Quiz
Gencer4
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (51)
1You want to do an ICMP scan on a remote computer using hping2. What is the proper syntax?
- Ahping2 -1 host.domain.com
- Bhping2-i host.domain.com
- Chping2 -set-ICMP host.domain.com
- Dhping2 host.domain.com
2If executives are found liable for not properly protecting their company's assets and information systems, what type of law would apply in this situation?
- ACommon
- BCriminal
- CCivil
- DInternational
3The company ABC recently contracted a new accountant. The accountant will be working with the financial statements. Those financial statements need to be approved by the CFO and then they will be sent to the accountant but the CFO is worried because he wants to be sure that the information sent to the accountant was not modified once he approved it. What is the following options can be useful to ensure the integrity of the data?
- AThe CFO can use a hash algorithm in the document once he approved the financial statements
- BThe CFO can use an excel file with a password
- CThe financial statements can be sent twice, one by email and the other delivered in USB and the accountant can compare both to be sure is the same document
- DThe document can be sent to the accountant using an exclusive USB for that document
4What is the way to decide how a packet will move from an untrusted outside host to a protected inside that is behind a firewall, which permits the hacker to determine which ports are open and if the packets can pass through the packet-filtering of the firewall?
- ASession hijacking
- BFirewalking
- CMan-in-the middle attack
- DNetwork sniffing
5What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?
- APassive
- BActive
- CReflective
- DDistributive
6Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drown based on these scan results?
TCP port 21 - no response TCP port 22 - no response
TCP port 23 - Time-to-live exceeded- AThe scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error
- BThe lack of response from ports 21 and 22 indicate that those services are not running on the destination server
- CThe scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall
- DThe firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host
7A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.
Which cryptography attack is the student attempting?- AMan-in-the-middle attack
- BSession hijacking
- CBrute-force attack
- DDictionary-attack
8Bob received this text message on his mobile phone: "Hello, this is Scott Smelby from the Yahoo Bank. Kindly contact me for a vital transaction on: scottsmelby@yahoo.com". Which statement below is true?
- AThis is scam as everybody can get a @yahoo address, not the Yahoo customer service employees.
- BThis is scam because Bob does not know Scott.
- CBob should write to scottmelby@yahoo.com to verify the identity of Scott.
- DThis is probably a legitimate message as it comes from a respectable organization.
9When purchasing a biometric system, one of the considerations that should be reviewed is the processing speed. Which of the following best describes what it is meant by processing?
- AThe amount of time and resources that are necessary to maintain a biometric system
- BHow long it takes to setup individual user accounts
- CThe amount of time it takes to be either accepted or rejected from when an individual provides identification and authentication information
- DThe amount of time it takes to convert biometric data into a template on a smart card
10An attacker with access to the inside network of a small company launches a successful STP manipulation attack. What will he do next?
- AHe will create a SPAN entry on the spoofed root bridge and redirect traffic to his computer.
- BHe will activate OSPF on the spoofed root bridge.
- CHe will repeat this action so that is escalates to a DoS attack.
- DHe will repeat the same attack against all L2 switches of the network.
11Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?
- ASingle sign-on
- BWindows authentication
- CRole Based Access Control (RBAC)
- DDiscretionary Access Control (DAC)
12Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?
- AStealth virus
- BTunneling virus
- CCavity virus
- DPolymorphic virus
13If there is an Intrusion Detection System (IDS) in intranet, which port scanning technique cannot be used?
- ASpoof Scan
- BTCP SYN
- CTCP Connect scan
- DIdle scan
14There are several ways to gain insight on how a cryptosystem works with the goal of reverse engineering the process. A term describes when two pieces of data result in the value is?
- APolymorphism
- BEscrow
- CCollusion
- DCollision
15A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firm's public facing web servers. The engineer decides to start by using netcat to port 80.
The engineer receives this output:
HTTP/1.1 200 OK
Server: Microsoft-IIS/6
Expires: Tue, 17 Jan 2011 01:41:33 GMT
Date: Mon, 16 Jan 2011 01:41:33 GMT
Content-Type: text/html Accept-Ranges: bytes
Last-Modified: Wed, 28 Dec 2010 15:32:21 GMT ETag: "b0aac0542e25c31:89d"
Content-Length: 7369
Which of the following is an example of what the engineer performed?- ACross-site scripting
- BBanner grabbing
- CSQL injection
- DWho is database query
16A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the Prometric Online Testing ?Reports https://ibt1.prometric.com/users/custom/report_queue/rq_str... corporate network. What tool should the analyst use to perform a Blackjacking attack?
- AParos Proxy
- BBBProxy
- CBloover
- DBBCrack
17What attack is used to crack passwords by using a precomputed table of hashed passwords?
