Quiz
Gencer2
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (53)
1You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line. Which command would you use?
- Ac:\ncpa.cpl
- Bc:\services.msc
- Cc:\compmgmt.msc
- Dc:\gpedit
2Which of the following tools is used to detect wireless LANs using the 802.11a/b/g/n WLAN standards on a Linux platform?
- ANetstumbler
- BNessus
- CKismet
- DAbel
3Which of the following is assured by the use of a hash?
- AConfidentiality
- BAvailability
- CAuthentication
- DIntegrity
4The “white box testing” methodology enforces what kind of restriction?
- AThe internal operation of a system is only partly accessible to the tester
- BOnly the external operation of a system is accessible to the tester
- COnly the internal operation of a system is known to the tester
- DThe internal operation of a system is completely known to the tester
5It is a vulnerability in GNU’s bash shell, discovered in September of 2014 that gives attackers access to run remote commands on a vulnerable system. The malicious software can take control of an infected machine, launch denial-of-service attacks to disrupt websites, and scan for other vulnerable devices (including routers). Which of the following vulnerabilities is being described?
- ARootshock
- BShellbash
- CShellshock
- DRootshell
6Which mode of IPSec should you use to assure security and confidentiality of data within the same LAN?
- AESP transport mode
- BESP confidential
- C. AH Tunnel mode
- DAH promiscuous
7You have compromised a server on a network and successfully opened a shell. You aimed to identify all operating systems running on the network. However, as you attempt to fingerprint all machines in the network using the nmap syntax below, it is not going through.
invictus@victim_server:~$ nmap -T4 -0 10.10.0.0/24 TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxx. QUITTING! What seems to be wrong?- AThe outgoing TCPXIP fingerprinting is blocked by the host firewall
- BThis is a common behavior for a corrupted nmap application
- COS Scan requires root privileges
- DThe nmap syntax is wrong.
8While performing online banking using a Web browser, a user receives an email that contains a link to an interesting Web site. When the user clicks on the link, another Web browser session starts and displays a video of cats playing a piano. The next business day, the user receives what looks like an email from his bank, indicating that his bank account has been accessed from a foreign country. The email asks the user to call his bank and verify the authorization of a funds transfer that took place. What Web browser-based security vulnerability was exploited to compromise the user?
- ACross-Site Request Forgery
- BCross-Site Scripting
- CClickjacking
- DWeb Form Input Validation
9An attacker gains access to a Web server’s database and displays the contents of the table that holds all of the names, passwords, and other user information. The attacker did this by entering information into the Web site’s user login page that the software’s designers did not expect to be entered. This is an example of what kind of software design problem?
- AInsufficient input validation
- BInsufficient exception handling
- CInsufficient security management
- DInsufficient database hardening
10An Internet Service Provider (ISP) has a need to authenticate users connecting using analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network. Which AAA protocol is most likely able to handle this requirement?
- AKerberos
- BRADIUS
- CTACACS+
- DDIAMETER
11PGP, SSL, and IKE are all examples of which type of cryptography?
- ADigest
- BPublic Key
- CSecret Key
- DHash Algorithm
12You work as a Security Analyst for a retail organization. In securing the company’s network, you set up a firewall and an IDS. However, hackers are able to attack the network. After investigating, you discover that your IDS is not configured properly and therefore is unable to trigger alarms when needed. What type of alert is the IDS giving?
- AFalse Positive
- BTrue Negative
- CTrue Positive
- DFalse Negative
13Nation-state threat actors often discover vulnerabilities and hold on to them until they want to launch a sophisticated attack. The Sutxnet attack was an unprecedented style of attack because it used four types of vulnerability. What is this style of attack called?
- AZero-Hour
- BNo-Day
- CZero-Day
- DZero-Sum
14It is an entity or event with the potential to adversely impact a system through unauthorized access, destruction, disclosure, denial of service or modification of data. Which of the following terms best matches the definition?
- ARisk
- BAttack
- CVulnerability
- DThreat
15env x=`(){ :; };echo exploit` bash -c ‘cat /etc/passwd’ What is the Shellshock bash vulnerability attempting to do on a vulnerable Linux host?
- ARemoves the passwd file
- BAdd new user to the passwd file
- CDisplay passwd content to prompt
- DChanges all passwords in passwd
16A network administrator discovers several unknown files in the root directory of his Linux FTP server. One of the files is a tarball, two are shell script files, and the third is a binary file is named “no.” The FTP server’s access logs show that the anonymous user account logged in to the server, uploaded the files, and extracted the contents of the tarball and ran the script using a function provided by the FTP server’s software. The ps command shows that the no file is running as process, and the netstat command shows the no process is listening on a network port. What kind of vulnerability must be present to make this remote attack possible?
- AFile system permissions
- BDirectory traversal
- CBrute force login
- DPrivilege escalation
17You are performing a penetration test. You achieved access via a buffer overflow exploit and you proceed to find interesting data, such as files with usernames and passwords. You find a hidden folder that has the administrator’s bank account password and login information for the administrator’s bitcoin account. What should you do?
- ADo not report it and continue the penetration test
- BReport immediately to the administrator
- CTransfer money from the administrator’s account to another account
- DDo not transfer the money but steal the bitcoins
18Which of the following tools is used to analyze the files produced by several packet-capture programs such as tcpdump, WinDump, Wireshark, and EtherPeek?
- Atcptraceroute
- BOpenVAS
- CNessus
- Dtcptrace
19Risks = Threats x Vulnerabilities is referred to as the:
- ARisk equation
- BThreat assessment
- C. BIA equation
- DDisaster recovery formula
20It is a regulation that has a set of guidelines, which should be adhered to by anyone who handles any electronic medical data. These guidelines stipulate that all medical practices must ensure that all necessary measures are in place while saving, accessing, and sharing any electronic medical data to keep patient data secure. Which of the following regulations best matches the description?
- AHIPAA
- BISO/IEC 27002
- CFISMA
- DCOBIT
21The purpose of a _____________ is to deny network access to local area networks and other information assets by unauthorized wireless devices.
- AWireless Intrusion Prevention System
- BWireless Access Control List
- CWireless Analyzer
- DWireless Access Point
22You are using NMAP to resolve domain names into IP addresses for a ping sweep later. Which of the following commands looks for IP addresses?
- A>host -t a hackeddomain.com
- B>host -t ns hackeddomain.com
- C>host -t soa hackeddomain.com
- D>host -t AXFR hackeddomain.com
23During a security audit of IT processes, an IS auditor found that there were no documented security procedures. What should the IS auditor do?
- ACreate a procedures document
- BConduct compliance testing
- CTerminate the audit
- DIdentify and evaluate existing practices
24This tool is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the PTW attack, thus making the attack much faster compared to other WEP cracking tools. Which of the following tools is being described?
- AAirguard
- BWLAN-crack
- Cwificracker
- DAircrack-ng
25Which of the following is the successor of SSL?
- AGRE
- BTLS
- CRSA
- DIPSec
26Which method of password cracking takes the most time and effort?
- ARainbow tables
- BBrute force
- CShoulder surfing
- DDictionary attack
27You are the Systems Administrator for a large corporate organization. You need to monitor all network traffic on your local network for suspicious activities and receive notifications when an attack is occurring. Which tool would allow you to accomplish this goal?
- AHost-based IDS
- BFirewall
- CNetwork-based IDS
- DProxy
28Which of the following is the BEST way to defend against network sniffing?
- ARestrict physical access to server rooms hosting critical servers
- BUsing encryption protocols to secure network communications
- CUse static IP address
- DRegister all machines MAC address in a centralized database
29During a recent security assessment, you discover the organization has one Domain Name Server (DNS) in a Demilitarized Zone (DMZ) and a second DNS server on the internal network. What is this type of DNS configuration commonly called?
- ADynDNS
- BSplit DNS
- CDNSSEC
- DDNS Scheme
30You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions. Which command-line utility are you most likely to use?
- ANotepad
- BRelational Database
- CMS Excel
- DGrep
31This asymmetry cipher is based on factoring the product of two large prime numbers. What cipher is described above?
- AMD5
- BSHA
- CRC5
- DRSA
32Which of the following statements is TRUE?
- ASniffers operate on Layer 3 of the OSI model
- BSniffers operate on the Layer 1 of the OSI model
- CSniffers operate on both Layer 2 & Layer 3 of the OSI model
- DSniffers operate on Layer 2 of the OSI model
33An attacker has installed a RAT on a host. The attacker wants to ensure that when a user attempts to go to “www.MyPersonalBankcom”, that the user is directed to a phishing site. Which file does the attacker need to modify?
- ANetworks
- BSudoers
- CHosts
- DBoot.ini
34A company’s security policy states that all Web browsers must automatically delete their HTTP browser cookies upon terminating. What sort of security breach is this policy attempting to mitigate?
- AAttempts by attackers to access the user and password information stored in the company’s SQL database
- BAttempts by attackers to access Web sites that trust the Web browser user by stealing the user’s authentication credentials
- CAttempts by attackers to access passwords stored on the user’s computer without the user’s knowledge
- DAttempts by attackers to determine the user’s Web browser usage patterns, including when sites were visited and for how long
35You are attempting to man-in-the-middle a session. Which protocol will allow you to guess a sequence number?
- AUPX
- BTCP
- CUPD
- DICMP
36When you are collecting information to perform a data analysis, Google commands are very useful to find sensitive information and files. These files may contain information about passwords, system functions, or documentation. What command will help you to search files using Google as a search engine?
- Ainurl: target.com filename:xls username password email
- Bsite: target.com filetype:xls username password email
- Csite: target.com file:xls username password email
- Ddomain: target.com archive:xls username password email
37In 2007, this wireless security algorithm was rendered useless by capturing packets and discovering the passkey in a matter of seconds. This security flaw led to a network invasion of TJ Maxx and data theft through a technique known as war-driving. Which Algorithm is this referring to?
- ATemporal Key Integrity Protocol (TKIP)
- BWi-Fi Protected Access (WPA)
- CWi-Fi Protected Access 2 (WPA2)
- DWired Equivalent Privacy (WEP)
38You’ve gained physical access to a Windows 2008 R2 server which has an accessible disc drive. When you attempt to boot the server and log in, you are unable to guess the password. In your tool kit you have an Ubuntu 9.10 Linux LiveCD. Which Linux based tool has the ability to change any user’s password or to activate disabled Windows accounts?
- ASET
- BCHNTPW
- CJohn the Ripper
- DCain & Abel
39Which of the following is a design pattern based on distinct pieces of software providing application functionality as services to other applications?
- AObject Oriented Architecture
- BLean Coding
- CService Oriented Architecture
- DAgile Process
40What is a “Collision attack” in cryptography?
- ACollision attacks try to get the public key.
- BCollision attacks try to find two inputs producing the same hash.
- CMasquerading
- DCollision attacks try to break the hash into three parts to get the plaintext value.
41Which of the following is an extremely common IDS evasion technique in the web world?
- ASubnetting
- BSpyware
- CPort knocking
- DUnicode characters
42An incident investigator asks to receive a copy of the event logs from all firewalls, proxy servers, and Intrusion Detection Systems (IDS) on the network of an organization that has experienced a possible breach of security. When the investigator attempts to correlate the information in all of the logs, the sequence of many of the logged events do not match up. What is the most likely cause?
- AThe attacker altered or erased events from the logs
- BProper chain of custody was not observed while collecting the logs
- CThe security breach was a false positive
- DThe network devices are not all synchronized
43You have successfully gained access to a Linux server and would like to ensure that the succeeding outgoing traffic from this server will not be caught by a Network Based Intrusion Detection Systems (NIDS). What is the best way to evade the NIDS?
- AProtocol Isolation
- BOut of band signaling
- CAlternate Data Streams
- DEncryption
44The security concept of “separation of duties” is most similar to the operation of which type of security device?
- AIntrusion Detection System
- BHoneypot
- CFirewall
- DBastion host
45The “gray box testing” methodology enforces what kind of restriction?
- AOnly the external operation of a system is accessible to the tester
- BThe internal operation of a system is completely known to the tester
- CThe internal operation of a system is only partly accessible to the tester
- DOnly the internal operation of a system is known to the tester
46What is the benefit of performing an unannounced Penetration Testing?
- AIt is best to catch critical infrastructure unpatched
- BThe tester will have an actual security posture visibility of the target network
- CNetwork security would be in a “best state” posture
- DThe tester could not provide an honest analysis
47Which of the following is designed to identify malicious attempts to penetrate systems?
- AIntrusion Detection System
- BFirewall
- CProxy
- DRouter
48Which of the following statements regarding ethical hacking is incorrect?
- ATesting should be remotely performed offsite
- BEthical hacking should not involve writing to or modifying the target systems
- CEthical hackers should never use tools or methods that have the potential of exploiting vulnerabilities in an organization’s systems
- DAn organization should use ethical hackers who do not sell vendor hardware/software or other consulting services
49You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration?
alert tcp any any -:> 192.168.100.0/24 21 (msg: “FTP on the network!”;)- AAn Intrusion Detection System
- BA router IPTable
- CA firewall IPTable
- DFTP Server rule
50An IT employee got a call from one of our best customers. The caller wanted to know about the company's network infrastructure, systems, and team. New opportunities of integration are in sight for both company and customer. What should this employee do?
- ASince the company's policy is all about Customer Service, he/she will provide information.
- BDisregarding the call, the employee should hang up.
- CThe employee should not provide any information without previous management authorization.
- DThe employees can not provide any information; but, anyway, he/she will provide the name of the person in charge.
51Which type of security feature stops vehicles from crashing through the doors of a building?
- ATurnstile
- BBollards
- CMantrap
- DReceptionist
52........is an attack type for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. It is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hotspot by posing as a legitimate provider. This type of attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there.
Fill in the blank with appropriate choice.- ACollision Attack
- BEvil Twin Attack
- CSinkhole Attack
- DSignal Jamming Attack
53Your next door neighbor, that you do not get along with, is having issues with their network, so he yells to his spouse the network's SSID and password and you hear them both clearly. What do you do with this information?
- ANothing, but suggest to him to change the network's SSID and password.
- BSell his SSID and password to friends that come to your house, so it doesn't slow down your network.
- CLog onto to his network, after all it's his fault that you can get in.
- DOnly use his network when you have large downloads so you don't tax your own network.
Informações
- Descrição
- Quiz sobre Gencer2, criado por Austin Bell em 10-10-2019.
- Autor
- Austin Bell
- Idioma
- English
- Visualizações
- 0
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz