GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

CEHv9 Chapter 6

Paul Anstall 14 questions

Take the quiz

Questions in this quiz (14)

  1. 1You are examining log files and notice several connection attempts to a hosted web server. Many attempts appear as such: http://www.example.com/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows\ system32\cmd.exe
    What type of attack is in use?
    1. ASQL injection
    2. BUnicode parameter tampering
    3. CDirectory traversal
    4. DCross-site scripting
  2. 2The accounting department of a business notices several orders that seem to have been made erroneously. In researching the concern, you discover it appears the prices of items on several web orders do not match the listed prices on the public site. You verify the web server and the ordering database do not seem to have been compromised. Additionally, no alerts have displayed in the Snort logs concerning a possible attack on the web application. Which of the following might explain the attack in play?
    1. AThe attacker has copied the source code to his machine and altered hidden fields to modify the purchase price of the items.
    2. BThe attacker has used SQL injection to update the database to reflect new prices for the items.
    3. CThe attacker has taken advantage of a server-side include that altered the price.
    4. DThe attacker used Metasploit to take control of the web application.
  3. 3A pen test team member uses the following entry at the command line: nmap --script http-methods --script-args somesystem.com Which of the following is true regarding the intent of the command?
    1. AThe team member is attempting to see which HTTP methods are supported by somesystem.com.
    2. BThe team member is attempting XSS against somesystem.com.
    3. CThe team member is attempting HTTP response splitting against somesystem.com.
    4. DThe team member is attempting to site mirror somesystem.com.
  4. 4You are examining IDS logs and come across the following entry: Mar 30 10:31:07 [1123}: IDS1661/NOPS-x86: 64.118.55.64:1146-> 192.168.119.56:53 What can you infer from this log entry?
    1. AThe attacker, using address 192.168.119.56, is attempting to connect to 64.118.55.64 using a DNS port.
    2. BThe attacker, using address 64.118.55.64, is attempting a directory traversal attack.
    3. CThe attacker is attempting a known SQL attack against 192.168.119.56.
    4. DThe attacker is attempting a buffer overflow against 192.168.119.56.
  5. 5Which of the following would be the best protection against XSS attacks?
    1. AInvest in top-of-the-line firewalls.
    2. BPerform vulnerability scans against your systems.
    3. CConfigure input validation on your systems.
    4. DHave a pen test performed against your systems.
  6. 6Which of the following is true regarding n-tier architecture?
    1. AEach tier must communicate openly with every other tier.
    2. BN-tier always consists of presentation, logic, and data tiers.
    3. CN-tier is usually implemented on one server.
    4. DN-tier allows each tier to be configured and modified independently.
  7. 7Which character is the best choice to start a SQL injection attempt?
    1. AColon
    2. BSemicolon
    3. CDouble quote
    4. DSingle quote
  8. 8Which of the following is a true statement?
    1. AConfiguring the web server to send random challenge tokens is the best mitigation for XSS attacks.
    2. BConfiguring the web server to send random challenge tokens is the best mitigation for buffer overflow attacks.
    3. CConfiguring the web server to send random challenge tokens is the best mitigation for parameter-manipulation attacks.
    4. DConfiguring the web server to send random challenge tokens is the best mitigation for CSRF attacks.
  9. 9Which of the following is a true statement?
    1. ASOAP cannot bypass a firewall.
    2. BSOAP encrypts messages using HTTP methods.
    3. CSOAP is compatible with HTTP and SMTP.
    4. DSOAP messages are usually bidirectional.
  10. 10An attacker inputs the following into the Search text box on an entry form: <script type="text/javascript"> alert("It Worked"); </script> The attacker then clicks the Search button and a pop-up appears stating, “It Worked.” What can you infer from this?
    1. AThe site is vulnerable to buffer overflow.
    2. BThe site is vulnerable to SQL injection.
    3. CThe site is vulnerable to parameter tampering.
    4. DThe site is vulnerable to XSS.

Information

Description
Information Technology Quiz on CEHv9 Chapter 6, created by Paul Anstall on 02/02/2017.
Language
English
Views
49
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?