Quiz
Gencer3
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (52)
1Which of the following is a low-tech way of gaining unauthorized access to systems?
- AScanning
- BSniffing
- CEavesdropping
- DSocial engineering
2What is the best description of SQL Injection?
- AIt is a Denial of Service Attack
- BIt is an attack used to gain unauthorized access to a database
- CIt is a Man-in-the-Middle attack between your SQL Server and Web App Server
- DIt is an attack used to modify code in an application
3This international organization regulates billions of transactions daily and provides security guidelines to protect personally identifiable information (PII). These security controls provide a baseline and prevent low-level hackers sometimes known as script kiddies from causing a data breach. Which of the following organizations is being described?
- AInternational Security Industry Organization (ISIO)
- BCenter for Disease Control (CDC)
- CPayment Card Industry (PCI)
- DInstitute of Electrical and Electronics Engineers (IEEE)
4Which of the following types of firewalls ensures that the packets are part of the established session?
- ACircuit-level firewall
- BStateful inspection firewall
- CApplication-level firewall
- DSwitch-level firewall
5A regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a single server. Based on this information, what should be one of your key recommendations to the bank?
- APlace a front-end web server in a demilitarized zone that only handles external web traffic
- BMove the financial data to another server on the same IP subnet
- CRequire all employees to change their passwords immediately
- DIssue new certificates to the web servers from the root certificate authority
6You are a Network Security Officer. You have two machines. The first machine (192.168.0.99) has Snort installed, and the second machine (192.168.0.150) has Kiwi syslog installed. You perform a SYN scan in your network, and you notice that Kiwi syslog is not receiving the alert message from snort. You decide to run Wireshark in the Snort machine to check if the messages are going to the Kiwi syslog machine. What Wireshark filter will show the connections from the Snort machine to Kiwi syslog machine?
- Atcp.dstport==514 && ip.dst==192.168.0.150
- Btcp.srcport==514 && ip.src==192.168.0.150
- Ctcp.srcport==514 && ip.src==192.168.0.99
- Dtcp.dstport==514 && ip.dst==192.168.0.0/16
7Session splicing is an IDS evasion technique in which an attacker delivers data in multiple, small-sized packets to the target computer, making it very difficult for an IDS to detect the attack signatures. Which tool can be used to perform session splicing attacks?
- Atcpsplice
- BHydra
- CBurp
- DWhisker
8Your company was hired by a small healthcare provider to perform a technical assessment on the network. What is the best approach for discovering vulnerabilities on a Windows-based computer?
- ACheck MITRE.org for the latest list of CVE findings
- BCreate a disk image of a clean Windows installation
- CUse the built-in Windows Update tool
- DUse a scan tool like Nessus
9When you are testing a web application, it is very useful to employ a proxy tool to save every request and response. You can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers manually to get more precise results than if using web vulnerability scanners. What proxy tool will help you find web vulnerabilities?
- AProxychains
- BDimitry
- CMaskgen
- DBurpsuite
10Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it begins to close.
What just happened?- AWhaling
- BPiggybacking
- CPhishing
- DMasquerading
11The “black box testing” methodology enforces which kind of restriction?
- AOnly the internal operation of a system is known to the tester.
- BThe internal operation of a system is completely known to the tester.
- COnly the external operation of a system is accessible to the tester.
- DThe internal operation of a system is only partly accessible to the tester.
12While using your bank’s online servicing you notice the following string in the URL bar: “http://vvvvvv.MyPersonalBank.com/account?id=3689409110283898cDamount=109808:Camount=21” You observe that if you modify the Damount & Camount values and submit the request, that data on the web page reflect the changes.
- ASQL injection
- BWeb Parameter Tampering
- CXSS Reflection
- DCookie Tampering
13Ricardo wants to send secret messages to a competitor company. To secure these messages, he uses a technique of hiding a secret message within an ordinary message. The technique provides ‘security through obscurity’.
What technique is Ricardo using?- ARSA algorithm
- BSteganography
- CPublic-key cryptography
- DEncryption
14You’ve just been hired to perform a pen test on an organization that has been subjected to a large-scale attack. The CIO is concerned with mitigating threats and vulnerabilities to totally eliminate risk.
What is one of the first things you should do when given the job?- AExplain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to acceptable levels.
- BStart the Wireshark application to start sniffing network traffic.
- CInterview all employees in the company to rule out possible insider threats.
- DEstablish attribution to suspected attackers
15Which of the following are used to identify who is responsible for responding to an incident?
- ADisaster management manuals
- BDisaster management policies
- CIncident response policies
- DIncident response manuals
16Given the following actions, what is the best mitigation strategy you will need to enforce?
I. Maintain control over what gets installed to all machines on the network.
II . Enforce policy that says no users may have local admin privileges.
III. Configure IDP System to take proactive action on encrypted traffic by resetting the connection and sending admin an alert about the traffic.
IV. Deploy SIEM and conduct regular log review.- AII and III only
- BII, III and IV only
- CAll of the above
- DI, II and IV only
17Which of the following is a design pattern based on distinct pieces of software providing application functionality as services to other applications?
- AService Oriented Architecture
- BAgile Process
- CObject Oriented Architecture
- DLean Coding
18It is the science that encompasses the conversion of data into a scrambled code that is sent across a private or public network. Which of the following terms best matches the definition?
- AKey Clustering
- BSteganography
- CCryptanalysis
- DCryptography
19This United States federal act requires periodic assessments and accreditation of governments systems at least once every three years. Which of the following acts is being described?
- AFederal Information Security Management Act (FISMA)
- BContinuity of Operations Plan (COOP)
- CPatriot Act
- DFreedom of Information Act
20While performing online banking using a Web browser, a user receives an email that contains a link to an interesting Web site. When the user clicks on the link, another Web browser session starts and displays a video of cats playing a piano. The next business day, the user receives what looks like an email from his bank, indicating that his bank account has been accessed from a foreign country. The email asks the user to call his bank and verify the authorization of a funds transfer that What Web browser-based security vulnerability was exploited to compromise the user?
- ACross-Site Scripting
- BCross-Site Request Forgery
- CClickjacking
- DWeb form input validation
21The Open Web Application Security Project (OWASP) is the worldwide not-for-profit charitable organization focused on improving the security of software. What item is the primary concern on OWASP’s Top Ten Project Most Critical Web Application Security Risks?
- AInjection
- BCross Site Scripting
- CCross Site Request Forgery
- DPath disclosure
22A close friend believes their significant other is being unfaithful. They want you to hack into their cheating partner’s email account. How should you respond?
- AUse SET to create a booby-trapped phishing email.
- BDecline because the email account does not belong to your friend.
- CAsk the friend to install an key-logger on a shared computer.
- DShow the friend tools and techniques to accomplish it on their own.
23A company’s Web development team has become aware of a certain type of security vulnerability in their Web software. To mitigate the possibility of this vulnerability being exploited, the team wants to modify the software requirements to disallow users from entering HTML as input into their Web application. What kind of Web application vulnerability likely exists in their software?
- ASQL injection vulnerability
- BCross-site Request Forgery vulnerability
- CCross-site scripting vulnerability
- DWeb site defacement vulnerability
24What is a “Collision attack” in cryptography?
- ACollision attacks try to break the hash into two parts, with the same bytes in each part to get the private key.
- BCollision attacks try to get the public key.
- CCollision attacks try to find two inputs producing the same hash.
- DCollision attacks try to break the hash into three parts to get the plaintext value.
25Under the “Post-attack Phase and Activities,” it is the responsibility of the tester to restore the systems to a pretest state. Which of the following activities should NOT be included in this phase?
I. Removing all files uploaded on the system.
II. Cleaning all registry entries.
III. Mapping of network state.
IV. Removing all tools and maintaining backdoor for reporting.- AIII
- BIV
- CIII and IV
- DAll should be included
26John is an incident handler at a financial institution. His steps in a recent incident are not up to the standards of the company. John frequently forgets some steps and procedures while handling responses as they are very stressful to perform. Which of the following actions should John take to overcome this problem with the least administrative effort?
- AIncrease his technical skills.
- BSelect someone else to check the procedures. I}
- CRead the incident manual every time it occurs.
- DCreate an incident checklist.
27You’ve detected an infected host. After isolating the host on the network, what should you do next?
- ATurn off the host.
- BObtain a forensic copy of the hard disc.
- CRetrieve a memory dump.
- DInstall a different anti-virus.
28Which of the following is one of the most effective ways to prevent Cross-site Scripting (XSS) flaws in software applications?
- AUse digital certificates to authenticate a server prior to sending data.
- BVerify access right before allowing access to protected information and UI controls
- CUse security policies and procedures to define and implement proper security settings
- DValidate and escape all information sent to a server
29The Heartbleed bug was discovered in 2014 and is widely referred to under MITRE’s Common Vulnerabilities and Exposures (CVE) as CVE- 2014-0160. This bug affects the OpenSSL implementation of the transport layer security (TLS) protocols defined in RFC6520. What type of key does this bug leave exposed to the Internet making exploitation of any compromised system very easy?
- APrivate
- BPublic
- CShared
- DRoot
30Initiating an attack against targeted businesses and organizations, threat actors compromise a carefully selected website by inserting an exploit resulting in malware infection. The attackers run exploits on well-known and trusted sites likely to be visited by their targeted victims. Aside from carefully choosing sites to compromise, these attacks are known to incorporate zero-day exploits that target unpatched vulnerabilities. Thus, the targeted entities are left with little or no defense against these exploits. What type of attack is outlined in the scenario?
- AWatering Hole Attack
- BHeartbleed Attack
- CShellshock Attack
- DSpear Phising Attack
31Which of the following is a component of a risk assessment?
- AAdministrative safeguards
- BPhysical security
- CDMZ
- DLogical interface
32An attacker changes the profile information of a particular user (victim) on the target website. The attacker uses this string to update the victim’s profile to a text file and then submit the data to the attacker’s database. <iframe src="http://www.vulnweb.com/updateif.php" style="display:none"></iframe> What is this type of attack (that can use either HTTP GET or HTTP POST) called?
- ACross-Site Request Forgery
- BCross-Site Scripting
- CSQL Injection
- DBrowser Hacking
33The network administrator contacts you and tells you that she noticed the temperature on the internal wireless router increases by more than 20% during weekend hours when the office was closed. She asks you to investigate the issue because she is busy dealing with a big conference and she doesn’t have time to perform the task. What tool can you use to view the network traffic being sent and received by the wireless router?
- AWireshark
- BNessus
- CNetcat
- DNetstat
34Port scanning can be used as part of a technical assessment to determine network vulnerabilities. The TCP XMAS scan is used to identify listening ports on the targeted system.
If a scanned port is open, what happens?- AThe port will ignore the packets.
- BThe port will send an RST.
- CThe port will send an ACK.
- DThe port will send a SYN.
35Which tool allows analysts and pen testers to examine links between data using graphs and link analysis?
- AMaltego
- BCain & Abel
- CMetasploit
- DWireshark
36A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS?
Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/tcp
open netbios-ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:8- AThe host is likely a printer.
- BThe host is likely a Windows machine.
- CThe host is likely a Linux machine.
- DThe host is likely a router.
37Which of the following is a command line packet analyzer similar to GUI-based Wireshark?
- Atcpdump
- Bnessus
- Cetherea
- DJack the ripper
38In Risk Management, how is the term "likelihood" related to the concept of "threat?"
- ALikelihood is the probability that a threat-source will exploit a vulnerability.
- BLikelihood is a possible threat-source that may exploit a vulnerability.
- CLikelihood is the likely source of a threat that could exploit a vulnerability.
- DLikelihood is the probability that a vulnerability is a threat-source.
39What is the most common method to exploit the “Bash Bug” or “ShellShock" vulnerability?
- AThrough Web servers utilizing CGI (Common Gateway Interface) to send a malformed environment variable to a vulnerable Web server
- BManipulate format strings in text fields
- CSSH
- DSYN Flood
40Which of the following tools performs comprehensive tests against web servers, including dangerous files and CGIs?
- ANikto
- BSnort
- CJohn the Ripper
- DDsniff
41Craig received a report of all the computers on the network that showed all the missing patches and weak passwords. What type of software generated this report?
- Aa port scanner
- Ba vulnerability scanner
- Ca virus scanner
- Da malware scanner
42What two conditions must a digital signature meet?
- AHas to be unforgeable, and has to be authentic.
- BHas to be legible and neat.
- CMust be unique and have special characters.
- DHas to be the same number of characters as a physical signature and must be unique.
43An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their job. The attacker gains access to the DNS server and redirects the direction www.google.com to his own IP address. Now when the employees of the office want to go to Google they are being redirected to the attacker machine. What is the name of this kind of attack?
- AARP Poisoning
- BSmurf Attack
- CDNS spoofing
- DMAC Flooding
44What is the role of test automation in security testing?
- AIt can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.
- BIt is an option but it tends to be very expensive.
- CIt should be used exclusively. Manual testing is outdated because of low speed and possible test setup inconsistencies.
- DTest automation is not usable in security due to the complexity of the tests.
45The company ABC recently discovered that their new product was released by the opposition before their premiere. They contract an investigator who discovered that the maid threw away papers with confidential information about the new product and the opposition found it in the garbage. What is the name of the technique used by the opposition?
- AHack attack
- BSniffing
- CDumpster diving
- DSpying
46A hacker has managed to gain access to a Linux host and stolen the password file from /etc/passwd. How can he use it?
- AThe password file does not contain the passwords themselves.
- BHe can open it and read the user ids and corresponding passwords.
- CThe file reveals the passwords to the root user only.
- DHe cannot read it because it is encrypted.
47Eve stole a file named secret.txt, transferred it to her computer and she just entered these commands:
[eve@localhost ~]$ john secret.txt
Loaded 2 password hashes with no different salts (LM [DES 128/128 SSE2-16]) Press 'q' or Ctrl-C to abort. almost any other key for status
0g 0:00:00:03 3/3 0g/s 86168p/s 86168c/s 172336C/s MERO..SAMPLUI
0g 0:00:00:04 3/3 0g/s 3296Kp/s 3296Kc/s 6592KC/s GOS..KARIS4
0g 0:00:00:07 3/3 0g/s 8154Kp/s 8154Kc/s 16309KC/s NY180K..NY1837
0g 0:00:00:10 3/3 0g/s 7958Kp/s 7958Kc/s 1591KC/s SHAGRN..SHENY9
What is she trying to achieve?- AShe is encrypting the file.
- BShe is using John the Ripper to view the contents of the file.
- CShe is using ftp to transfer the file to another hacker named John.
- DShe is using John the Ripper to crack the passwords in the secret.txt file.
48Seth is starting a penetration test from inside the network. He hasn't been given any information about the network. What type of test is he conducting?
- AInternal Whitebox
- BExternal, Whitebox
- CInternal, Blackbox
- DExternal, Blackbox
49An attacker tries to do banner grabbing on a remote web server and executes the following command.
$ nmap -sV host.domain.com -p 80 He gets the following output.
Starting Nmap 6.47 ( http://nmap.org ) at 2014-12-08 19:10 EST Nmap scan report for host.domain.com (108.61.158.211)
Host is up (0.032s latency).
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
Service detection performed. Please report any incorrect results at http://nmap.org/submit/. Nmap done: 1 IP address (1 host up) scanned in 6.42 seconds
What did the hacker accomplish?- Anmap can't retrieve the version number of any running remote service.
- BThe hacker successfully completed the banner grabbing.
- CThe hacker should've used nmap -O host.domain.com.
- DThe hacker failed to do banner grabbing as he didn't get the version of the Apache web server.
50You want to analyze packets on your wireless network. Which program would you use?
- AWireshark with Airpcap
- BAirsnort with Airpcap
- CWireshark with Winpcap
- DEthereal with Winpcap
51It has been reported to you that someone has caused an information spillage on their computer. You go to the computer, disconnect it from the network, remove the keyboard and mouse, and power it down. What step in incident handling did you just complete?
- AContainment
- BEradication
- CRecovery
- DDiscovery
52#!/usr/bin/python import socket buffer=[“A”] counter=50
while len(buffer)<=100: buffer.apend (“A”*counter) counter=counter+50 commands=
[“HELP”,“STATS.”,“RTIME.”,“LTIME.”,“SRUN.”,“TRUN.”,“GMON.”,“GDOG.”,“KSTET.”,“GTER.”,“HTER.”,“LTER. ”,“KSTAN.”]
for command in commands: for buffstring in buffer:
print “Exploiting” +command+“:”+str(len(buffstring)) s=socket.socket(socket.AF_INET.socket.SOCK_STREAM) s.connect(('127.0.0.1',9999))
s.recv(50) s.send(command+buffstring) s.close()
What is the code written for?- ABuffer Overflow
- BEncryption
- CBruteforce
- DDenial-of-service (Dos)
Information
- Description
- Quiz on Gencer3, created by Austin Bell on 10/10/2019.
- Author
- Austin Bell
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz