stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Q151-Q240 Flashcards | StudBud
Explore
/
Q151-Q240
Q151-Q240
90 terms
·
StudBud Administration
·
13 plays
Ok
Flashcards
90 cards
F
Practice quiz
P
Host live
L
Questions
90
Answers
1
184. What is the difference between pharming and phishing attacks?
A
C
D
B
2
214. does this bug leave exposed to the Internet making exploitation of any compromised system very easy?
Shared
Root
Public
Private
3
181. You want to analyze packets on your wireless network. Which program would you use?
Airsnort with Airpcap
Ethereal with Winpcap
Wireshark with Airpcap
Wireshark with Winpcap
4
160. The company suggests he use two-factor authentication; which option below offers that?
His username and a stronger password
A. Disable his username and use just a fingerprint scanner
A fingerprint scanner and his username and password
A new username and password
5
158. Which tier in the N-tier application architecture is responsible for moving and processing data between the tiers?
Logic tier
Application Layer
Presentation tier
Data tier
6
229. Which of the following describes the characteristics of a Boot Sector Virus?
D
B
A
C
7
153. Which Algorithm is this referring to?
Wi-Fi Protected Access (WPA)
Wi-Fi Protected Access 2 (WPA2)
Temporal Key Integrity Protocol (TKIP)
Wired Equivalent Privacy (WEP)
8
197. Which service in a PKI will vouch for the identity of an individual or company?
CA
CR
KDC
CBC
9
187. In order to have an anonymous Internet surf, which of the following is best choice?
Use shared WiFi
Use public VPN
Use Tor network with multi-node
Use SSL sites when entering personal information
10
186. Which sort of trojan infects this server?
Botnet Trojan
Banking Trojans
Turtle Trojans
Ransomware Trojans
11
222. Which of the following can the administrator do to verify that a tape backup can be recovered in its entirety?
Read the first 512 bytes of the tape
Restore a random file
Read the last 512 bytes of the tape
Perform a full restore
12
165. What is a possible source of this problem?
The WAP does not recognize the client’s MAC address
Client is configured for the wrong channel
The wireless client is not configured to use DHCP
The client cannot see the SSID of the wireless network
13
196. Which of the following is a passive wireless packet analyzer that works on Linux-based systems?
kismet
OpenVAS
tshark
Burp Suite
14
167. What does a firewall check to prevent particular ports and applications from getting packets into an organization?
Network layer headers and the session layer port numbers
Presentation layer headers and the session layer port numbers
Transport layer port numbers and application layer headers
Application layer port numbers and the transport layer headers
15
171. what is the first character that the tester should use to attempt breaking a valid SQL request?
Double quote
Semicolon
Exclamation mark
Single quote
16
191. Why he cannot see the servers?
D
C
B
A
17
203. Which system consists of a publicly available set of databases that contain domain name registration contact info?
CAPTCHA
WHOIS
IANA
IETF
18
183. most secure way to mitigate the theft of corporate information from a laptop that was left in a hotel room?
Set a BIOS password
Encrypt the data on the hard drive.
Back up everything on the laptop and store the backup in a safe place
Use a strong logon password to the operating system
19
159. The CEO wants to monitor the physical perimeter and the entrance doors 24 hours. What is the best option to do this
Use fences in the entrance doors
Use an IDS in the entrance doors and install some of them near the corners
Install a CCTV with cameras pointing to the entrance doors and the street
Use lights in all the entrance doors and along the company's perimeter
20
182. What just happened?
Phishing
Whaling
Tailgating
Masquerading
21
220. What is the fastest way she can accomplish this with Nmap? Stealth is not a concern.
nmap –s 445 –sU –T5 10.1.0.0/16
nmap –sn –sF 10.1.0.0/16 445
nmap –p 445 –n –T4 –open 10.1.0.0/16
nmap –p 445 –max –Pn 10.1.0.0/16
22
180. perform automated attacks on services, ports, applications an unpatched security flaws in a computer system?
Wireshark
Maltego
Nessus
Metasploit
23
161. What is the first step that the bank should take before enabling the audit feature?
Perform a vulnerability scan of the system
Perform a cost/benefit analysis of the audit feature
Determine the impact of enabling the audit feature
Allocate funds for staffing of audit log review
24
206. Which of the following regulations best matches the description?
ISO/IEC 27002
COBIT
FISMA
HIPAA
25
189. Todd has been asked by the security officer to purchase a counter-based authentication system. What type ofsystem?
system that creates one-time passwords that are encrypted with secret keys
A biometric system that bases authentication decisions on behavioral attrib
system that uses passphrases that are converted into virtual password
A biometric system that bases authentication decisions on physical attribut
26
192. Which of the following best describes what spammers use to hide the origin of these types of e-mails?
D
A
B
C
27
232. Which type of vulnerability is present on this site?
Cookie Tampering
SQL Injection
XSS Reflection
Web Parameter Tampering
28
224. Which one of the following tools would most likely be used in such an audit?
Protocol analyzer
Port scanner
Vulnerability scanner
Intrusion Detection System
29
178. Which type of security feature stops vehicles from crashing through the doors of a building?
Receptionist
Mantrap
Bollards
Turnstile
30
200. What is the code written for?
Buffer Overflow
Encryption
Denial-of-service (DoS)
Bruteforce
31
212. What document describes the specifics of the testing, the associated violations, and essentially protects
Non-Disclosure Agreement
Rules of Engagement
Project Scope
Service Level Agreement
32
194. If a scanned port is open, what happens?
The port will ignore the packets
The port will send an ACK
The port will send an RST
The port will send a SYN
33
172. What is happening?
You need to run the ping command with root privileges
ICMP could be disabled on the target server
TCP/IP doesn't support ICMP
The ARP is disabled on the target server
34
231. is the least-likely physical characteristic to be used in biometric control that supports a large company?
Iris patterns
Voice
Height and Weight
Fingerprints
35
236. What needs to happen before Matthew has full administrator access?
He already has admin privileges, as shown by the “501” atthe end of the SID
He must perform privilege escalation
He needs to disable antivirus protection.
He needs to gain physical access
36
221. Which of the following terms best matches the definition?
WLAN
InfraRed
Bluetooth
Radio-Frequency identification
37
193. What is his conclusion?
Host 192.168.99.1 is the host that he launched the scan from
Host 192.168.99.7 is an iPad
Host 192.168.99.7 is down
He performed a SYN scan and OS scan on hosts 192.168.99.1 and 192.168.99.7
38
188. Example: allintitle: root passwd
Reconnaissance
Gaining Access
Maintaining Access
Scanning and Enumeration
39
155. What is the most likely cause?
The security breach was a false positive
The network devices are not all synchronized
The attacker altered or erased events from the logs
Proper chain of custody was not observed while collecting the logs
40
225. What testing method did you use?
Piggybacking
Tailgating
Eavesdropping
Social engineering
41
207. What type of malware has Jesse encountered?
Trojan
Macro Virus
Key-Logger
Worm
42
211. Which of the following is most likely taking place?
C
B
D
A
43
227. Which of the following is NOT one of the five basic responses to risk?
Mitigate
Delegate
Accept
Avoid
44
175. What type of activity has been logged?
Port scan targeting 192.168.1.106
Port scan targeting 192.168.1.103
Denial of service attack targeting 192.168.1.103
Teardrop attack targeting 192.168.1.106
45
154. What is the main purpose of those static routes?
A
D
C
B
46
169. What is the name of the attack which is mentioned in the scenario?
Session Fixation
HTML Injection
HTTP Parameter Pollution
Clickjacking Attack
47
190. How can rainbow tables be defeated?
All uppercase character passwords
Password salting
Use of non-dictionary words
Lockout accounts under brute force password cracking attempts
48
151. Which of the following choices true about cryptography?
D
A
C
B
49
228. What is the name of the tool and the correct syntax to connect to a web server?
openssl_client –site www.website.com:443
openssl s_client –site www.website.com:443
openssl s_client –connect www.website.com:443
openssl_client –connect www.website.com:443
50
205. In IPv6 what is the major difference concerning application layer vulnerabilities compared to IPv4?
B
A
C
D
51
239. What should you do?
B
A
D
C
52
173. What is the best security policy concerning this setup?
A
D
C
B
53
219. A well-intentioned researcher discovers a vulnerability on the web site of a major corporation. What should he do?
Notify the web site owner corrective action be taken asap to patch the vuln
Try to sell the information to a well-paying party on the dark web
Ignore it
Exploit the vulnerability without harming the web site owner
54
238. Your login attempt may be logged on several files located in /var/log. Which file does NOT belong to the list:
btmp
auth.log
wtmp
user.log
55
152. What is the difference between the AES and RSA algorithms?
A
D
B
C
56
168. languages is most susceptible to buffer overflow attacks, due to its lack of a built-in-bounds checking mechanism?
Java
Python
C#
C++
57
210. Google search query? site:target.com site:Marketing.target.com accounting
B
D
A
C
58
164. Which of the following programs is usually targeted at Microsoft Office products?
Multipart virus
Macro virus
Stealth virus
Polymorphic virus
59
195. Which Metasploit Framework tool can help penetration tester for evading Anti-virus Systems?
msfencode
msfpayload
msfd
msfcli
60
177. considered a strength of symmetric key cryptography when compared with asymmetric algorithms?
Scalability
Key distribution
Security
Speed
61
213. What type of an alert is this?
True negative
False negative
True positive
False positive
62
223. What sort of security breach is this policy attempting to mitigate?
B
A
D
C
63
201. What should you do?
Transfer money from the administrator’s account to another account.
Do not report it and continue the penetration test
Report immediately to the administrator
Do not transfer the money but steal the bitcoins
64
235. Which of the following tools is he most likely using?
Metasploit
Armitage
Nikto
Nmap
65
240. The "Gray-box testing" methodology enforces what kind of restriction?
Only the external operation of a system is accessible to the tester
The internal operation of a system is only partly accessible to the tester
The internal operation of a system is completely known to the tester
Only the internal operation of a system is known to the tester
66
237. What type of SQL injection is Elliot most likely performing?
Union-based SQL injection
Blind SQL injection
NoSQL injection
Error-based SQL injection
67
204. According to the section from the report, which of the following choice is true?
A stateful firewall can be used between intranet (LAN) and DMZ
MAC Spoof attacks cannot be performed
Possibility of SQL Injection attack is eliminated
There is access control policy between VLANs
68
209. What is the name of this kind of attack?
DNS spoofing
MAC Flooding
ARP Polsoning
Smurf Attack
69
202. What measure on behalf of the legitimate admin can mitigate this attack?
A
C
D
B
70
179. Based on this information, what should be one of your key recommendations to the bank?
Issue new certificates to the web servers from the root certificate authori
Place a front-end web server in dmz that only handles external web traffic
Require all employees to change their passwords immediately
Move the financial data to another server on the same IP subnet
71
226. What should be the first step in security testing the client?
Escalation
Enumeration
Reconnaissance
Scanning
72
198. prevents a user from accidentally executing a potentially malicious batch (.bat) or PowerShell (.ps1) script?
Data Execution Prevention (DEP)
Address Space Layout Randomization (ASLR)
Windows firewall
User Access Control (UAC)
73
234. Which of the following isone of the most effective ways to prevent Cross-site Scripting (XSS) flaws in software app
Validate and escape all information sent to a server
Use digital certificates to authenticate a server prior to sending data
Use security policies and procedures to define and implement proper securit
Verify acces right before allowing access to protected info and UI control
74
170. John the Ripper is a technical assessment tool used to test the weakness of which of the following?
Passwords
Usernames
Firewall rulesets
File permissions
75
162. Which of the following Nmap commands will produce the following output?
nmap –sS –Pn 192.168.1.1
nmap –sT –sX –Pn –p 1-65535 192.168.1.1
nmap –sN –Ps –T4 192.168.1.1
nmap –sS –sU –Pn –p 1-65535 192.168.1.1
76
163. What command in Wireshark will help you to find this kind of traffic?
tcp.port eq 25
smtp port
request smtp 25
tcp.contains port 25
77
216. What is the correct process for the TCP three-way handshake connection establishment and connection termination?
Establishment: ACK, ACK-SYN, SYN Connection Termination: FIN, ACK-FIN, ACK
Establishment: SYN, SYN-ACK, ACK Connection Termination: FIN, ACK-FIN, ACK
Establishment: FIN, ACK-FIN, ACK Connection Termination: SYN, SYN-ACK, ACK
Establishment: SYN, SYN-ACK, ACK Connection Termination: ACK, ACK-SYN, SYN
78
199. What type of test is he conducting?
Internal, Blackbox
Internal, Whitebox
External, Blackbox
External, Whitebox
79
230. Which of the following actions should John take to overcome this problem with the least administrative effort?
Increase his technical skills
Create an incident checklist
Read the incident manual every time it occurs
Select someone else to check the procedures
80
156. In which order should he perform these steps?
A
D
B
C
81
217. env x=’(){ :;};echo exploit’ bash –c ‘cat/etc/passwd’ What isthe Shellshock bash vulnerability attempting linuxhost
Add new user to the passwd file
Removes the passwd file
Display passwd content to prompt
Changes all passwords in passwd
82
215. Eve stole a file named secret.txt, transferred it to her computer and she just entered these commands:
She is using John the Ripper to crack the passwords in the secret.txt file
She is using John the Ripper to view the contents of the file
She is encrypting the file
She is using ftp to transfer the file to another hacker named John
83
233. Which of the following terms best matches the definition?
Attack
Threat
Risk
Vulnerability
84
157. Look at the following output. What did the hacker accomplish?
The hacker listed DNS records on his own domain
The hacker used the"fierce"tool to brute force the list of available domain
The hacker used who is to gather publicly available records for the domain
The hacker successfully transferred the zone and enumerated the hosts
85
218. What technique is Ricardo using?
Public-key cryptography
Steganography
RSA algorithm
Encryption
86
208. What kind of Web application vulnerability likely exists in their software?
Cross-site scripting vulnerability
Cross-site Request Forgery vulnerability
SQL injection vulnerability
Session management vulnerability
87
174. is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans fo
Preparation phase
Recovery phase
Containment phase
Identification phase
88
185. What is the role of test automation in security testing?
D
B
C
A
89
176. Which security policy must the security analyst check to see if dial-out modems are allowed?
Remote-access policy
Acceptable-use policy
Permissive policy
Firewall-management policy
90
166. What is correct about digital signatures?
C
A
B
D
