NEW QUESTION 1
Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of Cross-Site Scripting attack Ryan intends to do?

• A. Non persistent
• B. SAX
• C. Persistent
• D. Document Object Model (DOM)

Answer: C

NEW QUESTION 2
Which of the following is NOT an Intrusion Detection System?

• A. Fragroute
• B. Stunnel
• C. Samhain
• D. AIDE

Answer: B

NEW QUESTION 3
Which of the following is a checksum algorithm?

• A. Dsniff
• B. Adler-32
• C. Hash buster
• D. Snort

Answer: B

NEW QUESTION 4
Which of the following is an asymmetric encryption algorithm?

• A. Blowfish
• B. RC5
• C. Diffie-Hellman
• D. RC4

Answer: C

NEW QUESTION 5
Adam works on a Linux system. He is using Sendmail as the primary application to transmit e-mails.
Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log files contains e-mail information such as source and destination IP addresses, date and time stamps etc?

• A. /log/var/mailog
• B. /var/log/logmail
• C. /var/log/mailog
• D. /log/var/logd

Answer: C

NEW QUESTION 6
Which of the following ports is used by Layer 2 Tunneling Protocol (L2TP)?

• A. UDP port 1701
• B. UDP port 67
• C. TCP port 23
• D. TCP port 25

Answer: A

NEW QUESTION 7
Which of the following is the default port for TACACS?

• A. UDP port 49
• B. TCP port 80
• C. TCP port 25
• D. TCP port 443

Answer: A

NEW QUESTION 8
Which of the following is the ability of a hacker to determine the nature of the network?

• A. Investigating
• B. Profiling
• C. Sniffing
• D. Intruding

Answer: B

NEW QUESTION 9
Which of the following protocols is used by TFTP as a file transfer protocol?

• A. UDP
• B. SNMP
• C. TCP
• D. SMTP

Answer: A

NEW QUESTION 10
You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008 domain-based network. The network has three Windows Server 2008 member servers and 150 Windows Vista client computers. The network contains a Windows Server 2008 Core computer.
You want to install the DNS server role on the Windows Server 2008 Core computer. Which of the following commands will you use to accomplish the task?

• A. start /w ocsetup DNS-Server-Core-Role
• B. start /w ocsetup DnsServer
• C. start /w ocsetup DnsServercorerole
• D. net start "dns server"

Answer: A

NEW QUESTION 11
You are implementing a host based intrusion detection system on your web server. You feel that the best way to monitor the web server is to find your baseline of activity (connections, traffic, etc.) and to monitor for conditions above that baseline. This type of IDS is called __________.

• A. Anomaly Based
• B. Reactive IDS
• C. Passive IDS
• D. Signature Based

Answer: A

NEW QUESTION 12
Nathan works as a professional Ethical Hacker. He wants to see all open TCP/IP and UDP ports of his computer. Nathan uses the netstat command for this purpose but he is still unable to map open ports to the running process with PID, process name, and path. Which of the following commands will Nathan use to accomplish the task?

• A. ping
• B. Psloggedon
• C. Pslist
• D. fport

Answer: D

NEW QUESTION 13
In which of the following IDS evasion techniques does an attacker deliver data in multiple small sized packets, which makes it very difficult for an IDS to detect the attack signatures of such attacks?

• A. Insertion
• B. Session splicing
• C. Fragmentation overlap
• D. Fragmentation overwrite

Answer: B

NEW QUESTION 14
Which of the following is the default port for DNS zone transfer?

• A. Port 21
• B. Port 80
• C. Port 23
• D. Port 53

Answer: D

NEW QUESTION 15
Which of the following Web attacks is performed by manipulating codes of programming languages such as SQL, Perl, Java present in the Web pages?

• A. Command injection attack
• B. Code injection attack
• C. Cross-Site Request Forgery
• D. Cross-Site Scripting attack

Answer: B

NEW QUESTION 16
Which of the following can be applied as countermeasures against DDoS attacks?
Each correct answer represents a complete solution. Choose all that apply.

• A. Limiting the amount of network bandwidt
• B. Blocking IP addres
• C. Using LM hashes for password
• D. Using Intrusion detection system
• E. Using the network-ingress filterin

Answer: ABDE

NEW QUESTION 17
Mark works as a Network administrator for SecureEnet Inc. His system runs on Mac OS X. He wants to boot his system from the Network Interface Controller (NIC). Which of the following snag keys will Mark use to perform the required function?

• A. D
• B. N
• C. Z
• D. C

Answer: B

NEW QUESTION 18
......