Quiz
Preparacion 2
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (176)
1The following is a sample of output from a penetration tester's machine targeting a machine
with the IP address of 192.168.1.106:
What is most likely taking place?
- APing sweep of the 192.168.1.106 network
- BRemote service brute force attempt
- CPort scan of 192.168.1.106
- DDenial of service attack on 192.168.1.106
2Company XYZ has asked you to assess the security of their perimeter email gateway. From
your office in New York, you craft a specially formatted email message and send it across the Internet
to an employee of Company XYZ. The employee of Company XYZ is aware of your test.
Your email message looks like this:
From: jim_miller@companyxyz.com
To: michelle_saunders@companyxyz.com
Subject: Test message
Date: 4/3/2017 14:37
The employee of Company XYZ receives your email message. This proves that Company XYZ's email
gateway doesn't prevent what?- AEmail Phishing
- BEmail Masquerading
- CEmail Spoofing
- DEmail Harvesting
3Which of the following LM hashes represent a password of less than 8 characters? (Choose
two.)- ABA810DBA98995F1817306D272A9441BB
- B44EFCE164AB921CQAAD3B435B51404EE
- C0182BD0BD4444BF836077A718CCDF409
- DCEC52EB9C8E3455DC2265B23734E0DAC
- EB757BF5C0D87772FAAD3B435B51404EE
- FE52CAC67419A9A224A3B108F3FA6CB6D
4A software tester is randomly generating invalid inputs in an attempt to crash the program.
Which of the following is a software testing technique used to determine if a software program
properly handles a wide range of invalid input?- AMutating
- BRandomizing
- CFuzzing
- DBounding
5SOAP services use which technology to format information?
- ASATA
- BPCI
- CXML
- DISDN
6Which type of sniffing technique is generally referred as MiTM attack?
- APassword Sniffing
- BARP Poisoning
- CMac Flooding
- DDHCP Sniffing
7When security and confidentiality of data within the same LAN is of utmost priority, which
IPSec mode should you implement?- AAH Tunnel mode
- BAH promiscuous
- CESP transport mode
- DESP confidential
8You're doing an internal security audit and you want to find out what ports are open on all
the servers. What is the best way to find out?- AScan servers with Nmap
- BPhysically go to each server
- CScan servers with MBSA
- DTelent to every port on each server
9Session splicing is an IDS evasion technique in which an attacker delivers data in multiple,
smallsized packets to the target computer, making it very difficult for an IDS to detect the attack signatures.
Which tool can be used to perform session splicing attacks?- AWhisker
- Btcpsplice
- CBurp
- DHydra
10A penetration tester was hired to perform a penetration test for a bank. The tester began
searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading
news articles online about the bank, watching what times the bank employees come into work and
leave from work, searching the bank's job postings (paying special attention to IT related jobs), and
visiting the local dumpster for the bank's corporate office. What phase of the penetration test is the
tester currently in?- AInformation reporting
- BVulnerability assessment
- CActive information gathering
- DPassive information gathering
11Advanced encryption standard is an algorithm used for which of the following?
- AData integrity
- BKey discovery
- CBulk data encryption
- DKey recovery
12Which of the following tools can be used to perform a zone transfer?
- ANSLookup
- BFinger
- CDig
- DSam Spade
- EHost
- FNetcat
- GNeotrace
13By using a smart card and pin, you are using a two-factor authentication that satisfies
- ASomething you know and something you are
- BSomething you have and something you know
- CSomething you have and something you are
- DSomething you are and something you remember
14Your business has decided to add credit card numbers to the data it backs up to tape. Which
of the following represents the best practice your business should observe?- AHire a security consultant to provide direction.
- BDo not back up cither the credit card numbers or then hashes.
- CBack up the hashes of the credit card numbers not the actual credit card numbers.
- DEncrypt backup tapes that are sent off-site.
15You are performing a penetration test. You achieved access via a buffer overflow exploit and
you proceed to find interesting data, such as files with usernames and passwords. You find a hidden
folder that has the administrator's bank account password and login information for the
administrator's bitcoin account.
What should you do?- AReport immediately to the administrator
- BDo not report it and continue the penetration test.
- CTransfer money from the administrator's account to another account.
- DDo not transfer the money but steal the bitcoins.
16A company's policy requires employees to perform file transfers using protocols which
encrypt traffic. You suspect some employees are still performing file transfers using unencrypted
protocols because the employees do not like changes. You have positioned a network sniffer to
capture traffic from the laptops used by employees in the data ingest department. Using Wire shark
to examine the captured traffic, which command can be used as a display filter to find unencrypted
file transfers?- Atcp.port != 21
- Btcp.port = 23
- Ctcp.port ==21
- Dtcp.port ==21 || tcp.port ==22
17Some clients of TPNQM SA were redirected to a malicious site when they tried to access the
TPNQM main site. Bob, a system administrator at TPNQM SA, found that they were victims of DNS
Cache Poisoning.
What should Bob recommend to deal with such a threat?- AThe use of security agents in clients' computers
- BThe use of DNSSEC
- CThe use of double-factor authentication
- DClient awareness
18During a security audit of IT processes, an IS auditor found that there were no documented
security procedures. What should the IS auditor do?- AIdentify and evaluate existing practices
- BCreate a procedures document
- CConduct compliance testing
- DTerminate the audit
19A company's Web development team has become aware of a certain type of security
vulnerability in their Web software. To mitigate the possibility of this vulnerability being exploited,
the team wants to modify the software requirements to disallow users from entering HTML as input
into their Web application.
What kind of Web application vulnerability likely exists in their software?- ACross-site scripting vulnerability
- BCross-site Request Forgery vulnerability
- CSQL injection vulnerability
- DWeb site defacement vulnerability
20Which of the following defines the role of a root Certificate Authority (CA) in a Public Key
Infrastructure (PKI)?- AThe root CA is the recovery agent used to encrypt data when a user's certificate is lost.
- BThe root CA stores the user's hash value for safekeeping.
- CThe CA is the trusted root that issues certificates.
- DThe root CA is used to encrypt email messages to prevent unintended disclosure of data.
21Which service in a PKI will vouch for the identity of an individual or company?
- AKDC
- BCA
- CCR
- DCBC
22It is a vulnerability in GNU's bash shell, discovered in September of 2014, that gives
attackers access to run remote commands on a vulnerable system. The malicious software can take
control of an infected machine, launch denial-of-service attacks to disrupt websites, and scan for
other vulnerable devices (including routers).
Which of the following vulnerabilities is being described?- AShellshock
- BRootshock
- CRootshell
- DShellbash
23What is the term coined for logging, recording and resolving events in a company?
- AInternal Procedure
- BSecurity Policy
- CIncident Management Process
- DMetrics
24Windows file servers commonly hold sensitive files, databases, passwords and more. Which
of the following choices would be a common vulnerability that usually exposes them?- ACross-site scripting
- BSQL injection
- CMissing patches
- DCRLF injection
25Study the following log extract and identify the attack.
- AHexcode Attack
- BCross Site Scripting
- CMultiple Domain Traversal Attack
- DUnicode Directory Traversal Attack
26Password cracking programs reverse the hashing process to recover passwords.
(True/False.)- ATrue
- BFalse
27What does a firewall check to prevent particular ports and applications from getting packets
into an organization?- ATransport layer port numbers and application layer headers
- BPresentation layer headers and the session layer port numbers
- CNetwork layer headers and the session layer port numbers
- DApplication layer port numbers and the transport layer headers
28While reviewing the result of scanning run against a target network you come across the
following:
Which among the following can be used to get this output?
- AA Bo2k system query.
- Bnmap protocol scan
- CA sniffer
- DAn SNMP walk
29_________ is a tool that can hide processes from the process list, can hide files, registry
entries, and intercept keystrokes.- ATrojan
- BRootKit
- CDoS tool
- DScanner
- EBackdoor
30Which of the following is a client-server tool utilized to evade firewall inspection?
- Atcp-over-dns
- Bkismet
- Cnikto
- Dhping
31Which of the following scanning tools is specifically designed to find potential exploits in
Microsoft Windows products?- AMicrosoft Security Baseline Analyzer
- BRetina
- CCore Impact
- DMicrosoft Baseline Security Analyzer
32Which set of access control solutions implements two-factor authentication?
- AUSB token and PIN
- BFingerprint scanner and retina scanner
- CAccount and password
- DPassword and PIN
33An attacker is using nmap to do a ping sweep and a port scanning in a subnet of 254
addresses.
In which order should he perform these steps?- AThe sequence does not matter. Both steps have to be performed against all hosts.
- BFirst the port scan to identify interesting services and then the ping sweep to find hosts
responding to icmp echo requests. - CFirst the ping sweep to identify live hosts and then the port scan on the live hosts. This way he saves time.
- DThe port scan alone is adequate. This way he saves time.
34Which type of intrusion detection system can monitor and alert on attacks, but cannot stop
them?- ADetective
- BPassive
- CIntuitive
- DReactive
35In the field of cryptanalysis, what is meant by a "rubber-hose" attack?
- AAttempting to decrypt cipher text by making logical assumptions about the contents of the original plain text.
- BExtraction of cryptographic secrets through coercion or torture.
- CForcing the targeted key stream through a hardware-accelerated device such as an ASIC.
- DA backdoor placed into a cryptographic algorithm by its creator.
36An attacker has been successfully modifying the purchase price of items purchased on the
company's web site.
The security administrators verify the web server and Oracle database have not been compromised
directly.
They have also verified the Intrusion Detection System (IDS) logs and found no attacks that could
have caused this. What is the mostly likely way the attacker has been able to modify the purchase
price?- ABy using SQL injection
- BBy changing hidden form values
- CBy using cross site scripting
- DBy utilizing a buffer overflow attack
37Which of the following is an extremely common IDS evasion technique in the web world?
- Aunicode characters
- Bspyware
- Cport knocking
- Dsubnetting
38The configuration allows a wired or wireless network interface controller to pass all traffic it
receives to the central processing unit (CPU), rather than passing only the frames that the controller
is intended to receive.
Which of the following is being described?- Apromiscuous mode
- Bport forwarding
- Cmulti-cast mode
- DWEM
39Bob, a system administrator at TPNQM SA, concluded one day that a DMZ is not needed if
he properly configures the firewall to allow access just to servers/ports, which can have direct
internet access, and block the access to workstations.
Bob also concluded that DMZ makes sense just when a stateful firewall is available, which is not the
case of TPNQM SA.
In this context, what can you say?- ABob can be right since DMZ does not make sense when combined with stateless firewalls
- BBob is partially right. He does not need to separate networks if he can create rules by destination IPs, one by one
- CBob is totally wrong. DMZ is always relevant when the company has internet servers and
workstations - DBob is partially right. DMZ does not make sense when a stateless firewall is available
40Which address translation scheme would allow a single public IP address to always
correspond to a single machine on an internal network, allowing "server publishing"?- AOverloading Port Address Translation
- BDynamic Port Address Translation
- CDynamic Network Address Translation
- DStatic Network Address Translation
41Which of the following is a passive wireless packet analyzer that works on Linux-based
systems?- ABurp Suite
- BOpenVAS
- Ctshark
- DKismet
42Which of the following is the greatest threat posed by backups?
- AA backup is the source of Malware or illicit information.
- BA backup is unavailable during disaster recovery.
- CA backup is incomplete because no verification was performed.
- DAn un-encrypted backup can be misplaced or stolen.
43Which Type of scan sends a packets with no flags set?
- AOpen Scan
- BNull Scan
- CXmas Scan
- DHalf-Open Scan
44Ricardo wants to send secret messages to a competitor company. To secure these
messages, he uses a technique of hiding a secret message within an ordinary message. The technique
provides 'security through obscurity'.
What technique is Ricardo using?- ASteganography
- BPublic-key cryptography
- CRSA algorithm
- DEncryption
45Employees in a company are no longer able to access Internet web sites on their computers.
The network administrator is able to successfully ping IP address of web servers on the Internet and
is able to open web sites by using an IP address in place of the URL. The administrator runs the
nslookup command for www.eccouncil.org and receives an error message stating there is no
response from the server. What should the administrator do next?- AConfigure the firewall to allow traffic on TCP ports 53 and UDP port 53.
- BConfigure the firewall to allow traffic on TCP ports 80 and UDP port 443.
- CConfigure the firewall to allow traffic on TCP port 53.
- DConfigure the firewall to allow traffic on TCP port 8080.
46Which of the following BEST describes the mechanism of a Boot Sector Virus?
- AMoves the MBR to another location on the hard disk and copies itself to the original location of the MBR
- BMoves the MBR to another location on the RAM and copies itself to the original location of the MBR
- COverwrites the original MBR and only executes the new virus code
- DModifies directory table entries so that directory entries point to the virus code instead of the actual program
47You are looking for SQL injection vulnerability by sending a special character to web
applications. Which of the following is the most useful for quick validation?- ADouble quotation
- BBackslash
- CSemicolon
- DSingle quotation
48Why should the security analyst disable/remove unnecessary ISAPI filters?
- ATo defend against social engineering attacks
- BTo defend against webserver attacks
- CTo defend against jailbreaking
- DTo defend against wireless attacks
49When a security analyst prepares for the formal security assessment - what of the following
should be done in order to determine inconsistencies in the secure assets database and verify that
system is compliant to the minimum security baseline?- AData items and vulnerability scanning
- BInterviewing employees and network engineers
- CReviewing the firewalls configuration
- DSource code review
50It is a regulation that has a set of guidelines, which should be adhered to by anyone who
handles any electronic medical data. These guidelines stipulate that all medical practices must ensure
that all necessary measures are in place while saving, accessing, and sharing any electronic medical
data to keep patient data secure.
Which of the following regulations best matches the description?- AHIPAA
- BISO/IEC 27002
- CCOBIT
- DFISMA
51Cross-site request forgery involves:
- AA request sent by a malicious user from a browser to a server
- BModification of a request by a proxy between client and server
- CA browser making a request to a server without the user's knowledge
- DA server making a request to another server without the user's knowledge
52Which regulation defines security and privacy controls for Federal information systems and
organizations?- ANIST-800-53
- BPCI-DSS
- CEU Safe Harbor
- DHIPAA
53An ethical hacker for a large security research firm performs penetration tests, vulnerability
tests, and risk assessments. A friend recently started a company and asks the hacker to perform a
penetration test and vulnerability assessment of the new company as a favor. What should the
hacker's next step be before starting work on this job?- AStart by foot printing the network and mapping out a plan of attack.
- BAsk the employer for authorization to perform the work outside the company.
- CBegin the reconnaissance phase with passive information gathering and then move into active information gathering.
- DUse social engineering techniques on the friend's employees to help identify areas that may be susceptible to attack.
54Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in
the systems, he uses a detection method where the anti-virus executes the malicious codes on a
virtual machine to simulate CPU and memory activities.
Which type of virus detection method did Chandler use in this context?- AHeuristic Analysis
- BCode Emulation
- CIntegrity checking
- DScanning
55Bob, your senior colleague, has sent you a mail regarding a deal with one of the clients. You
are requested to accept the offer and you oblige. After 2 days. Bob denies that he had ever sent a
mail. What do you want to
""know"" to prove yourself that it was Bob who had send a mail?- AAuthentication
- BConfidentiality
- CIntegrity
- DNon-Repudiation
56Which type of scan is used on the eye to measure the layer of blood vessels?
- AFacial recognition scan
- BRetinal scan
- CIris scan
- DSignature kinetics scan
57A new wireless client that is 802.11 compliant cannot connect to a wireless network given
that the client can see the network and it has compatible hardware and software installed. Upon
further tests and investigation, it was found out that the Wireless Access Point (WAP) was not
responding to the association requests being sent by the wireless client. What MOST likely is the
issue on this scenario?- AThe client cannot see the SSID of the wireless network
- BThe WAP does not recognize the client's MAC address.
- CThe wireless client is not configured to use DHCP.
- DClient is configured for the wrong channel
58Windows LAN Manager (LM) hashes are known to be weak.
Which of the following are known weaknesses of LM? (Choose three.)- AConverts passwords to uppercase.
- BHashes are sent in clear text over the network.
- CMakes use of only 32-bit encryption.
- DEffective length is 7 characters.
59Which element of Public Key Infrastructure (PKI) verifies the applicant?
- ACertificate authority
- BValidation authority
- CRegistration authority
- DVerification authority
60Which of the following algorithms can be used to guarantee the integrity of messages being
sent, in transit, or stored?- Asymmetric algorithms
- Basymmetric algorithms
- Chashing algorithms
- Dintegrity algorithms
61It is a widely used standard for message logging. It permits separation of the software that
generates messages, the system that stores them, and the software that reports and analyzes them.
This protocol is specifically designed for transporting event messages. Which of the following is being
described?- ASNMP
- BICMP
- CSYSLOG
- DSMS
62When tuning security alerts, what is the best approach?
- ATune to avoid False positives and False Negatives
- BRise False positives Rise False Negatives
- CDecrease the false positives
- DDecrease False negatives
63What is one of the advantages of using both symmetric and asymmetric cryptography in
SSL/TLS?- ASymmetric algorithms such as AES provide a failsafe when asymmetric methods fail.
- BAsymmetric cryptography is computationally expensive in comparison. However, it is well-suited to securely negotiate keys for use with symmetric cryptography.
- CSymmetric encryption allows the server to securely transmit the session keys out-of-band.
- DSupporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.
64A newly discovered flaw in a software application would be considered which kind of
security vulnerability?- AInput validation flaw
- BHTTP header injection vulnerability
- C0-day vulnerability
- DTime-to-check to time-to-use flaw
65When you are getting information about a web server, it is very important to know the HTTP
Methods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two critical
methods (PUT and DELETE). PUT can upload a file to the server and DELETE can delete a file from the
server. You can detect all these methods (GET, POST, HEAD, PUT, DELETE, TRACE) using NMAP script
engine.
What nmap script will help you with this task?- Ahttp-methods
- Bhttp enum
- Chttp-headers
- Dhttp-git
66Which of the following options represents a conceptual characteristic of an anomaly-based
IDS over a signature-based IDS?- AProduces less false positives
- BCan identify unknown attacks
- CRequires vendor updates for a new threat
- DCannot deal with encrypted network traffic
67TCP/IP stack fingerprinting is the passive collection of configuration attributes from a
remote device during standard layer 4 network communications. Which of the following tools can be
used for passive OS fingerprinting?- Anmap
- Bping
- Ctracert
- Dtcpdump
68Which of the following is considered the best way to protect Personally Identifiable
Information (PII) from Web application vulnerabilities?- AUse cryptographic storage to store all PII
- BUse encrypted communications protocols to transmit PII
- CUse full disk encryption on all hard drives to protect PII
- DUse a security token to log into all Web applications that use PII
69What network security concept requires multiple layers of security controls to be placed
throughout an IT infrastructure, which improves the security posture of an organization to defend
against malicious attacks or potential vulnerabilities?
What kind of Web application vulnerability likely exists in their software?- AHost-Based Intrusion Detection System
- BSecurity through obscurity
- CDefense in depth
- DNetwork-Based Intrusion Detection System
70Which of the following levels of algorithms does Public Key Infrastructure (PKI) use?
- ARSA 1024 bit strength
- BAES 1024 bit strength
- CRSA 512 bit strength
- DAES 512 bit strength
71A hacker is an intelligent individual with excellent computer skills and the ability to explore a
computer's software and hardware without the owner's permission. Their intention can either be to
simply gain knowledge or to illegally make changes. Which of the following class of hacker refers to
an individual who works both offensively and defensively at various times?- ASuicide Hacker
- BBlack Hat
- CWhite Hat
- DGray Hat
72Fingerprinting VPN firewalls is possible with which of the following tools?
- AAngry IP
- BNikto
- CIke-scan
- DArp-scan
73What is a "Collision attack" in cryptography?
- ACollision attacks try to find two inputs producing the same hash.
- BCollision attacks try to break the hash into two parts, with the same bytes in each part to get the private key.
- CCollision attacks try to get the public key.
- DCollision attacks try to break the hash into three parts to get the plaintext value.
74It is a short-range wireless communication technology intended to replace the cables
connecting portable of fixed devices while maintaining high levels of security. It allows mobile
phones, computers and other devices to connect and communicate using a short-range wireless
connection.
Which of the following terms best matches the definition?- ABluetooth
- BRadio-Frequency Identification
- CWLAN
- DInfraRed
75What is a NULL scan?
- AA scan in which all flags are turned off
- BA scan in which certain flags are off
- CA scan in which all flags are on
- DA scan in which the packet size is set to zero
- EA scan with an illegal packet size
76An attacker runs netcat tool to transfer a secret file between two hosts.
He is worried about information being sniffed on the network.
How would the attacker use netcat to encrypt the information before transmitting onto the wire?
- AMachine A: netcat -l -p -s password 1234 < testfileMachine B: netcat <machine A IP> 1234
- BMachine A: netcat -l -e magickey -p 1234 < testfileMachine B: netcat <machine A IP> 1234
- CMachine A: netcat -l -p 1234 < testfile -pw passwordMachine B: netcat <machine A IP> 1234 -pw password
- DUse cryptcat instead of netcat
77This phase will increase the odds of success in later phases of the penetration test. It is also
the very first step in Information Gathering, and it will tell you what the "landscape" looks like.
What is the most important phase of ethical hacking in which you need to spend a considerable
amount of time?- Afootprinting
- Bnetwork mapping
- Cgaining access
- Descalating privileges
78In IPv6 what is the major difference concerning application layer vulnerabilities compared to
IPv4?- AImplementing IPv4 security in a dual-stack network offers protection from IPv6 attacks too.
- BVulnerabilities in the application layer are independent of the network layer. Attacks and
mitigation techniques are almost identical. - CDue to the extensive security measures built in IPv6, application layer vulnerabilities need not be addresses.
- DVulnerabilities in the application layer are greatly different from IPv4.
79Pentest results indicate that voice over IP traffic is traversing a network. Which of the
following tools will decode a packet capture and extract the voice conversations?- ACain
- BJohn the Ripper
- CNikto
- DHping
80Which initial procedure should an ethical hacker perform after being brought into an
organization?- ABegin security testing.
- BTurn over deliverables.
- CSign a formal contract with non-disclosure.
- DAssess what the organization is trying to protect.
81What is the main security service a cryptographic hash provides?
- AIntegrity and ease of computation
- BMessage authentication and collision resistance
- CIntegrity and collision resistance
- DIntegrity and computational in-feasibility
82A large company intends to use Blackberry for corporate mobile phones and a security
analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack
method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the
corporate network. What tool should the analyst use to perform a Blackjacking attack?- AParos Proxy
- BBBProxy
- CBBCrack
- DBlooover
83Which of the following is a vulnerability in GNU's bash shell (discovered in September of
2014) that gives attackers access to run remote commands on a vulnerable system?- AShellshock
- BRootshell
- CRootshock
- DShellbash
84You are working as a Security Analyst in a company XYZ that owns the whole subnet range
of 23.0.0.0/8 and
192.168.0.0/8.
While monitoring the data, you find a high number of outbound connections. You see that IP's owned
by XYZ (Internal) and private IP's are communicating to a Single Public IP. Therefore, the Internal IP's are sending data to the Public IP.
After further analysis, you find out that this Public IP is a blacklisted IP, and the internal
communicating devices are compromised.
What kind of attack does the above scenario depict?- ABotnet Attack
- BSpear Phishing Attack
- CAdvanced Persistent Threats
- DRootkit Attack
85What is the least important information when you analyze a public IP address in a security
alert?- AARP
- BWhois
- CDNS
- DGeolocation
86How can telnet be used to fingerprint a web server?
- Atelnet webserverAddress 80HEAD / HTTP/1.0
- Btelnet webserverAddress 80PUT / HTTP/1.0
- Ctelnet webserverAddress 80HEAD / HTTP/2.0
- Dtelnet webserverAddress 80PUT / HTTP/2.0
87If a tester is attempting to ping a target that exists but receives no response or a response
that states the destination is unreachable, ICMP may be disabled and the network may be using TCP.
Which other option could the tester use to get a response from a host using TCP?- AHping
- BTraceroute
- CTCP ping
- DBroadcast ping
88Which of the following tools would be the best choice for achieving compliance with PCI
Requirement 11?- ATruecrypt
- BSub7
- CNessus
- DClamwin
89An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their job. The attacker gains
access to the DNS server and redirects the direction www.google.com to his own IP address. Now
when the employees of the office want to go to Google they are being redirected to the attacker
machine. What is the name of this kind of attack?- AARP Poisoning
- BSmurf Attack
- CDNS spoofing
- DMAC Flooding
90After trying multiple exploits, you've gained root access to a Centos 6 server. To ensure you
maintain access, what would you do first?- ACreate User Account
- BDisable Key Services
- CDisable IPTables
- DDownload and Install Netcat
91If an e-commerce site was put into a live environment and the programmers failed to
remove the secret entry point that was used during the application development, what is this secret
entry point known as?- ASDLC process
- BHoney pot
- CSQL injection
- DTrap door
92The following is an entry captured by a network IDS. You are assigned the task of analyzing
this entry. You notice the value 0x90, which is the most common NOOP instruction for the Intel
processor. You figure that the attacker is attempting a buffer overflow attack.
You also notice "/bin/sh" in the ASCII part of the output.
As an analyst what would you conclude about the attack?
- AThe buffer overflow attack has been neutralized by the IDS
- BThe attacker is creating a directory on the compromised machine
- CThe attacker is attempting a buffer overflow attack and has succeeded
- DThe attacker is attempting an exploit that launches a command-line shell
93Security and privacy of/on information systems are two entities that requires lawful
regulations. Which of the following regulations defines security and privacy controls for Federal
information systems and organizations?- ANIST SP 800-53
- BPCI-DSS
- CEU Safe Harbor
- DHIPAA
94A circuit level gateway works at which of the following layers of the OSI Model?
- ALayer 5 - Application
- BLayer 4 - TCP
- CLayer 3 - Internet protocol
- DLayer 2 - Data link
95You need to deploy a new web-based software package for your organization. The package
requires three separate servers and needs to be available on the Internet. What is the recommended
architecture in terms of server placement?- AAll three servers need to be placed internally
- BA web server facing the Internet, an application server on the internal network, a database server on the internal network
- CA web server and the database server facing the Internet, an application server on the internal network
- DAll three servers need to face the Internet so that they can communicate between themselves
96What is the purpose of a demilitarized zone on a network?
- ATo scan all traffic coming through the DMZ to the internal network
- BTo only provide direct access to the nodes within the DMZ and protect the network behind it
- CTo provide a place to put the honeypot
- DTo contain the network devices you wish to protect
97Which of the following areas is considered a strength of symmetric key cryptography when
compared with asymmetric algorithms?- AScalability
- BSpeed
- CKey distribution
- DSecurity
98A certified ethical hacker (CEH) completed a penetration test of the main headquarters of a
company almost two months ago, but has yet to get paid. The customer is suffering from financial
problems, and the CEH is worried that the company will go out of business and end up not paying.
What actions should the CEH take?- AThreaten to publish the penetration test results if not paid.
- BFollow proper legal procedures against the company to request payment.
- CTell other customers of the financial problems with payments from this company.
- DExploit some of the vulnerabilities found on the company webserver to deface it.
99Which United States legislation mandates that the Chief Executive Officer (CEO) and the
Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of
financial reports?- ASarbanes-Oxley Act (SOX)
- BGramm-Leach-Bliley Act (GLBA)
- CFair and Accurate Credit Transactions Act (FACTA)
- DFederal Information Security Management Act (FISMA)
100Which of the following Nmap commands will produce the following output?
- Anmap -sN -Ps -T4 192.168.1.1
- Bnmap -sT -sX -Pn -p 1-65535 192.168.1.1
- Cnmap -sS -Pn 192.168.1.1
- Dnmap -sS -sU -Pn -p 1-65535 192.168.1.1
101Developers at your company are creating a web application which will be available for use
by anyone on the Internet, The developers have taken the approach of implementing a Three-Tier
Architecture for the web application. The developers are now asking you which network should the
Presentation Tier (front- end web server) be placed in?- Aisolated vlan network
- BMesh network
- CDMZ network
- DInternal network
102A medium-sized healthcare IT business decides to implement a risk management strategy.
Which of the following is NOT one of the five basic responses to risk?- ADelegate
- BAvoid
- CMitigate
- DAccept
103Which of the following provides a security professional with most information about the
system's security posture?- AWardriving, warchalking, social engineering
- BSocial engineering, company site browsing, tailgating
- CPhishing, spamming, sending trojans
- DPort scanning, banner grabbing, service identification
104Which of the following steps for risk assessment methodology refers to vulnerability
identification?- ADetermines if any flaws exist in systems, policies, or procedures
- BAssigns values to risk probabilities; Impact values.
- CDetermines risk probability that vulnerability will be exploited (High. Medium, Low)
- DIdentifies sources of harm to an IT system. (Natural, Human. Environmental)
105The use of technologies like IPSec can help guarantee the following: authenticity, integrity,
confidentiality and- Anon-repudiation.
- Boperability.
- Csecurity.
- Dusability.
106A zone file consists of which of the following Resource Records (RRs)?
- ADNS, NS, AXFR, and MX records
- BDNS, NS, PTR, and MX records
- CSOA, NS, AXFR, and MX records
- DSOA, NS, A, and MX records
107Which of the following is a hardware requirement that either an IDS/IPS system or a proxy
server must have in order to properly function?- AFast processor to help with network traffic analysis
- BThey must be dual-homed
- CSimilar RAM requirements
- DFast network interface cards
108Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense
conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone,
grabs the door as it begins to close.
What just happened?- APhishing
- BWhaling
- CTailgating
- DMasquerading
109Which of the following Nmap commands would be used to perform a stack fingerprinting?
- ANmap -O -p80 <host(s.>
- BNmap -hU -Q<host(s.>
- CNmap -sT -p <host(s.>
- DNmap -u -o -w2 <host>
- ENmap -sS -0p targe
110An IT security engineer notices that the company's web server is currently being hacked.
What should the engineer do next?- AUnplug the network connection on the company's web server.
- BDetermine the origin of the attack and launch a counterattack.
- CRecord as much information as possible from the attack.
- DPerform a system restart on the company's web server.
111Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt
to use these tools in his lab and is now ready for real world exploitation. He was able to effectively
intercept communications between the two entities and establish credentials with both sides of the
connections. The two remote ends of the communication never notice that Eric is relaying the
information between the two. What would you call this attack?- AInterceptor
- BMan-in-the-middle
- CARP Proxy
- DPoisoning Attack
112Which security control role does encryption meet?
- APreventative
- BDetective
- COffensive
- DDefensive
113Perspective clients want to see sample reports from previous penetration tests.
What should you do next?- ADecline but, provide references.
- BShare full reports, not redacted.
- CShare full reports with redactions.
- DShare reports, after NDA is signed.
114How is sniffing broadly categorized?
- AActive and passive
- BBroadcast and unicast
- CUnmanaged and managed
- DFiltered and unfiltered
115To send a PGP encrypted message, which piece of information from the recipient must the
sender have before encrypting the message?- ARecipient's private key
- BRecipient's public key
- CMaster encryption key
- DSender's public key
116ViruXine.W32 virus hides their presence by changing the underlying executable code.
This Virus code mutates while keeping the original algorithm intact, the code changes itself each time
it runs, but the function of the code (its semantics) will not change at all.
What is this technique called?
- AOtra foto
- BPolymorphic Virus
- CMetamorphic Virus
- DDravidic Virus
- EStealth Virus
- AOtra foto
117Shellshock had the potential for an unauthorized user to gain access to a server. It affected
many internet-facing services, which OS did it not directly affect?- AWindows
- BUnix
- CLinux
- DOS X
118The Open Web Application Security Project (OWASP) testing methodology addresses the
need to secure web applications by providing which one of the following services?- AAn extensible security framework named COBIT
- BA list of flaws and how to fix them
- CWeb application patches
- DA security certification for hardened web applications
119Email is transmitted across the Internet using the Simple Mail Transport Protocol. SMTP
does not encrypt email, leaving the information in the message vulnerable to being read by an
unauthorized person. SMTP can upgrade a connection between two mail servers to use TLS. Email
transmitted by SMTP over TLS is encrypted. What is the name of the command used by SMTP to
transmit email over TLS?- AOPPORTUNISTICTLS STARTTLS
- BFORCETLS
- CUPGRADETLS
120Which of the below hashing functions are not recommended for use?
- ASHA-1.ECC
- BMD5, SHA-1
- CSHA-2. SHA-3
- DMD5. SHA-5
121Which solution can be used to emulate computer services, such as mail and ftp, and to
capture information related to logins or actions?- AFirewall
- BHoneypot
- CCore server
- DLayer 4 switch
122An IT employee got a call from one of our best customers. The caller wanted to know about
the company's network infrastructure, systems, and team. New opportunities of integration are in
sight for both company and customer. What should this employee do?- ASince the company's policy is all about Customer Service, he/she will provide information.
- BDisregarding the call, the employee should hang up.
- CThe employee should not provide any information without previous management authorization.
- DThe employees can not provide any information; but, anyway, he/she will provide the name of the person in charge.
123Which of the following items is unique to the N-tier architecture method of designing
software applications?- AApplication layers can be separated, allowing each layer to be upgraded independently from other layers.
- BIt is compatible with various databases including Access, Oracle, and SQL.
- CData security is tied into each layer and must be updated for all layers when any upgrade is performed.
- DApplication layers can be written in C, ASP.NET, or Delphi without any performance loss.
124This TCP flag instructs the sending system to transmit all buffered data immediately.
- ASYN
- BRST
- CPSH
- DURG
- EFIN
125Identify the UDP port that Network Time Protocol (NTP) uses as its primary means of
communication?- A123
- B161
- C69
- D113
126A large mobile telephony and data network operator has a data that houses network
elements. These are essentially large computers running on Linux. The perimeter of the data center is
secured with firewalls and IPS systems. What is the best security policy concerning this setup?- ANetwork elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.
- BAs long as the physical access to the network elements is restricted, there is no need for additional measures.
- CThere is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.
- DThe operator knows that attacks and down time are inevitable and should have a backup site.
127Which of the following attacks exploits web age vulnerabilities that allow an attacker to
force an unsuspecting user's browser to send malicious requests they did not intend?- ACommand Injection Attacks
- BFile Injection Attack
- CCross-Site Request Forgery (CSRF)
- DHidden Field Manipulation Attack
128The company ABC recently contracted a new accountant. The accountant will be working
with the financial statements. Those financial statements need to be approved by the CFO and then
they will be sent to the accountant but the CFO is worried because he wants to be sure that the
information sent to the accountant was not modified once he approved it. What of the following
options can be useful to ensure the integrity of the data?- AThe document can be sent to the accountant using an exclusive USB for that document.
- BThe CFO can use a hash algorithm in the document once he approved the financial statements.
- CThe financial statements can be sent twice, one by email and the other delivered in USB and the accountant can compare both to be sure it is the same document.
- DThe CFO can use an excel file with a password.
129The "black box testing" methodology enforces which kind of restriction?
- AOnly the external operation of a system is accessible to the tester.
- BOnly the internal operation of a system is known to the tester.
- CThe internal operation of a system is only partly accessible to the tester.
- DThe internal operation of a system is completely known to the tester.
130Which of the following statements is TRUE?
- ASniffers operate on Layer 2 of the OSI model
- BSniffers operate on Layer 3 of the OSI model
- CSniffers operate on both Layer 2 & Layer 3 of the OSI model.
- DSniffers operate on the Layer 1 of the OSI model.
131While performing data validation of web content, a security technician is required to restrict
malicious input.
Which of the following processes is an efficient way of restricting malicious input?- AValidate web content input for query strings.
- BValidate web content input with scanning tools.
- CValidate web content input for type, length, and range.
- DValidate web content input for extraneous queries.
132A bank stores and processes sensitive privacy information related to home loans. However,
auditing has never been enabled on the system. What is the first step that the bank should take
before enabling the audit feature?- APerform a vulnerability scan of the system.
- BDetermine the impact of enabling the audit feature.
- CPerform a cost/benefit analysis of the audit feature.
- DAllocate funds for staffing of audit log review.
133Firewalls are the software or hardware systems that are able to control and monitor the
traffic coming in and out the target network based on pre-defined set of rules.
Which of the following types of firewalls can protect against SQL injection attacks?- AData-driven firewall
- BStateful firewall
- CPacket firewall
- DWeb application firewall
134Which of these options is the most secure procedure for storing backup tapes?
- AIn a climate controlled facility offsite
- BOn a different floor in the same building
- CInside the data center for faster retrieval in a fireproof safe
- DIn a cool dry environment
135Which of the following items of a computer system will an anti-virus program scan for
viruses?- ABoot Sector
- BDeleted Files
- CWindows Process List
- DPassword Protected Files
136When conducting a penetration test, it is crucial to use all means to get all available
information about the target network. One of the ways to do that is by sniffing the network. Which of
the following cannot be performed by the passive network sniffing?- AIdentifying operating systems, services, protocols and devices
- BModifying and replaying captured network traffic
- CCollecting unencrypted information about usernames and passwords
- DCapturing a network traffic for further analysis
137Passive reconnaissance involves collecting information through which of the following?
- ASocial engineering
- BNetwork traffic sniffing
- CMan in the middle attacks
- DPublicly accessible sources
138In cryptanalysis and computer security, 'pass the hash' is a hacking technique that allows an
attacker to authenticate to a remote server/service by using the underlying NTLM and/or LanMan
hash of a user's password, instead of requiring the associated plaintext password as is normally the
case.
Metasploit Framework has a module for this technique: psexec. The psexec module is often used by
penetration testers to obtain access to a given system that you already know the credentials for. It
was written by sysinternals and has been integrated within the framework. Often as penetration
testers, successfully gain access to a system through some exploit, use meterpreter to grab the
passwords or other methods like fgdump, pwdump, or cachedump and then utilize rainbowtables to
crack those hash values.
Which of the following is true hash type and sort order that is using in the psexec module's
'smbpass'?- ANT:LM
- BLM:NT
- CLM:NTLM
- DNTLM:LM
139Which of the following descriptions is true about a static NAT?
- AA static NAT uses a many-to-many mapping.
- BA static NAT uses a one-to-many mapping.
- CA static NAT uses a many-to-one mapping.
- DA static NAT uses a one-to-one mapping.
140Security Policy is a definition of what it means to be secure for a system, organization or
other entity. For Information Technologies, there are sub-policies like Computer Security Policy,
Information Protection Policy, Information Security Policy, network Security Policy, Physical Security
Policy, Remote Access Policy, and User Account Policy.
What is the main theme of the sub-policies for Information Technologies?- AAvailability, Non-repudiation, Confidentiality
- BAuthenticity, Integrity, Non-repudiation
- CConfidentiality, Integrity, Availability
- DAuthenticity, Confidentiality, Integrity
141What are two things that are possible when scanning UDP ports? (Choose two.)
- AA reset will be returned
- BAn ICMP message will be returned
- CThe four-way handshake will not be completed
- DAn RFC 1294 message will be returned
- ENothing
142Based on the following extract from the log of a compromised machine, what is the hacker
really trying to steal?- Ahar.txt
- BSAM file
- Cwwwroot
- DRepair file
143The precaution of prohibiting employees from bringing personal computing devices into a
facility is what type of security control?- APhysical
- BProcedural
- CTechnical
- DCompliance
144Steve, a scientist who works in a governmental security agency, developed a technological
solution to identify people based on walking patterns and implemented this approach to a physical
control access.
A camera captures people walking and identifies the individuals using Steve's approach.
After that, people must approximate their RFID badges. Both the identifications are required to open
the door.
In this case, we can say:- AAlthough the approach has two phases, it actually implements just one authentication factor
- BThe solution implements the two authentication factors: physical object and physical characteristic
- CThe solution will have a high level of false positives
- DBiological motion cannot be used to identify people
145A pentester gains access to a Windows application server and needs to determine the
settings of the built-in Windows firewall. Which command would be used?- ANetsh firewall show config
- BWMIC firewall show config
- CNet firewall show config
- DIpconfig firewall show config
146You need a tool that can do network intrusion prevention and intrusion detection, function
as a network sniffer, and record network activity, what tool would you most likely select?- ANmap
- BCain & Abel
- CNessus
- DSnort
147The use of alert thresholding in an IDS can reduce the volume of repeated alerts, but
introduces which of the following vulnerabilities?- AAn attacker, working slowly enough, can evade detection by the IDS.
- BNetwork packets are dropped if the volume exceeds the threshold.
- CThresholding interferes with the IDS' ability to reassemble fragmented packets.
- DThe IDS will not distinguish among packets originating from different sources.
148Look at the following output. What did the hacker accomplish?
- AThe hacker used whois to gather publicly available records for the domain.
- BThe hacker used the "fierce" tool to brute force the list of available domains.
- CThe hacker listed DNS records on his own domain.
- DThe hacker successfully transferred the zone and enumerated the hosts.
149What is the correct PCAP filter to capture all TCP traffic going to or from host 192.168.0.125
on port 25?- Atcp.src == 25 and ip.host == 192.168.0.125
- Bhost 192.168.0.125:25
- Cport 25 and host 192.168.0.125
- Dtcp.port == 25 and ip.host == 192.168.0.125
150A network administrator discovers several unknown files in the root directory of his Linux
FTP server. One of the files is a tarball, two are shell script files, and the third is a binary file is named
"nc." The FTP server's access logs show that the anonymous user account logged in to the server,
uploaded the files, and extracted the contents of the tarball and ran the script using a function
provided by the FTP server's software. The ps command shows that the nc file is running as process, and the netstat command shows the nc process is listening on a network port.
What kind of vulnerability must be present to make this remote attack possible?- AFile system permissions
- BPrivilege escalation
- CDirectory traversal
- DBrute force login
151You have compromised a server on a network and successfully opened a shell. You aimed to
identify all operating systems running on the network. However, as you attempt to fingerprint all
machines in the network using the nmap syntax below, it is not going through.
What seems to be wrong?
- AOS Scan requires root privileges.
- BThe nmap syntax is wrong.
- CThis is a common behavior for a corrupted nmap application.
- DThe outgoing TCP/IP fingerprinting is blocked by the host firewall.
152A hacker is attempting to use nslookup to query Domain Name Service (DNS). The hacker
uses the nslookup interactive mode for the search. Which command should the hacker type into the
command shell to request the appropriate records?- ALocate type=ns
- BRequest type=ns
- CSet type=ns
- DTransfer type=ns
153Which of the following processes evaluates the adherence of an organization to its stated
security policy?- AVulnerability assessment
- BPenetration testing
- CRisk assessment
- DSecurity auditing
154What is the main reason the use of a stored biometric is vulnerable to an attack?
- AThe digital representation of the biometric might not be unique, even if the physical characteristic is unique.
- BAuthentication using a stored biometric compares a copy to a copy instead of the original to a copy.
- CA stored biometric is no longer "something you are" and instead becomes "something you have".
- DA stored biometric can be stolen and used by an attacker to impersonate the individual identified by the biometric.
155A computer science student needs to fill some information into a secured Adobe PDF job
application that was received from a prospective employer. Instead of requesting a new document
that allowed the forms to be completed, the student decides to write a script that pulls passwords
from a list of commonly used passwords to try against the secured PDF until the correct password is
found or the list is exhausted.
Which cryptography attack is the student attempting?- AMan-in-the-middle attack
- BBrute-force attack
- CDictionary attack
- DSession hijacking
156Which of the following is the best countermeasure to encrypting ransomwares?
- AUse multiple antivirus softwares
- BKeep some generation of off-line backup
- CAnalyze the ransomware to get decryption key of encrypted data
- DPay a ransom
157You have successfully compromised a machine on the network and found a server that is
alive on the same network. You tried to ping it but you didn't get any response back.
What is happening?- AICMP could be disabled on the target server.
- BThe ARP is disabled on the target server.
- CTCP/IP doesn't support ICMP.
- DYou need to run the ping command with root privileges.
158Which tool is used to automate SQL injections and exploit a database by forcing a given web
application to connect to another database controlled by a hacker?- ADataThief
- BNetCat
- CCain and Abel
- DSQLInjector
159A security engineer is attempting to map a company's internal network. The engineer enters
in the following NMAP command:
NMAP -n -sS -P0 -p 80 ***.***.**.**
What type of scan is this?- AQuick scan
- BIntense scan
- CStealth scan
- DComprehensive scan
160Which of the following is an example of an asymmetric encryption implementation?
- ASHA1
- BPGP
- C3DES
- DMD5
161Which of the following is the BEST way to protect Personally Identifiable Information (PII)
from being exploited due to vulnerabilities of varying web applications?- AUse cryptographic storage to store all PII
- BUse full disk encryption on all hard drives to protect PII
- CUse encrypted communications protocols to transmit PII
- DUse a security token to log into all Web applications that use PII
162Trinity needs to scan all hosts on a /16 network for TCP port 445 only. What is the fastest
way she can accomplish this with Nmap? Stealth is not a concern.- Anmap -sn -sF 10.1.0.0/16 445
- Bnmap -p 445 -n -T4 -open 10.1.0.0/16
- Cnmap -s 445 -sU -T5 10.1.0.0/16
- Dnmap -p 445 -max -Pn 10.1.0.0/16
163It is a kind of malware (malicious software) that criminals install on your computer so they can lock it from a remote location. This malware generates a pop-up window, webpage, or email
warning from what looks like an official authority. It explains that your computer has been locked
because of possible illegal activities on it and demands payment before you can access your files and
programs again.
Which of the following terms best matches the definition?- ARansomware
- BAdware
- CSpyware
- DRiskware
164What are the three types of authentication?
- ASomething you: know, remember, prove
- BSomething you: have, know, are
- CSomething you: show, prove, are
- DSomething you: show, have, prove
165What is the proper response for a NULL scan if the port is open?
- ASYN
- BACK
- CFIN
- DPSH
- ERST
- FNo response
166An nmap command that includes the host specification of 202.176.56-57.* will scan
_______ number of hosts.- A2
- B256
- C512
- DOver 10, 000
167What is the code written for?
- ABuffer Overflow
- BEncryption
- CBruteforce
- DDenial-of-service (Dos)
168When analyzing the IDS logs, the system administrator noticed an alert was logged when
the external router was accessed from the administrator's computer to update the router
configuration. What type of an alert is this?- AFalse positive
- BFalse negative
- CTrue positve
- DTrue negative
169How does an operating system protect the passwords used for account logins?
- AThe operating system performs a one-way hash of the passwords.
- BThe operating system stores the passwords in a secret file that users cannot find.
- CThe operating system encrypts the passwords, and decrypts them when needed.
- DThe operating system stores all passwords in a protected segment of non-volatile memory.
170What type of analysis is performed when an attacker has partial knowledge of innerworkings
of the application?- ABlack-box
- BAnnounced
- CWhite-box
- DGrey-box
171Which of the following settings enables Nessus to detect when it is sending too many
packets and the network pipe is approaching capacity?- ANetstat WMI Scan
- BSilent Dependencies
- CConsider unscanned ports as closed
- DReduce parallel connections on congestion
172Name two software tools used for OS guessing? (Choose two.)
- ANmap
- BSnadboy
- CQueso
- DUserInfo
- ENetBus
173What is one thing a tester can do to ensure that the software is trusted and is not changing
or tampering with critical data on the back end of a system it is loaded on?- AProper testing
- BSecure coding principles
- CSystems security and architecture review
- DAnalysis of interrupts within the software
174Bob received this text message on his mobile phone: ""Hello, this is Scott Smelby from the
Yahoo Bank.
Kindly contact me for a vital transaction on: scottsmelby@yahoo.com"". Which statement below is
true?- AThis is probably a legitimate message as it comes from a respectable organization.
- BBob should write to scottsmelby@yahoo.com to verify the identity of Scott.
- CThis is a scam as everybody can get a @yahoo address, not the Yahoo customer service
employees. - DThis is a scam because Bob does not know Scott.
175You are attempting to run an Nmap port scan on a web server. Which of the following
commands would result in a scan of common ports with the least amount of noise in order to evade
IDS?- Anmap -A - Pn
- Bnmap -sP -p-65535-T5
- Cnmap -sT -O -T0
- Dnmap -A --host-timeout 99-T1
176Which of the following is the BEST approach to prevent Cross-site Scripting (XSS) flaws?
- AUse digital certificates to authenticate a server prior to sending data.
- BVerify access right before allowing access to protected information and UI controls.
- CVerify access right after allowing access to protected information and UI controls.
- DValidate and escape all information sent to a server.
Information
- Description
- CEH CEH Quiz on Preparacion 2, created by David Martinez Lora on 28/10/2020.
- Author
- David Martinez Lora
- Language
- Español
- Views
- 2
- Tags
- Rating
- No ratings yet Rate this quiz