Quiz
Sem título
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (51)
1A network security administrator is worried about potential man-in-the-middle attacks when users access a
corporate web site from their workstations. Which of the following is the best remediation against this type of
attack?- AImplementing server-side PKI certificates for all connections
- BMandating only client-side PKI certificates for all connections
- CRequiring client and server PKI certificates for all connections
- DRequiring strong authentication for all DNS queries
2Bluetooth uses which digital modulation technique to exchange information between paired devices?
- APSK (phase-shift keying)
- BFSK (frequency-shift keying)
- CASK (amplitude-shift keying)
- DQAM (quadrature amplitude modulation)
3A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti-virus
and E-mail gateway. This approach can be used to mitigate which kind of attack?- AForensic attack
- BARP spoofing attack
- CSocial engineering attack
- DScanning attack
4A security policy will be more accepted by employees if it is consistent and has the support of
- Acoworkers.
- Bexecutive management.
- Cthe security officer.
- Da supervisor.
5There is a WEP encrypted wireless access point (AP) with no clients connected. In order to crack the WEP key,
a fake authentication needs to be performed. What information is needed when performing fake authentication
to an AP? (Choose two.)- AThe IP address of the AP
- BThe MAC address of the AP
- CThe SSID of the wireless network
- DA failed authentication packet
6What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the
received response?- APassive
- BReflective
- CActive
- DDistributive
7How do employers protect assets with security policies pertaining to employee surveillance activities?
- AEmployers promote monitoring activities of employees as long as the employees demonstrate
trustworthiness - BEmployers use informal verbal communication channels to explain employee monitoring activities to
employees - CEmployers use network surveillance to monitor employee email traffic, network access, and to record
employee keystrokes - DEmployers provide employees written statements that clearly discuss the boundaries of monitoring activities
and consequences.
- AEmployers promote monitoring activities of employees as long as the employees demonstrate
8When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router
was accessed from the administrator's computer to update the router configuration.
What type of an alert is this?- AFalse positive
- BFalse negative
- CTrue positve
- DTrue negative
9Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and
that a certificate is still valid for specific operations?- ACertificate issuance
- BCertificate validation
- CCertificate cryptography
- DCertificate revocation
10What is the correct PCAP filter to capture all TCP traffic going to or from host 192.168.0.125 on port 25?
- Atcp.src == 25 and ip.host == 192.168.0.125
- Bhost 192.168.0.125:25
- Cport 25 and host 192.168.0.125
- Dtcp.port == 25 and ip.host == 192.168.0.125
11When creating a security program, which approach would be used if senior management is supporting and
enforcing the security policy?- AA bottom-up approach
- BA top-down approach
- CA senior creation approach
- DAn IT assurance approach
12Which element of Public Key Infrastructure (PKI) verifies the applicant?
- ACertificate authority
- BValidation authority
- CRegistration authority
- DVerification authority
13Which Open Web Application Security Project (OWASP) implements a web application full of known
vulnerabilities?- AWebBugs
- BWebGoat
- CVULN_HTML
- DWebScarab
14A hacker is attempting to use nslookup to query Domain Name Service (DNS). The hacker uses the nslookup
interactive mode for the search. Which command should the hacker type into the command shell to request the
appropriate records?- ALocate type=ns
- BRequest type=ns
- CSet type=ns
- DTransfer type=ns
15After gaining access to the password hashes used to protect access to a web based application, knowledge of
which cryptographic algorithms would be useful to gain access to the application?- ASHA1
- BDiffie-Helman
- CRSA
- DAES
16To send a PGP encrypted message, which piece of information from the recipient must the sender have before
encrypting the message?- ARecipient's private key
- BRecipient's public key
- CMaster encryption key
- DSender's public key
17Which of the following items is unique to the N-tier architecture method of designing software applications?
- AApplication layers can be separated, allowing each layer to be upgraded independently from other layers.
- BIt is compatible with various databases including Access, Oracle, and SQL.
- CData security is tied into each layer and must be updated for all layers when any upgrade is performed.
- DApplication layers can be written in C, ASP.NET, or Delphi without any performance loss.
18To reduce the attack surface of a system, administrators should perform which of the following processes to
remove unnecessary software, services, and insecure configuration settings?- AHarvesting
- BWindowing
- CHardening
- DStealthing
19While conducting a penetration test, the tester determines that there is a firewall between the tester's machine
and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the
OSI model. Which type of firewall is the tester trying to traverse?- APacket filtering firewall
- BApplication-level firewall
- CCircuit-level gateway firewall
- DStateful multilayer inspection firewall
20Which type of scan is used on the eye to measure the layer of blood vessels?
- AFacial recognition scan
- BRetinal scan
- CIris scan
- DSignature kinetics scan
21A security analyst in an insurance company is assigned to test a new web application that will be used by clients
to help them choose and apply for an insurance plan. The analyst discovers that the application is developed in
ASP scripting language and it uses MSSQL as a database backend. The analyst locates the application's
search form and introduces the following code in the search input fielD.
IMG SRC=vbscript:msgbox("Vulnerable");> originalAttribute="SRC" originalPath="vbscript:msgbox
("Vulnerable");>"
When the analyst submits the form, the browser returns a pop-up window that says "Vulnerable".
Which web applications vulnerability did the analyst discover?- ACross-site request forgery
- BCommand injection
- CCross-site scripting
- DSQL injection
22International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by
outlining- Aguidelines and practices for security controls
- Bfinancial soundness and business viability metrics
- Cstandard best practice for configuration management
- Dcontract agreement writing standards.
23Which solution can be used to emulate computer services, such as mail and ftp, and to capture information
related to logins or actions?- AFirewall
- BHoneypot
- CCore server
- DLayer 4 switch
24The following is part of a log file taken from the machine on the network with the IP address of 192.168.1.106:
Time:Mar 13 17:30:15 Port:20 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:17 Port:21 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:19 Port:22 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:21 Port:23 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:22 Port:25 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:23 Port:80 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:30 Port:443 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
What type of activity has been logged?- APort scan targeting 192.168.1.103
- BTeardrop attack targeting 192.168.1.106
- CDenial of service attack targeting 192.168.1.103
- DPort scan targeting 192.168.1.106
25Which type of intrusion detection system can monitor and alert on attacks, but cannot stop them?
- ADetective
- BPassive
- CIntuitive
- DReactive
26Which of the following settings enables Nessus to detect when it is sending too many packets and the network
pipe is approaching capacity?- ANetstat WMI Scan
- BSilent Dependencies
- CConsider unscanned ports as closed
- DReduce parallel connections on congestion
27Diffie-Hellman (DH) groups determine the strength of the key used in the key exchange process. Which of the
following is the correct bit size of the Diffie-Hellman (DH) group 5?- A768 bit key
- B1025 bit key
- C1536 bit key
- D2048 bit key
28One advantage of an application-level firewall is the ability to
- Afilter packets at the network level.
- Bfilter specific commands, such as http:post.
- Cretain state information for each packet.
- Dmonitor tcp handshaking.
29A certified ethical hacker (CEH) completed a penetration test of the main headquarters of a company almost
two months ago, but has yet to get paid. The customer is suffering from financial problems, and the CEH is
worried that the company will go out of business and end up not paying. What actions should the CEH take?- AThreaten to publish the penetration test results if not paid
- BFollow proper legal procedures against the company to request payment
- CTell other customers of the financial problems with payments from this company
- DExploit some of the vulnerabilities found on the company webserver to deface it.
30If a tester is attempting to ping a target that exists but receives no response or a response that states the
destination is unreachable, ICMP may be disabled and the network may be using TCP. Which other option
could the tester use to get a response from a host using TCP?- AHping
- BTraceroute
- CTCP ping
- DBroadcast ping
31How can rainbow tables be defeated?
- APassword salting
- BUse of non-dictionary words
- CAll uppercase character passwords
- DLockout accounts under brute force password cracking attempts
32developer for a company is tasked with creating a program that will allow customers to update their billing and
shipping information. The billing address field used is limited to 50 characters. What pseudo code would the
developer use to avoid a buffer overflow attack on the billing address field?- Aif (billingAddress = 50) {update field} else exit
- Bif (billingAddress != 50) {update field} else exit
- Cif (billingAddress >= 50) {update field} else exit
- Dif (billingAddress <= 50) {update field} else exit
33If the final set of security controls does not eliminate all risk in a system, what could be done next?
- AContinue to apply controls until there is zero risk.
- BIgnore any remaining risk.
- CIf the residual risk is low enough, it can be accepted
- DRemove current controls since they are not completely effective
34In keeping with the best practices of layered security, where are the best places to place intrusion detection/
intrusion prevention systems? (Choose two.)- AHID/HIP (Host-based Intrusion Detection/Host-based Intrusion Prevention)
- BNID/NIP (Node-based Intrusion Detection/Node-based Intrusion Prevention)
- CNID/NIP (Network-based Intrusion Detection/Network-based Intrusion Prevention)
- DCID/CIP (Computer-based Intrusion Detection/Computer-based Intrusion Prevention)
35What is one thing a tester can do to ensure that the software is trusted and is not changing or tampering with
critical data on the back end of a system it is loaded on?- AProper testing
- BSecure coding principles
- CSystems security and architecture review
- DAnalysis of interrupts within the software
36Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI). What
must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust
one another and each private PKI can validate digital certificates from the other company?- APoly key exchange
- BCross certification
- CPoly key reference
- DCross-site exchange
37What is the best defense against privilege escalation vulnerability?
- APatch systems regularly and upgrade interactive login privileges at the system administrator level
- BRun administrator and applications on least privileges and use a content registry for tracking
- CRun services with least privileged accounts and implement multi-factor authentication and authorization.
- DReview user roles and administrator privileges for maximum utilization of automation services.
38Fingerprinting VPN firewalls is possible with which of the following tools?
- AAngry IP
- BNikto
- CIke-scan
- DArp-scan
39A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which
technique will help protect against enumeration?- AReject all invalid email received via SMTP.
- BAllow full DNS zone transfers.
- CRemove A records for internal hosts.
- DEnable null session pipes.
40Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)?
- ACSIRT provides an incident response service to enable a reliable and trusted single point of contact for
reporting computer security incidents worldwide - BCSIRT provides a computer security surveillance service to supply a government with important intelligence
information on individuals travelling abroad. - CCSIRT provides a penetration testing service to support exception reporting on incidents worldwide by
individuals and multi-national corporations - DCSIRT provides a vulnerability assessment service to assist law enforcement agencies with profiling an
individual's property or company's asset.
- ACSIRT provides an incident response service to enable a reliable and trusted single point of contact for
41Which of the following is a client-server tool utilized to evade firewall inspection?
- Atcp-over-dns
- Bkismet
- Cnikto
- Dhping
42Which of the following is a symmetric cryptographic standard?
- ADSA
- BPKI
- CRSA
- D3DES
43Which of the following cryptography attack methods is usually performed without the use of a computer?
- ACiphertext-only attack
- BChosen key attack
- CRubber hose attack
- DRainbow table attack
44What technique is used to perform a Connection Stream Parameter Pollution (CSPP) attack?
- AInjecting parameters into a connection string using semicolons as a separator
- BInserting malicious Javascript code into input parameters
- CSetting a user's session identifier (SID) to an explicit known value
- DAdding multiple parameters with the same name in HTTP requests
45Which of the following open source tools would be the best choice to scan a network for potential targets?
- ANMAP
- BNIKTO
- CCAIN
- DJohn the Ripper
46Which of the following levels of algorithms does Public Key Infrastructure (PKI) use?
- ARSA 1024 bit strength
- BAES 1024 bit strength
- CRSA 512 bit strength
- DAES 512 bit strength
47Which cipher encrypts the plain text digit (bit or byte) one by one?
- AClassical cipher
- BBlock cipher
- CModern cipher
- DStream cipher
48WPA2 uses AES for wireless data encryption at which of the following encryption levels?
- A64 bit and CCMP
- B128 bit and CRC
- C128 bit and CCMP
- D128 bit and TKIP
49Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/IP
specifications?- APing of death
- BSYN flooding
- CTCP hijacking
- DSmurf attack
50Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the
chosen service call interruptions when they are being run?- ACavity virus
- BPolymorphic virus
- CTunneling virus
- DStealth virus
51The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web
applications by providing which one of the following services?- AAn extensible security framework named COBIT
- BA list of flaws and how to fix them
- CWeb application patches
- DA security certification for hardened web applications
Informações
- Descrição
- Quiz sobre Sem título, criado por fz_hanbali em 10-09-2015.
- Autor
- fz_hanbali
- Idioma
- English
- Visualizações
- 4
- Avaliação
- Ainda sem avaliações Avalie este quiz