Quiz
Gencer01
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (53)
1When you are getting information about a web server, it is very important to know the HTTP Methods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two critical methods (PUT and DELETE). PUT can upload a file to the server and DELETE can delete a file from the server. You can detect all these methods (GET, POST, HEAD, PUT, DELETE, TRACE) using NMAP script engine.
- Ahttp enum
- Bhttp-methods
- Chttp-git
- Dhttp-headers
2A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS?
Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 192.16.40.65
Host is up (1.005 latency).
Not shown: 993 closed ports PORT STATE SERVICE
21/tcp open ftp
23/tcp open telnet
80/tcp open http
139/tcp open netbios-ssn
515/tcp open
631/tcp open
9100/tcp open ipp
MAC Address: 00:00:48: DD: EE: 80- AThe host is likely a router.
- BThe host is likely a Windows machine
- CThe host is likely a Linux machine
- DThe host is likely a printer.
3This phase will increase the odds of success in later phases of the penetration test. It is also the very first step in Information Gathering, and it will tell you what the “landscape” looks like.
What is the most important phase of ethical hacking in which you need to spend a considerable amount of time?- ANetwork mapping
- BFootprinting
- CGaining access
- DEscalating privileges
4It is a short-range wireless communication technology intended to replace the cables connecting portable of fixed devices while maintaining high levels of security. It allows mobile phones, computers and other devices to connect and communicate using a short-range wireless connection. Which of the following terms best matches the definition?
- AWLAN
- BInfraRed
- CBluetooth
- DRadio-Frequency Identification
5Jesse receives an email with an attachment labeled “Court_Notice_21206.zip”. Inside the zip file is a file named “Court_Notice_21206.docx.exe” disguised as a word document. Upon execution, a window appears stating, “This word document is corrupt.” In the background, the file copies itself to Jesse’s APPDATA\IocaI directory and begins to beacon to a C2 server to download additional malicious binaries.
What type of malware has Jesse encountered?- AWorm
- BMacro Virus
- CKey-logger
- DTrojan
6Using Windows CMD prompt, how would an attacker list all the shares to which the current user context has access?
- ANET CONFIG
- BNET VIEW
- CNET FILE
- DNET USE
7Which of these options is the most secure procedure for storing backup tapes?
- AIn a climate controlled facility offsite
- BOn a different floor in the same building
- CIn a cool dry environment
- DInside the data center for faster retrieval in a fireproof safe
8To maintain compliance with regulatory requirements, a security audit of the systems on a network must be performed to determine their compliance with security policies. Which one of the following tools would most likely be used in such an audit?
- APort scanner
- BProtocol analyzer
- CIntrusion Detection System
- DVulnerability scanner
9Which regulation defines security and privacy controls for Federal information systems and organizations?
- AEU Safe Harbor
- BHIPAA
- CNIST SP 800-53
- DPCI-DSS
10Perspective clients want to see sample reports from previous penetration tests. What should you do next?
- ADecline but, provide references
- BShare full reports with redactions
- CShare reports, after NDA is signed
- DShare full reports, not redacted
11As a Certified Ethical Hacker, you were contracted by a private firm to conduct an external security assessment through penetration testing. What document describes the specifics of the testing, the associated violations, and essentially protects both the organization’s interest and your liabilities as a tester?
- ATerms of Engagement
- BProject Scope
- CService Level Agreement
- DNon-Disclosure Agreement
12A medium-sized healthcare IT business decides to implement a risk management strategy. Which of the following is NOT one of the five basic responses to risk?
- ADelegate
- BAvoid
- CAccept
- DMitigate
13Your team has won a contract to infiltrate an organization. The company wants to have the attack be as realistic as possible; therefore, they did not provide any information besides the company name. What should be the first step in security testing the client?
- AEscalation
- BEnumeration
- CScanning
- DReconnaissance
14Which of the following tools can be used for passive OS fingerprinting?
- Atracert
- Btcpdump
- Cnmap
- Dping
15The chance of a hard drive failure is once every three years. The cost to buy a new hard drive is $300. It will require 10 hours to restore the OS and software to the new hard disk. It will require a further 4 hours to restore the database from the last backup to the new hard disk. The recovery person earns $10/hour. Calculate the SLE, ARO, and ALE. Assume the EF = 1 (100%). What is the closest approximate cost of this replacement and recovery operation per year?
- A$1320
- B$146
- C$440
- D$100
16Which of the following is the greatest threat posed by backups?
- AA backup is unavailable during disaster recovery
- BAn un-encrypted backup can be misplaced or stolen
- CA backup is the source of Malware or illicit information
- DA backup is incomplete because no verification was performed
17What term describes the amount of risk that remains after the vulnerabilities are classified and the countermeasures have been deployed?
- AImpact risk
- BDeferred risk
- CResidual risk
- DInherent risk
18During a Blackbox pen test you attempt to pass IRC traffic over port 80/TCP from a compromised web enabled host. The traffic gets blocked; however, outbound HTTP traffic is unimpeded. What type of firewall is inspecting outbound traffic?
