses on one victim.

https://www.tripwire.com/state-of-security/security-awareness/6-common-phishing-attacks-and-how-to-protect-against-them/

B and D is correct.

If you google either or both B and D, you'll land on a Wikipedia page that confirms the information:

https://en.wikipedia.org/wiki/Ping_of_death#:~:text=Like%20other%20large%20but%20well,the%20injection%20of%20malicious%20code.