- ABrute Force Attack
- BRainbow Table Attack
- CDictionary Attack
- DHybrid Attack
18ShellShock had the potential for an unauthorized user to gain access to a server. It affected many internet- facing services, which OS did it not directly affect?
- AWindows
- BLinux
- COS X
- DUnix
19By using a smart card and pin, you are using a two-factor authentication that satisfies
- ASomething you know and something you are
- BSomething you have and something you know
- CSomething you have and something you are
- DSomething you are and something you remember
20Cryptography is the practice and study of techniques for secure communication in the presence of third parties (called adversaries). More generally, it is about constructing and analyzing protocols that overcome the influence of adversaries and that are related to various aspects in information security such as data confidentially, data integrity, authentication, and non- repudiation. Modern cryptography intersects the disciplines of mathematics, computer science, and electrical engineering. Applications of cryptography include ATM cards, computer passwords, and electronic commerce.
Basic example to understand how cryptography works is given below:
SECURE (plain text)
+1(+1 next letter, for example, the letter ““T”” is used for ““S”” to encrypt.) TFDVSF (encrypted text)
+=logic=> Algorithm 1=Factor=> Key
Look at the following output. What did the hacker accomplish?
(ADD THIS TEXT)
; <<>> DiG 9.7.-P1 <<>> axfr domam.com @192.168.1.105
;; global options: +cmd
domain.com. 3600 IN SOA srv1.domain.com. hostsrv1.domain.com. 131 900 600 86400 3600
domain.com. 600 IN A 192.168.1.102
domain.com. 600 IN A 192.168.1.105 domain.com. 3600 IN NS srv1.domain.com. domain.com. 3600 IN NS srv2.domain.com. vpn.domain.com. 3600 IN A 192.168.1.1
server.domain.com. 3600 IN A 192.168.1.3
office.domain.com. 3600 IN A 192.168.1.4
remote.domain.com. 3600 IN A 192.168. 1.48
support.domain.com. 3600 IN A 192.168.1.47
ns1.domain.com. 3600 IN A 192.168.1.41
ns2.domain.com. 3600 IN A 192.168.1.42
ns3.domain.com. 3600 IN A 192.168.1.34
ns4.domain.com. 3600 IN A 192.168.1.45
srv1.domain.com. 3600 IN A 192.168.1.102
srv2.domain.com. 1200 IN A 192.168.1.105
domain.com. 3600 INSOA srv1.domain.com. hostsrv1.domain.com. 131 900 600 86400 3600
;; Query time: 269 msec
;; SERVER: 192.168.1.105#53(192.168.1.105)
;; WHEN: Sun Aug 11 20:07:59 2013
;; XFR size: 65 records (messages 65, bytes 4501)
Which of the following choices true about cryptography?- AAlgorithm is not the secret; key is the secret.
- BPublic-key cryptography, also known as asymmetric cryptography, public key is for decrypt, private key is for encrypt.
- CSecure Sockets Layer (SSL) use the asymmetric encryption both (public/private key pair) to deliver the shared session key and to achieve a communication way.
- DSymmetric-key algorithms are a class of algorithms for cryptography that use the different cryptographic keys for both encryption of plaintext and decryption of ciphertext.
21What is the difference between the AES and RSA algorithms?
- ABoth are symmetric algorithms, but AES uses 256-bit keys
- BAES is asymmetric, which is used to create a public/private key pair; RSA is symmetric, which is used to encrypt data
- CBoth are asymmetric algorithms, but RSA uses 1024-bit keys
- DRSA is asymmetric, which is used to create a public/private key pair; AES is symmetric, which is used to encrypt data
22You are an Ethical Hacker who is auditing the ABC company. When you verify the NOC one of the machines has 2 connections, one wired and the other wireless. When you verify the configuration of this Windows system you find two static routes.
route add 10.0.0.0 mask 255.0.0.0 10.0.0.1
route add 0.0.0.0 mask 255.0.0.0 199.168.0.1
What is the main purpose of those static routes?- ABoth static routes indicate that the traffic is external with different gateway.
- BThe first static route indicates that the internal traffic will use an external gateway and the second static route indicates that the traffic will be rerouted.
- CBoth static routes indicate that the traffic is internal with different gateway.
- DThe first static route indicates that the internal addresses are using the internal gateway and the second static route indicates that all the traffic that is not internal must go to an external gateway.
23An attacker is using nmap to do a ping sweep and a port scanning in a subnet of 254 addresses. In which order should he perform these steps?
- AThe sequence does not matter. Both steps have to be performed against all hosts.
- BFirst the port scan to identify interesting services and then the ping sweep to find hosts responding to icmp echo requests.
- CFirst the ping sweep to identify live hosts and then the port scan on the live hosts. This way he saves time.
- DThe port scan alone is adequate. This way he saves time.
24Look at the following output. What did the hacker accomplish?
- AThe hacker used who is to gather publicly available records for the domain.
- BThe hacker used the "fierce" tool to brute force the list of available domains.
- CThe hacker listed DNS records on his own domain.
- DThe hacker successfully transferred the zone and enumerated the hosts.
25Which tier in the N-tier application architecture is responsible for moving and processing data between the tiers?
- AApplication Layer
- BData tier
- CPresentation tier
- DLogic tier
26An enterprise recently moved to a new office and the new neighborhood is a little risky. The CEO wants to monitor the physical perimeter and the entrance doors 24 hours. What is the best option to do this job?
- AUse fences in the entrance doors.
- BInstall a CCTV with cameras pointing to the entrance doors and the street.
- CUse an IDS in the entrance doors and install some of them near the corners.
- DUse lights in all the entrance doors and along the company's perimeter.
27Bob learned that his username and password for a popular game has been compromised. He contacts the company and resets all the information. The company suggests he use two-factor authentication; which option below offers that?
- AA fingerprint scanner and his username and password
- BHis username and a stronger password
- CA new username and password
- DDisable his username and use just a fingerprint scanner
28A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?
- APerform a vulnerability scan of the system.
- BDetermine the impact of enabling the audit feature.
- CPerform a cost/benefit analysis of the audit feature.
- DAllocate funds for staffing of audit log review.
29Which of the following Nmap commands will produce the following output?
Output:
Starting Nmap 6.47 (http://nmap.org ) at 2015-05-26 12:50 EDT Nmap scan report for 192.168.1.1 Host is up (0.00042s latency).
Not shown: 65530 open|filtered ports, 65529 filtered ports
PORT STATE SERVICE
111/tcp open rpcbind 999/tcp open garcon
1017/tcp open unknown 1021/tcp open exp1
1023/tcp open netvenuechat 2049/tcp open nfs
17501/tcp open unknown
111/udp open rpcbind 123/udp open ntp
137/udp open netbios-ns 2049/udp open nfs
5353/udp open zeroconf
17501/udp open|filtered unknown
51857/udp open|filtered unknown
54358/udp open|filtered unknown
56228/udp open|filtered unknown
57598/udp open|filtered unknown
59488/udp open|filtered unknown
60027/udp open|filtered unknown- Anmap –sT –sX -Pn -p 1-65535 192.168.1.1
- Bnmap -sN -Ps -T4 192.168.1.1
- Cnmap -sS -sU -Pn -p 1-65535 192.168.1.1
- Dnmap -sS -Pn 192.168.1.1
30As an Ethical Hacker you are capturing traffic from your customer network with Wireshark and you need to find and verify just SMTP traffic. What command in Wireshark will help you to find this kind of traffic?
- Arequest smtp 25
- Btcp.port eq 25
- Csmtp port
- Dtcp.contains port 25
31Which of the following programs is usually targeted at Microsoft Office products?
- APolymorphic virus
- BMultipart virus
- CMacro virus
- DStealth virus
32What is correct about digital signatures?
- AA digital signature cannot be moved from one signed document to another because it is the hash of the original document encrypted with the private key of the signing party.
- BDigital signatures may be used in different documents of the same type.
- CA digital signature cannot be moved from one signed document to another because it is a plain hash of the document content.
- DDigital signatures are issued once for each user and can be used everywhere until they expire.
33Which of the following programming languages is most susceptible to buffer overflow attacks, due to its lack of a built-in-bounds checking mechanism? Code: #include <string.h> int main(){
char buffer[8];
strcpy(buffer, ""11111111111111111111111111111"");
}
Output:
Segmentation fault- AC#
- BPython
- CJava
- DC++
34Victim opens the attacker's web site.
Attacker sets up a web site which contains interesting and attractive content like 'Do you want to make $1000 in a day?'.
Victim clicks to the interesting and attractive content url.
Attacker creates a transparent 'iframe' in front of the url which victim attempt to click, so victim thinks that he/she clicks to the 'Do you want to make $1000 in a day?' url but actually he/she clicks to the content or url that exists in the transparent 'iframe' which is setup by the attacker. What is the name of the attack which is mentioned in the scenario?- ASession Fixation
- BHTML Injection
- CHTTP Parameter Pollution
- DClickjacking Attack
35John the Ripper is a technical assessment tool used to test the weakness of which of the following?
- AUsernames
- BFile permissions
- CFirewall rulesets
- DPasswords
36A tester has been hired to do a web application security test. The tester notices that the site is dynamic and must make use of a back end database. In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to attempt breaking a valid SQL request?
- ASemicolon
- BSingle quote
- CExclamation mark
- DDouble quote
37A large mobile telephony and data network operator has a data that houses network elements. These are essentially large computers running on Linux. The perimeter of the data center is secured with firewalls and IPS systems. What is the best security policy concerning this setup?
- ANetwork elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.
- BAs long as the physical access to the network elements is restricted, there is no need for additional measures.
- CThere is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.
- DThe operator knows that attacks and down time are inevitable and should have a backup site.
38A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?
- AFirewall-management policy
- BAcceptable-use policy
- CRemote-access policy
- DPermissive policy
39Which of the following areas is considered a strength of symmetric key cryptography when compared with asymmetric algorithms?
- AScalability
- BSpeed
- CKey distribution
- DSecurity
40Trinity needs to scan all hosts on a /16 network for TCP port 445 only. What is the fastest way she can accomplish this with Nmap? Stealth is not a concern.
- Anmap –p 445 -n -T4 -open 10.1.0.0/16
- Bnmap -p 445 -max -Pn 10.1.0.0/16
- Cnmap -sn -sF 10.1.0.0/16 445
- Dnmap -s 445 -sU -T5 10.1.0.0/16
41Which of the following can the administrator do to verify that a tape backup can be recovered in its entirety?
- ARead the first 512 bytes of the tape
- BPerform a full restore
- CRead the last 512 bytes of the tape
- DRestore a random file
42OpenSSL on Linux servers includes a command line tool for testing TLS. What is the name of the tool and the correct syntax to connect to a web server?
- Aopenssl s_client -site www.website.com:443
- Bopenssl_client -site www.website.com:443
- Copenssl_client -connect www.website.com:443
- Dopenssl s_client -connect www.website.com:443
43Gavin owns a white-hat firm and is performing a website security audit for one of his clients. He begins by running a scan which looks for common misconfigurations and outdated software versions. Which of the following tools is he most likely using?
- AArmitage
- BNikto
- CMetasploit
- DNmap
44A well-intentioned researcher discovers a vulnerability on the web site of a major corporation. What should he do?
- AIgnore it.
- BTry to sell the information to a well-paying party on the dark web.
- CNotify the web site owner so that corrective action be taken as soon as possible to patch the vulnerability.
- DExploit the vulnerability without harming the web site owner so that attention be drawn to the problem.
45In both pharming and phishing attacks an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims. What is the difference between pharming and phishing attacks?
- AIn a pharming attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a phishing attack an attacker provides the victim with a URL that is either misspelled or looks similar to the actual websites domain name.
- BBoth pharming and phishing attacks are purely technical and are not considered forms of social engineering.
- CBoth pharming and phishing attacks are identical.
- DIn a phishing attack a victim is redirected to a fake website by modifying their host configuration file or by exploiting vulnerabilities in DNS. In a pharming attack an attacker provides the victim with a URL that is either misspelled or looks very similar to the actual websites domain name.
46Which of these is capable of searching for and locating rogue access points?
- AHIDS
- BWISS
- CWIPS
- DNIDS
47Sophia travels a lot and worries that her laptop containing confidential documents might be stolen. What is the best protection that will work for her?
- APassword protected files
- BHidden folders
- CBIOS password
- DFull disk encryption.
48The network in ABC company is using the network address 192.168.1.64 with mask 255.255.255.192. In the network the servers are in the addresses 192.168.1.122, 192.168.1.123 and 192.168.1.124. An attacker is trying to find those servers but he cannot see them in his scanning. The command he is using is: nmap 192.168.1.64/28.
Why he cannot see the servers?- AThe network must be down and the nmap command and IP address are ok.
- BHe needs to add the command ''''ip address'''' just before the IP address.
- CHe is scanning from 192.168.1.64 to 192.168.1.78 because of the mask /28 and the servers are not in that range.
- DHe needs to change the address to 192.168.1.0 with the same mask.
49Rebecca commonly sees an error on her Windows system that states that a Data Execution Prevention (DEP) error has taken place. Which of the following is most likely taking place?
- AA race condition is being exploited, and the operating system is containing the malicious process.
- BA page fault is occurring, which forces the operating system to write data from the hard drive.
- CMalware is executing in either ROM or a cache memory area.
- DMalicious code is attempting to execute instruction in a non-executable memory region.
50Attempting an injection attack on a web server based on responses to True/False questions is called which of the following?
- ABlind SQLi
- BDMS-specific SQLi
- CClassic SQLi
- DCompound SQLi
51Which of the following is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet.
- AHeartbleed Bug
- BPOODLE
- CSSL/TLS Renegotiation Vulnerability
- DShellshock
Information
- Description
- Quiz on Gencer4, created by Austin Bell on 10/10/2019.
- Author
- Austin Bell
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz