Quiz
Gencer5
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (51)
1Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397-1872883824- 861252104-501. What needs to happen before Matthew has full administrator access?
- AHe needs to gain physical access.
- BHe must perform privilege escalation.
- CHe already has admin privileges, as shown by the "501" at the end of the SID.
- DHe needs to disable antivirus protection.
2Elliot is in the process of exploiting a web application that uses SQL as a back-end database. He is determined that the application is vulnerable to SQL injection and has introduced conditional timing delays into injected queries to determine whether they are successful. What type of SQL injection is Elliot most likely performing?
- ANoSQL injection
- BBlind SQL injection
- CUnion-based SQL injection
- DError-based SQL injection
3You have successfully logged on a Linux system. You want to now cover your track. Your login attempt may be logged on several files located in /var/log. Which file does NOT belong to the list:
- Awtmp
- Buser.log
- Cbtmp
- Dauth.log
4Log monitoring tools performing behavioral analysis have alerted several suspicious logins on a Linux server occuring during non-business hours. After further examination of all login activities, it is notices that none of the logins have occurred during typical work hours. A Linux administrator who is investigating this problem realized the system time on the Linux server is wrong by more than twelve hours. What protocol used on Linux serves to synchronize the time has stopped working?
- ANTP
- BTimeKeeper
- COSPF
- DPPP
5>NMAP -sn 192.168.11.200-215 The NMAP command above performs which of the following?
- AA port scan
- BA ping scan
- CAn operating system detect
- DA trace sweep
6An LDAP directory can be used to store information similar to a SQL database. LDAP uses a database structure instead of SQL's structure. Because of this, LDAP has difficulty representing many-to-one relationships.
- AStrict, Abstract
- BSimple, Complex
- CRelational, Hierarchical
- DHierarchical, Relational
7What is the purpose of DNS AAAA record?
- AAddress prefix record
- BAddress database record
- CAuthorization, Authentication and Auditing record
- DIPv6 address resolution record
8Which of the following statements is FALSE with respect to Intrusion Detection Systems?
- AIntrusion Detection Systems can easily distinguish a malicious payload in an encrypted traffic
- BIntrusion Detection Systems can examine the contents of the data in context of the network protocol
- CIntrusion Detection Systems can be configured to distinguish specific content in network packets
- DIntrusion Detection Systems require constant update of the signature library
9You are performing a penetration test for a client and have gained shell access to a Windows machine on the internal network. You intend to retrieve all DNS records for the internal domain. If the DNS server is at 192.168.10.2 and the domain name is abccorp.local, what command would you type at the nslookup prompt to attempt a zone transfer?
- Alist domain=abccorp.local type=zone
- BIs -d accorp.local
- Clist server=192.168.10.2 type=all
- DIserver 192.168.10.2 -t all
10Which command can be used to show the current TCP/IP connections?
- ANetsh
- BNet use connection
- CNetstat
- DNet use
11The tools which receive event logs from servers, network equipment, and applications, and perform analysis and correlation on those logs, and can generate alarms for security relevant issues, are known as what?
- ANetwork Sniffer
- BVulnerability Scanner
- CIntrusion Prevention Server
- DSecurity Incident and Event Monitoring
12The purpose of a ____________is to deny network access to local area networks and other information assets by unauthorized wireless devices.
- AWireless Analyzer
- BWireless Jammer
- CWireless Access Point
- DWireless Access Control List
13What does the -oX flag do in an Nmap scan?
- APerform an Xmas scan
- BPerform an eXpress scan
- COutput the results in truncated format to the screen
- DOutput the results in XML format to a file
14During an Xmas scan, what indicates a port is closed?
- ARST
- BSYN
- CACK
- DNo return response
15Which of the following types of jailbreaking allows user-level access but does not allow iboot-level access?
- ABootrom Exploit
- BiBoot Exploit
- CSandbox Exploit
- DUserland Exploit
16What is not a PCI compliance recommendation?
- AUse a firewall between the public network and the payment card data.
- BUse encryption to protect all transmission of card holder data over any public network.
- CRotate employees handling credit card transactions on a yearly basis to different departments.
- DLimit access to card holder data to as few individuals as possible.
17Identify the web application attack where the attackers exploit vulnerabilities in dynamically generated web pages to inject client-side script into web pages viewed by other users.
- ASQL injection attack
- BCross-Site Scripting (XSS)
- CLDAP Injection attack
- DCross-Site Request Forgery (CSRF)
18You are attempting to run an Nmap port scan on a web server. Which of the following commands would result in a scan of common ports with the least amount of noise in order to evade IDS?
- Anmap •A - Pn
- Bnmap •sP •p-65535-T5
- Cnmap •sT •O •T0
- Dnmap •A --host-timeout 99-T1
19Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities.
Which type of virus detection method did Chandler use in this context?- AHeuristic Analysis
- BCode Emulation
- CIntegrity checking
- DScanning
20An attacker scans a host with the below command. Which three flags are set? (Choose three.)
#nmap •sX host.domain.com- AThis is ACK scan. ACK flag is set
- BThis is Xmas scan. SYN and ACK flags are set
- CThis is Xmas scan. URG, PUSH and FIN are set
- DThis is SYN scan. SYN flag is set
21Due to a slowdown of normal network operations, the IT department decided to monitor internet traffic for all of the employees. From a legal stand point, what would be troublesome to take this kind of measure?
- AAll of the employees would stop normal work activities
- BIT department would be telling employees who the boss is
- CNot informing the employees that they are going to be monitored could be an invasion of privacy.
- DThe network could still experience traffic slow down.
22Which component of IPsec performs protocol-level functions that are required to encrypt and decrypt the packets?
- AInternet Key Exchange (IKE)
- BOakley
- CIPsec Policy Agent
- DIPsec driver
23An attacker, using a rogue wireless AP, performed an MITM attack and injected an HTML code to embed a malicious applet in all HTTP connections. When users accessed any page, the applet ran and exploited many machines. Which one of the following tools the hacker probably used to inject HTML code?
- AWireshark
- BEttercap
- CAircrack-ng
- DTcpdump
24You are monitoring the network of your organizations. You notice that:
There are huge outbound connections from your Internal Network to External IPs. On further investigation, you see that the external IPs are blacklisted. Some connections are accepted, and some are dropped You find that it is a CnC communication. Which of the following solution will you suggest?- ABlock the Blacklist IP's @ Firewall
- BUpdate the Latest Signatures on your IDS/IPS
- CClean the Malware which are trying to Communicate with the External Blacklist IP's
- DBoth Update the Latest Signatures on your IDS/IPS and Clean the Malware which are trying to Communicate with the External Blacklist IP's
25Security Policy is a definition of what it means to be secure for a system, organization or other entity. For Information Technologies, there are sub-policies like Computer Security Policy, Information Protection Policy, Information Security Policy, network Security Policy, Physical Security Policy, Remote Access Policy, and User Account Policy.
What is the main theme of the sub-policies for Information Technologies?
- AAvailability, Non-repudiation, Confidentiality
- BAuthenticity, Integrity, Non-repudiation
- CConfidentiality, Integrity, Availability
- DAuthenticity, Confidentiality, Integrity
26Which of the following antennas is commonly used in communications for a frequency band of 10 MHz to VHF and UHF?
- AOmnidirectional antenna
- BDipole antenna
- CYagi antenna
- DParabolic grid antenna
27Why should the security analyst disable/remove unnecessary ISAPI filters?
- ATo defend against social engineering attacks
- BTo defend against webserver attacks
- CTo defend against jailbreaking
- DTo defend against wireless attacks
28In order to have an anonymous Internet surf, which of the following is best choice?
- AUse SSL sites when entering personal information
- BUse Tor network with multi-node
- CUse shared WiFi
- DUse public VPN
29A penetration test was done at a company. After the test, a report was written and given to the company's IT authorities. A section from the report is shown below:
Access List should be written between VLANs. Port security should be enabled for the intranet.
A security solution which filters data packets should be set between intranet (LAN) and DMZ. A WAF should be used in front of the web applications.
According to the section from the report, which of the following choice is true?- AMAC Spoof attacks cannot be performed.
- BPossibility of SQL Injection attack is eliminated
- CA stateful firewall can be used between intranet (LAN) and DMZ.
- DThere is access control policy between VLANs
30Websites and web portals that provide web services commonly use the Simple Object Access Protocol SOAP. Which of the following is an incorrect definition or characteristics in the protocol?
- ABased on XML
- BProvides a structured model for messaging
- CExchanges data between web services
- DOnly compatible with the application protocol HTTP
31In many states sending spam is illegal. Thus, the spammers have techniques to try and ensure that no one knows they sent the spam out to thousands of users at a time. Which of the following best describes what spammers use to hide the origin of these types of e-mails?
- AA blacklist of companies that have their mail server relays configured to allow traffic only to their specific domain name.
- BMail relaying, which is a technique of bouncing e-mail from internal to external mails servers continuously.
- CA blacklist of companies that have their mail server relays configured to be wide open.
- DTools that will reconfigure a mail server's relay component to send the e-mail back to the spammers occasionally.
32What is the correct process for the TCP three-way handshake connection establishment and connection termination?
- AConnection Establishment: FIN, ACK-FIN, ACK Connection Termination: SYN, SYN-ACK, ACK
- BConnection Establishment: SYN, SYN-ACK, ACK Connection Termination: ACK, ACK-SYN, SYN
- CConnection Establishment: ACK, ACK-SYN, SYN Connection Termination: FIN, ACK-FIN, ACK
- DConnection Establishment: SYN, SYN-ACK, ACK Connection Termination: FIN, ACK-FIN, ACK
33Emil uses nmap to scan two hosts using this command. nmap -sS -T4 -O 192.168.99.1 192.168.99.7
He receives this output:
Nmap scan report for 192.168.99.1 Host is up (0.00082s latency).
Not shown: 994 filtered ports PORT STATE SERVICE
21/tcp open ftp
23/tcp open telnet 53/tcp open domain 80/tcp open http 161/tcp closed snmp
MAC Address: B0:75:D5:33:57:74 (ZTE)
Device type: general purpose Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6 OS details: Linux 2.6.9 - 2.6.33 Network Distance: 1 hop
Nmap scan report for 192.168.99.7 Host is up (0.000047s latency).
All 1000 scanned ports on 192.168.99.7 are closed
Too many fingerprints match this host to give specific OS details Network Distance: 0 hops
What is his conclusion?- AHost 192.168.99.7 is an iPad.
- BHe performed a SYN scan and OS scan on hosts 192.168.99.1 and 192.168.99.7.
- CHost 192.168.99.1 is the host that he launched the scan from. D. Host 192.168.99.7 is down.
- DHost 192.168.99.7 is down.
34You're doing an internal security audit and you want to find out what ports are open on all the servers. What is the best way to find out?
- AScan servers with Nmap
- BPhysically go to each server
- CScan servers with MBSA
- DTelent to every port on each server
35Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it begins to close. What just happened?
- APhishing
- BWhaling
- CTailgating
- DMasquerading
36Which protocol is used for setting up secured channels between two devices, typically in VPNs?
- AIPSEC
- BPEM
- CSET
- DPPP
37In cryptanalysis and computer security, 'pass the hash' is a hacking technique that allows an attacker to authenticate to a remote server/service by using the underlying NTLM and/or LanMan hash of a user's password, instead of requiring the associated plaintext password as is normally the case.
Metasploit Framework has a module for this technique: psexec. The psexec module is often used by penetration testers to obtain access to a given system that you already know the credentials for. It was written by sysinternals and has been integrated within the framework. Often as penetration testers, successfully gain access to a system through some exploit, use meterpreter to grab the passwords or other methods like fgdump, pwdump, or cachedump and then utilize rainbowtables to crack those hash values.
Which of the following is true hash type and sort order that is using in the psexec module's 'smbpass'?- ANT:LM
- BLM:NT
- CLM:NTLM
- DNTLM:LM
38Which Metasploit Framework tool can help penetration tester for evading Anti-virus Systems?
- Amsfpayload
- Bmsfcli
- Cmsfencode
- Dmsfd
39Which of the following is a passive wireless packet analyzer that works on Linux-based systems?
- ABurp Suite
- BOpenVAS
- Ctshark
- DKismet
40The establishment of a TCP connection involves a negotiation called 3 way handshake. What type of message sends the client to the server in order to begin this negotiation?
- ARST
- BACK
- CSYN-ACK
- DSYN
41Internet Protocol Security IPSec is actually a suite of protocols. Each protocol within the suite provides different functionality. Collective IPSec does everything except.
- AProtect the payload and the headers
- BAuthenticate
- CEncrypt
- DWork at the Data Link Layer
42Todd has been asked by the security officer to purchase a counter-based authentication system. Which of the following best describes this type of system?
- AA biometric system that bases authentication decisions on behavioral attributes.
- BA biometric system that bases authentication decisions on physical attributes.
- CAn authentication system that creates one-time passwords that are encrypted with secret keys
- DAn authentication system that uses passphrases that are converted into virtual passwords.
43An attacker attaches a rogue router in a network. He wants to redirect traffic to a LAN attached to his router as part of a man-in-the-middle attack. What measure on behalf of the legitimate admin can mitigate this attack?
- AOnly using OSPFv3 will mitigate this risk.
- BMake sure that legitimate network routers are configured to run routing protocols with authentication.
- CRedirection of the traffic cannot happen unless the admin allows it explicitly.
- DDisable all routing protocols and only use static routes.
44What network security concept requires multiple layers of security controls to be placed throughout an IT infrastructure, which improves the security posture of an organization to defend against malicious attacks or potential vulnerabilities?
- ASecurity through obscurity
- BHost-Based Intrusion Detection System
- CDefense in depth
- DNetwork-Based Intrusion Detection System
45Which Intrusion Detection System is best applicable for large environments where critical assets on the network need extra security and is ideal for observing sensitive network segments?
- ANetwork-based intrusion detection system (NIDS)
- BHost-based intrusion detection system (HIDS)
- CFirewalls
- DHoneypots
46What mechanism in Windows prevents a user from accidentally executing a potentially malicious batch (.bat) or PowerShell (.ps1) script?
- AUser Access Control (UAC)
- BData Execution Prevention (DEP)
- CAddress Space Layout Randomization (ASLR)
- DWindows firewall
47Which of the following programming languages is most susceptible to buffer overflow attacks, due to its lack of a built-in-bounds checking mechanism?
Code:
#include <string.h> int main(){
char buffer[8];
strcpy(buffer, ““11111111111111111111111111111””);
}
Output: Segmentation fault- AC#
- BPython
- CJava
- DC++
48The security administrator of ABC needs to permit Internet traffic in the host 10.0.0.2 and UDP traffic in the host
10.0.0.3. Also he needs to permit all FTP traffic to the rest of the network and deny all other traffic. After he applied his ACL configuration in the router nobody can access to the ftp and the permitted hosts cannot access to the Internet. According to the next configuration what is happening in the network?
access-list 102 deny tcp any any
access-list 104 permit udp host 10.0.0.3 any
access-list 110 permit tcp host 10.0.0.2 eq www any access-list 108 permit tcp any eq ftp any- AThe ACL 110 needs to be changed to port 80
- BThe ACL for FTP must be before the ACL 110
- CThe first ACL is denying all TCP traffic and the other ACLs are being ignored by the router
- DThe ACL 104 needs to be first because is UDP
49In an internal security audit, the white hat hacker gains control over a user account and attempts to acquire access to another account's confidential files and information. How can he achieve this?
- APort Scanning
- BHacking Active Directory
- CPrivilege Escalation
- DShoulder-Surfing
50Which of the following will perform an Xmas scan using NMAP?
- Anmap -sA 192.168.1.254
- Bnmap -sP 192.168.1.254
- Cnmap -sX 192.168.1.254
- Dnmap -sV 192.168.1.254
51Which of the following security policies defines the use of VPN for gaining access to an internal corporate network?
- ANetwork security policy
- BRemote access policy
- CInformation protection policy
- DAccess control policy
Information
- Description
- Quiz on Gencer5, created by Austin Bell on 10/10/2019.
- Author
- Austin Bell
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz