Boot Camp Exam

The __ of the Wireshark interface shows data in a hexdump format.

What are the three types of scanning?

You conduct a UDP scan to an open port. What response do you expect to return?

You have compromised a server at 10.10.0.5. To enumerate all machines on that network use ___.

After a DHCP rate limit message max threshold is crossed, what occurs?

A _ attack occurs when an application writes more data than is allocated to a target program.

Review the scenario below and provide your answer.

XOR the two strings in the image shown.

What character is the best choice to start an SQL Injection attempt?

What is a collision attack in cryptography?

Read the question below and provide your selected port below.

A dictionary attack uses pre-computed hashes

A protocol that uses Diffie Helman to create IPSec session data transfer keys

An attacker has full knowledge of the target system. What type hack is he or she going to do

The ___ is a targeted phishing attack aimed at specific individuals within the organization.

PGP, IKE, and SSL are all examples of what type of cryptography?

This DNS record type maps an alias to a FQDN.

Which of the following is not a Risk Management Strategy?

This malware encrypts your data demands bitcoins for you to unlock your data.

Which if the following is a preventive control?

SNMP TRAP is normally associated with what port?

Which type of attack is displayed in the code below? http://www.badsite.com/../../etc/password

What is the most important part of the hacking process that will take the most time?

What nmap scan requires root level privileges?

The implicit deny at the end of access list statements blocks any traffic not in the filter.

_ offers development tools, conifiguration management, and deployment platforms to develop apps

A ___ trojan gives the attacker remote control over a spawned shell on a victim's computer.

Which of the following attacks is a DoS attack on a bluetooth device?

Which ICMP Error Message means that ICMP communications are administratively prohibited?

Port 53 is associated with what service traditionally?

Which one of the following is NOT a hashing algorithm?

What attack is # 1 on OWASPs Web and Webserver attacks?

The port(s) normally used with Satan's Back Door is(are)

This law deals with e-commerce and electronic financial transaction standards and regulations.

___ is the IT security principle that ensures data is only viewable by authorized users.

What is HTML encoding sign for ampersand?

___ scanning is scanning that can be conducted, but blamed on another attacker.

Which processs evaluates the adherence of an organization to its security policy?

Which threat presents the highest risk to a target network or resource?

Which command executes an ICMP (Ping) scan

What type of attack is described below?

The Resource Identifier (RID) is a part of the Security Identifier (SID)

Snow is a __ type of application.

Using Pop-up windows to get a user to click the the pop up and download malware is a ____

Which SQL command is used retrieve information from a RDBMS?

Untethered jailbroken phones have un-patched kernals; may get stuck in a partial started state

Snort can be used as both an IDS and IPS.

What type of traffic traditionally travels over TCP port 443?

What happens when a switch's CAM table is full?

Which of the following is true about the SNMP community strings?

What ICMP code is associated with the response from the ping command below?

Installing Trojans is associated with what part of hacking process?

Another term for firewalking-externally testing ports on a firewall by generating a connections

You need to capture, decode, and extract voice traffic data. What software can do this?

Who has the authority to frame an access policy in a DAC system?

Which of the following Wireless Standard/distance is NOT correct?

Command to set all privileges the user, read/write to group, and read only to all others?

When an attack is politically motivated, it is said to be...

_____ is another term for "bricking" a system which causes permanent damage to a system.

Which attack makes use of an already authenticated connection?

This law has 5 subsections and addresses safe handling of medical and health patient records

Which one of the methods below will NOT defend against MAC Spoofing?

Which virus evades detection by rewriting its code?

Where is the SAM file located?

Review the figure below. Select the correct assesment of the nbtstat screenshot.

This hacker, hacks and doesn't care about the consequences of his or her actions.

You are deploying a remote access solution.What should be used to reduce potential MITM attacks

Sniffing occurs at layer ____ of the OSI model.

An NMAP scan of a network shows that port 445 is open on the machines. What risk does this pose

____ running on Mac OS X, can be used to brute-force WEP or WPA passwords.

What is a Trojan Wrapper?

Which of the following is a countermeasure to ARP spoofing?

The best defense against any type of sniffing is...

What is the first step of the 3-part TCP Handshake to establish a connection.

You are configuring a Wireshark filter and want to look at all NTP packets. You should...

In the TCP Hijack Attack, the attacker doesn't have to be on the same network as the victim.

A _ is an entity that can damage a system through unauthorized access, or destruction.

This attack uses an excessive amount of UDP packets to overwhelm a target and DoS it.

Name resolvers answer requests and hold records.

What is the most dangerous type of rootkit?

What's an application sandbox?

What password cracking method takes the most time, effort, and processing costs?

Which Linux folder holds the password and shadow files?

This is a protocol based Trojan that uses the ping protocol to covertly share information.

A brute force attack can eventually break any cipher

What's a bootrom exploit?

A TCP datagram has the FIN, URG, and PSH flags. What would be the binary value for the packet?

Which file must be checked to ensure that users do not have null password in a Linux system?

Which net command listed below shows all systems in the domain name provided?

This type of Intrusion detection mechanism is based on recognizing system behavior deviations.

In ____ a large number of malicious packets are crafted to confuse the IDS and hide real attack

Which command more than likely generated the results below?

Elements of security can be broken down into..

The well-known ports are...

In this attack the hacker only has access to ciphertext and can brute force or freq analysis.

What part of the TCP 3-way connection is listed below?

How does ARP work?

Which Google hack operator can't be mixed with other google hack operators?

Examine the code in the figure. What type of attack is being leveraged in the code?

The ___ virus uses code around the virus execution code to protect the malicious instructions.

Purchasing insurance lowering a cyber risk profile rating is a Risk _ risk management mechanism

Which of the following is an example of multi-factor authentication?

You are on as an admin on a Win 10 machine. To launch the computer mangement console you..

In this attack, the attacker name drops a VIPs name in order to gain access to the system/info

Within a PKI system, which of the following generates keys?

This type of firewall filters traffic based on session rules only.

An hacker waits for an employee to enter a building and follows them in after speaking to them.

__ attacks exploit web page vulnerabilities allowing attackers to send unsolicited requests.

What meterpreter command elevates your privileges after you have spawned a shell?

Which activity ensures IT system Integrity?

______ is the method of hiding a small or narrowband signal in a larger cover signal.

Which one of the commands listed below is not a SQL Command?

Passive sniffing means sniffing using a hub, because all traffic is passed to all ports.

Which one of the programs listed below is NOT capable of conducting an integrity check?

Which algorithm outputs a 160-bit value?

>nmap -sn 192.168.1.13-199

You conducted a SYN scan. A RST/ACK was returned. What is the status of the port?

What type of NID detects a spike in traffic during off-duty hours and sends as alert?

What is the appropriate response to go inside the red box for the figure below?

What is the standard for digital certificates in a PKI System?

Which Wireshark filter shows all packets containing the word password

A __ virus overwrites a part of the host file and doesn't increase the size of the file.

This tool is used to assess and if required penetration test (attack) web servers.

Systems that make use of two or more access control mechanisms are known as having ___

Calculate the number of keys required for N = 10