- ACircuit
- BPacket Filtering
- CStateful
- DApplication
19Which of the following is a protocol specifically designed for transporting event messages?
- ASYSLOG
- BSMS
- CSNMP
- DICMP
20Which tool allows analysts and pen testers to examine links between data using graphs and link analysis?
- AMaltego
- BCain & Abel
- CMetasploit
- DWireshark
21Which of the following security operations is used for determining the attack surface of an organization?
- AUsing configuration management to determine when and where to apply security patches
- BTraining employees on the security policy regarding social engineering
- CRunning a network scan to detect network services in the corporate DMZ
- DReviewing the need for a security clearance for each employee
22You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best NMAP command you will use?
- Anmap -T4 -O 10.10.0.0/24
- Bnmap -T4 -r 10.10.1.0/24
- Cnmap -T4 -F 10.10.0.0/24
- Dnmap -T4 -q 10.10.0.0/24
23You have successfully compromised a machine on the network and found a server that is alive on the same network. You tried to ping it but you didn’t get any response back. What is happening?
- AICMP could be disabled on the target server
- BYou need to run the ping command with root privileges
- CTCP/IP doesn’t support ICMP
- DARP is disabled on the target server
24You are performing information gathering for an important penetration test. You have found PDFs, DOCs, and images in your objective. You decide to extract metadata from these files and analyze it. What tool will help you with the task?
- AMetagoofil
- Bcdpsnarf
- CArmitage
- DDimitry
25Which of the following is the least-likely physical characteristic to be used in biometric control that supports a large company?
- AHeight and weight
- BVoice
- CIris patterns
- DFingerprints
26Your company performs penetration tests and security assessments for small and medium-sized business in the local area. During a routine security assessment, you discover information that suggests your client is involved with human trafficking. What should you do?
- AConfront the client in a respectful manner and ask her about the data
- BCopy the data to removable media and keep it in case you need it
- CImmediately stop work and contact the proper legal authorities
- DIgnore the data and continue the assessment until completed as agreed
27What does a firewall check to prevent particular ports and applications from getting packets into an organization?
- AApplication layer port numbers and the transport layer headers
- BTransport layer port numbers and application layer headers
- CNetwork layer headers and the session layer port numbers
- DPresentation layer headers and the session layer port numbers
28You have successfully gained access to your client’s internal network and successfully comprised a Linux server which is part of the internal IP network. You want to know which Microsoft Windows workstations have file sharing enabled. Which port would you see listening on these Windows machines in the network?
- A445
- B3389
- C1433
- D161
29Which of the following describes the characteristics of a Boot Sector Virus?
- AOverwrites the original MBR and only executes the new virus code.
- BModifies directory table entries so that directory entries point to the virus code instead of the actual program.
- CMoves the MBR to another location on the hard disk and copies itself to the original location of the MBR.
- DMoves the MBR to another location on the RAM and copies itself to the original location of the MBR.
30What is the process of logging, recording, and resolving events that take place in an organization?
- AIncident Management Process
- BMetrics
- CInternal Procedure
- DSecurity Policy
31A common cryptographical tool is the use of XOR. XOR the following binary values:
10110001
00111010- A10011101
- B10001011
- C10111100
- D11011000
32A hacker has successfully infected an internet-facing server which he will then use to send junk mail, take part in coordinated attacks, or host junk email content. Which sort of Trojan infects this server?
- ABotnet Trojan
- BBanking Trojans
- CTurtle Trojans
- DRansomware Trojans
33When you return to your desk after a lunch break, you notice a strange email in your inbox. The sender is someone you did business with recently, but the subject line has strange characters in it.
What should you do?- AForward the message to your company’s security response team and permanently delete the message from your computer.
- BReply to the sender and ask them for more information about the message contents.
- CDelete the email and pretend nothing happened.
- DForward the message to your supervisor and ask for her opinion on how to handle the situation.
34Which of the following parameters describe LM Hash:
I – The maximum password length is 14 characters.
II – There are no distinctions between uppercase and lowercase.
III – It’s a simple algorithm, so 10,000,000 hashes can be generated per second.- AII
- BI and II
- CI
- DI, II, and III
35Which of the following incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an organization?
- ARecovery phase
- BIdentification phase
- CPreparation phase
- DContainment phase
36How does the Address Resolution Protocol (ARP) work?
- AIt sends a request packet to all the network elements, asking for the domain name from a specific IP
- BIt sends a request packet to all the network elements, asking for the MAC address from a specific IP
- CIt sends a reply packet for a specific IP, asking for the MAC address
- DIt sends a reply packet to all the network elements, asking for the MAC address from a specific IP
37You are tasked to perform a penetration test. While you are performing information gathering, you find an employee list in Google. You find the receptionist’s email, and you send her an email changing the source email to her boss’s email (boss@company). In this email, you ask for a pdf with information. She reads your email and sends back a pdf with links. You exchange the pdf links with your malicious links (these links contain malware) and send back the modified pdf, saying that the links don’t work. She reads your email, opens the links, and her machine gets infected. You now have access to the company network. What testing method did you use?
- ATailgating
- BEavesdropping
- CSocial Engineering
- DPiggybacking
38
You have compromised a server and successfully gained a root access. You want to pivot and pass traffic undetected over the network and evade any possible Intrusion Detection System. What is the best approach?- AUse HTTP so that all traffic can be routed via a browser, thus evading the internal Intrusion Detection Systems.
- BUse Alternate Data Streams to hide the outgoing packets from this server.
- CInstall and use Telnet to encrypt all outgoing traffic from this server.
- DInstall Cryptcat and encrypt outgoing packets from this server.
39After trying multiple exploits, you’ve gained root access to a Centos 6 server. To ensure you maintain access, what would you do first?
- ADownload and Install Netcat
- BDisable IPTables
- CDisable Key Services
- DCreate User Account
40It is a kind of malware (malicious software) that criminals install on your computer so they can lock it from a remote location. This malware generates a pop-up window, webpage, or email warning from what looks like an official authority. It explains that your computer has been locked because of possible illegal activities on it and demands payment before you can access your files and program again. Which of the following terms best matches the definition?
- AAdware
- BSpyware
- CRansomware
- DRiskware
41Which of the following is not a Bluetooth attack?
- ABluesnarfing
- BBluedriving
- CBluejacking
- DBluesmaking
42Which of the following is one of the most effective ways to prevent Cross-site Scripting (XSS) flaws in software applications?
- AUse security policies and procedures to define and implement proper security settings.
- BValidate and escape all information sent to a server
- CUse digital certificates to authenticate a server prior to sending data.
- DVerify access right before allowing access to protected information and UI controls.
43An Intrusion Detection System (IDS) has alerted the network administrator to a possibly malicious sequence of packets sent to a Web server in the network’s external DMZ. The packet traffic was captured by the IDS and saved to a PCAP file. What type of network tool can be used to determine if these packets are genuinely malicious or simply a false positive?
- AProtocol analyzer
- BNetwork sniffer
- CIntrusion Prevention System (IPS)
- DVulnerability scanner
44Which of the following is considered the best way to protect Personally Identifiable Information (PII) from Web application vulnerabilities?
- AUse encrypted communications protocols to transmit PII
- BUse a security token to log into all Web applications that use PII
- CUse cryptographic storage to store all PII
- DUse full disk encryption on all hard drives to protect PII
45A new wireless client is configured to join an 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client. What is a possible source of this problem?
- AThe wireless client is not configured to use DHCP.
- BClient is configured for the wrong channel
- CThe client cannot see the SSID of the wireless network
- DThe WAP does not recognize the client’s MAC address.
46The configuration allows a wired or wireless network interface controller to pass all traffic it receives to the central processing unit (CPU), rather than passing only the frames that the controller is intended to receive. Which of the following is being described?
- APromiscuous mode
- BPort forwarding
- CMulti-cast mode
- DWEM
47Which of the following is the structure designed to verify and authenticate the identity of individuals within the enterprise taking part in a data exchange?
- APKI
- BBiometrics
- CSOA
- DSingle-Sign On
48To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program. What term is commonly used when referring to this type of testing?
- AFuzzing
- BBounding
- CMutating
- DRandomizing
49_____ is a set of extensions to DNS that provide to DNS clients (resolvers) origin authentication of DNS data to reduce the threat of DNS poisoning, spoofing, and similar attacks types.
- ADNSSEC
- BZone transfer
- CResource transfer
- DResource records
50Sid is a judge for a programming contest. Before the code reaches him it goes through a restricted OS and is tested there. If it passes, then it moves onto Sid. What is this middle step called?
- AFuzzy-testing the code
- BThird party running the code
- CSandboxing the code
- DString validating the code
51Which service in a PKI will vouch for the identity of an individual or company?
- AKDC
- BCA
- CCR
- DCBC
52In IPv6 what is the major difference concerning application layer vulnerabilities compared to IPv4?
- AImplementing IPv4 security in a dual-stack network offers protection from IPv6 attacks too.
- BVulnerabilities in the application layer are independent of the network layer. Attacks and mitigation techniques are almost identical.
- CDue to the extensive security measures built in IPv6, application layer vulnerabilities need not be addresses.
- DVulnerabilities in the application layer are greatly different from IPv4.
53In which phase of the ethical hacking process can Google hacking be employed? This is a technique that involves manipulating a search string with specific operators to search for vulnerabilities.
Example:
allintitle: root passwd- AMaintaining Access
- BGaining Access
- CReconnaissance
- DScanning and Enumeration
Information
- Description
- Quiz on Gencer01, created by Austin Bell on 10/10/2019.
- Author
- Austin Bell
- Language
- English
- Views
- 2
- Tags
- Rating
- No ratings yet Rate this quiz