Quiz
Gencer6
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (56)
1What is the purpose of a demilitarized zone on a network?
- ATo scan all traffic coming through the DMZ to the internal network
- BTo only provide direct access to the nodes within the DMZ and protect the network behind it
- CTo provide a place to put the honeypot
- DTo contain the network devices you wish to protect
2You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture in terms of server placement?
- AAll three servers need to be placed internally
- BA web server facing the Internet, an application server on the internal network, a database server on the internal network
- CA web server and the database server facing the Internet, an application server on the internal network
- DAll three servers need to face the Internet so that they can communicate between themselves
3The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host 10.0.0.3. He also needs to permit all FTP traffic to the rest of the network and deny all other traffic. After he applied his ACL configuration in the router, nobody can access to the ftp, and the permitted hosts cannot access the Internet. According to the next configuration, what is happening in the network?
access- list 102 deny tcp any any
access-list 104 permit udp host 10 .0. 0 . 3 any
access- list 110 permit tcp host 10 .0 .0 .2 eq www any
access- list 108 permit tcp any eq ftp any- AThe ACL 104 needs to be first because is UDP
- BThe ACL 110 needs to be changed to port 80
- CThe ACL for FTP must be before the ACL 110
- DThe first ACL is denying all TCP traffic and the other ACLs are being ignored by the router
4When conducting a penetration test, it is crucial to use all means to get all available information about the target network. One of the ways to do that is by sniffing the network. Which of the following cannot be performed by the passive network sniffing?
- AIdentifying operating systems, services, protocols and devices
- BModifying and replaying captured network traffic
- CCollecting unencrypted information about usernames and passwords
- DCapturing a network traffic for further analysis
5Insecure direct object reference is a type of vulnerability where the application does not verify if the user is authorized to access the internal object via its name or key. Suppose a malicious user Rob tries to get access to the account of a benign user Ned. Which of the following requests best illustrates an attempt to exploit an insecure direct object reference vulnerability?
- A“GET/restricted/goldtransfer?to=Rob&from=1 or 1=1’ HTTP/1.1Host: westbank.com”
- B“GET/restricted/accounts/?name=Ned HTTP/1.1 Host: westbank.com”
- C“GET/restricted/bank.getaccount(‘Ned’) HTTP/1.1 Host: westbank.com”
- D“GET/restricted/\r\n\%00account%00Ned%00access HTTP/1.1 Host: westbank.com”
6Which tool allows analysts and pen testers to examine links between data using graphs and link analysis?
- AMetasploit
- BCain & Abel
- CMaltego
- DWireshark
7Which of these is capable of searching for and locating rogue access points?
- AHIDS
- BNIDS
- CWISS
- DWIPS
8A hacker is an intelligent individual with excellent computer skills and the ability to explore a computer’s software and hardware without the owner’s permission. Their intention can either be to simply gain knowledge or to illegally make changes. Which of the following class of hacker refers to an individual who works both offensively and defensively at various times?
- AWhite Hat
- BSuicide Hacker
- CGray Hat
- DBlack Hat
9Websites and web portals that provide web services commonly use the Simple Object Access Protocol (SOAP). Which of the following is an incorrect definition or characteristics of the protocol?
- ABased on XML
- BOnly compatible with the application protocol HTTP
- CExchanges data between web services
- DProvides a structured model for messaging
10What type of vulnerability/attack is it when the malicious person forces the user’s browser to send an authenticated request to a server?
- ACross-site request forgery
- BCross-site scripting
- CSession hijacking
- DServer side request forgery
11From the following table, identify the wrong answer in terms of Range (ft).
Standard|Range(ft)
802.11a|150-150
802.11b|150-150
802.11g|150-150
802.11(WiMAx)|30 Miles- A802.11b
- B802.11g
- C802.16(WiMax)
- D802.11a
12What would you enter, if you wanted to perform a stealth scan using Nmap?
- Anmap -sU
- Bnmap -sS
- Cnmap -sM
- Dnmap -sT
13You are doing an internal security audit and intend to find out what ports are open on all the servers. What is the best way to find out?
- AScan servers with Nmap
- BScan servers with MBSA
- CTelnet to every port on each server
- DPhysically go to each server
14Steve, a scientist who works in a governmental security agency, developed a technological solution to identify people based on walking patterns and implemented this approach to a physical control access.
A camera captures people walking and identifies the individuals using Steve’s approach.
After that, people must approximate their RFID badges. Both the identifications are required to open the door.
In this case, we can say:- AAlthough the approach has two phases, it actually implements just one authentication factor
- BThe solution implements the two authentication factors: physical object and physical characteristic
- CThe solution will have a high level of false positives
- DBiological motion cannot be used to identify people
15Which Intrusion Detection System is the best applicable for large environments where critical assets on the network need extra security and is ideal for observing sensitive network segments?
- AHoneypots
- BFirewalls
- CNetwork-based intrusion detection system (NIDS)
- DHost-based intrusion detection system (HIDS)
16Which of the following is a serious vulnerability in the popular OpenSSL cryptographic software library? This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet.
- ASSL/TLS Renegotiation Vulnerability
- BShellshock
- CHeartbleed Bug
- DPOODLE
17Which protocol is used for setting up secure channels between two devices, typically in VPNs?
- APPP
- BIPSEC
- CPEM
- DSET
18Which of the following Secure Hashing Algorithm (SHA) produces a 160-bit digest from a message with a maximum length of (264-1) bits and resembles the MD5 algorithm?
- ASHA-2
- BSHA-3
- CSHA-1
- DSHA-0
19When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?
- AAt least twice a year or after any significant upgrade or modification
- BAt least once a year and after any significant upgrade or modification
- CAt least twice every two years and after any significant upgrade or modification
- DAt least once every two years and after any significant upgrade or modification
20If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which tool could the tester use to get a response from a host using TCP?
- ATraceroute
- BHping
- CTCP ping
- DBroadcast ping
21Bob, your senior colleague, has sent you a mail regarding aa deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days, Bob denies that he had ever sent a mail. What do you want to “know” to prove yourself that it was Bob who had send a mail?
- AConfidentiality
- BIntegrity
- CNon-Repudiation
- DAuthentication
22What is attempting an injection attack on a web server based on responses to True/False questions called?
- ADMS-specific SQLi
- BCompound SQLi
- CBlind SQLi
- DClassic SQLi
23The establishment of a TCP connection involves a negotiation called three-way handshake. What type of message does the client send to the server in order to begin this negotiation?
- AACK
- BSYN
- CRST
- DSYN-ACK
24You need a tool that can do network intrusion prevention and intrusion detection, function as a network sniffer, and record network activity. What tool would you most likely select?
- ASnort
- BNmap
- CCain & Abel
- DNessus
25Which of the following will perform an Xmas scan using NMAP?
- Anmap -sA 192.168.1.254
- Bnmap -sP 192.168.1.254
- Cnmap -sX 192.168.1.254
- Dnmap -sV 192.168.1.254
26Code injection is a form of attack in which a malicious user:
- AInserts text into a data field that gets interpreted as code
- BGets the server to execute arbitrary code using a buffer overflow
- CInserts additional code into the JavaScript running in the browser
- DGains access to the codebase on the server and inserts new code
27The collection of potentially actionable, overt, and publicly available information is known as
- AOpen-source intelligence
- BHuman intelligence
- CSocial intelligence
- DReal intelligence
28Which one of the following Google advanced search operators allows an attacker to restrict the results to those websites in the given domain?
- A[cache:]
- B[site:]
- C[inurl:]
- D[link:]
29Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?
- AData-driven firewall
- BStateful firewall
- CPacket firewall
- DWeb application firewall
30In which of the following cryptography attack methods, the attacker makes a series of interactive queries, choosing subsequent plaintexts based on the information from the previous encryptions?
- AChosen-plaintext attack
- BCiphertext-only attack
- CAdaptive chosen-plaintext attack
- DKnown-plaintext attack
31Which of the following attacks exploits web age vulnerabilities that allow an attacker to force an unsuspecting user’s browser to send malicious requests they did not intend?
- ACommand Injection Attacks
- BFile Injection Attack
- CCross-Site Request Forgery (CSRF)
- DHidden Field Manipulation Attack
32Which is the first step followed by Vulnerability Scanners for scanning a network?
- ATCP/UDP Port scanning
- BFirewall detection
- COS Detection
- DChecking if the remote host is alive
33Shellshock allowed an unauthorized user to gain access to a server. It affected many Internet-facing services, which OS did it not directly affect?
- ALinux
- BUnix
- COS X
- DWindows
34Alice encrypts her data using her public key PK and stores the encrypted data in the cloud. Which of the following attack scenarios will compromise the privacy of her data?
- ANone of these scenarios compromise the privacy of Alice’s data
- BAgent Andrew subpoenas Alice, forcing her to reveal her private key. However, the cloud server successfully resists Andrew’s attempt to access the stored data
- CHacker Harry breaks into the cloud server and steals the encrypted data
- DAlice also stores her private key in the cloud, and Harry breaks into the cloud server as before
35A hacker named Jack is trying to compromise a bank’s computer system. He needs to know the operating system of that computer to launch further attacks. What process would help him?
- ABanner Grabbing
- BIDLE/IPID Scanning
- CSSDP Scanning
- DUDP Scanning
36What two conditions must a digital signature meet?
- AHas to be legible and neat.
- BHas to be unforgeable, and has to be authentic.
- CMust be unique and have special characters
- DHas to be the same number of characters as a physical signature and must be unique.
37Bob, a network administrator at BigUniversity, realized that some students are connecting their notebooks in the wired network to have Internet access. In the university campus, there are many Ethernet ports available for professors and authorized visitors but not for students. He identified this when the IDS alerted for malware activities in the network. What should Bob do to avoid this problem?
- ADisable unused ports in the switches
- BSeparate students in a different VLAN
- CUse the 802.1x protocol
- DAsk students to use the wireless network
38Which of the following Bluetooth hacking techniques does an attacker use to send messages to users without the recipient’s consent, similar to email spamming?
- ABluesmacking
- BBluesniffing
- CBluesnarfing
- DBluejacking
39Which of the following program infects the system boot sector and the executable files at the same time?
- AStealth virus
- BPolymorphic virus
- CMacro virus
- DMultipartite Virus
40You are a Penetration Tester and are assigned to scan a server. You need to use a scanning technique wherein the TCP Header is split into many packets so that it becomes difficult to detect what the packets are meant for.
Which of the below scanning technique will you use?- AACK flag scanning
- BTCP Scanning
- CIP Fragment Scanning
- DInverse TCP flag scanning
41An IT employee got a call from one of our best customers. The caller wanted to know about the company's network infrastructure, systems, and team. New opportunities of integration are in sight for both company and customer. What should this employee do?
- AThe employees cannot provide any information; but, anyway, he/she will provide the name of the person in charge.
- BSince the company's policy is all about Customer Service, he/she will provide information.
- CDisregarding the call, the employee should hang up.
- DThe employee should not provide any information without previous management authorization.
42You perform a scan of your company’s network and discover that TCP port 123 is open. What services by default run on TCP port 123?
- ATelnet
- BPOP3
- CNetwork Time Protocol
- DDNS
43Based on the below log, which of the following sentences are true?
Mar 1, 2016, 7:33:28 AM 10.240.250.23 – 54373 10.249.253.15 – 22 tcp_ip- ASSH communications are encrypted it’s impossible to know who is the client or the server
- BApplication is FTP and 10.240.250.23 is the client and 10.249.253.15 is the server
- CApplication is SSH and 10.240.250.23 is the client and 10.249.253.15 is the server
- DApplication is SSH and 10.240.250.23 is the server and 10.249.253.15 is the server
44You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best nmap command you will use?
- Anmap -T4 -q 10.10.0.0/24
- Bnmap -T4 -F 10.10.0.0/24
- Cnmap -T4 -r 10.10.1.0/24
- Dnmap -T4 -O 10.10.0.0/24
45........is an attack type for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. It is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hotspot by posing as a legitimate provider. This type of attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there. Fill in the blank with appropriate choice.
- AEvil Twin Attack
- BSinkhole Attack
- CCollision Attack
- DSignal Jamming Attack
46DNS cache snooping is a process of determining if the specified resource address is present in the DNS cache records. It may be useful during the examination of the network to determine what software update resources are used, thus discovering what software is installed. What command is used to determine if the entry is present in DNS cache?
- Anslookup -fullrecursive update.antivirus.com
- Bdnsnooping –rt update.antivirus.com
- Cnslookup -norecursive update.antivirus.com
- Ddns --snoop update.antivirus.com
47You are working as a Security Analyst in a company XYZ that owns the whole subnet range of 23.0.0.0/8 and 192.168.0.0/8. While monitoring the data, you find a high number of outbound connections. You see that IP’s owned by XYZ (Internal) and private IP’s are communicating to a Single Public IP. Therefore, the Internal IP’s are sending data to the Public IP. After further analysis, you find out that this Public IP is a blacklisted IP, and the internal communicating devices are compromised. What kind of attack does the above scenario depict?
- ABotnet Attack
- BSpear Phishing Attack
- CAdvanced Persistent Threats
- DRootkit Attack
48Which of the following is an adaptive SQL Injection testing technique used to discover coding errors by inputting massive amounts of random data and observing the changes in the output?
- AFunction Testing
- BDynamic Testing
- CStatic Testing
- DFuzzing Testing
49Some clients of TPNQM SA were redirected to a malicious site when they tried to access the TPNQM main site. Bob, a system administrator at TPNQM SA, found that they were victims of DNS Cache Poisoning. What should Bob recommend to deal with such a threat?
- AThe use of security agents in clients’ computers
- BThe use of DNSSEC
- CThe use of double-factor authentication
- DClient awareness
50In which of the following password protection technique, random strings of characters are added to the password before calculating their hashes?
- AKeyed Hashing
- BKey Stretching
- CSalting
- DDouble Hashing
51Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?
- A–T0
- B–T5
- C-O
- D-A
52Which of the following provides a security professional with most information about the system’s security posture?
- AWardriving, warchalking, social engineering
- BSocial engineering, company site browsing, tailgating
- CPhishing, spamming, sending trojans
- DPort scanning, banner grabbing, service identification
53What is the most common method to exploit the “Bash Bug” or “ShellShock" vulnerability?
- AManipulate format strings in text fields
- BSSH
- CSYN Flood
- DThrough Web servers utilizing CGI (Common Gateway Interface) to send a malformed environment variable to a vulnerable Web server
54What term describes the amount of risk that remains after the vulnerabilities are classified and the countermeasures have been deployed?
- ADeferred risk
- BImpact risk
- CInherent risk
- DResidual risk
55A hacker has managed to gain access to a Linux host and stolen the password file from /etc/passwd. How can he use it?
- AThe file reveals the passwords to the root user only.
- BThe password file does not contain the passwords themselves.
- CHe cannot read it because it is encrypted.
- DHe can open it and read the user ids and corresponding passwords.
56A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24. Which of the following has occurred?
- AThe computer is not using a private IP address.
- BThe gateway is not routing to a public IP address.
- CThe gateway and the computer are not on the same network.
- DThe computer is using an invalid IP address.
Informações
- Descrição
- Quiz sobre Gencer6, criado por Austin Bell em 10-10-2019.
- Autor
- Austin Bell
- Idioma
- English
- Visualizações
- 0
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz