Boot Camp Exam

Which Google hack operator can't be mixed with other google hack operators?

What part of the TCP 3-way connection is listed below?

This type of Intrusion detection mechanism is based on recognizing system behavior deviations.

This is a protocol based Trojan that uses the ping protocol to covertly share information.

This law deals with e-commerce and electronic financial transaction standards and regulations.

You need to capture, decode, and extract voice traffic data. What software can do this?

Which threat presents the highest risk to a target network or resource?

__ attacks exploit web page vulnerabilities allowing attackers to send unsolicited requests.

A _ is an entity that can damage a system through unauthorized access, or destruction.

A _ attack occurs when an application writes more data than is allocated to a target program.

This tool is used to assess and if required penetration test (attack) web servers.

Which net command listed below shows all systems in the domain name provided?

You are configuring a Wireshark filter and want to look at all NTP packets. You should...

What is a Trojan Wrapper?

Command to set all privileges the user, read/write to group, and read only to all others?

Which command executes an ICMP (Ping) scan

What's a bootrom exploit?

Read the question below and provide your selected port below.

XOR the two strings in the image shown.

Which one of the programs listed below is NOT capable of conducting an integrity check?

What is a collision attack in cryptography?

Systems that make use of two or more access control mechanisms are known as having ___

The ___ is a targeted phishing attack aimed at specific individuals within the organization.

An NMAP scan of a network shows that port 445 is open on the machines. What risk does this pose

The port(s) normally used with Satan's Back Door is(are)

You have compromised a server at 10.10.0.5. To enumerate all machines on that network use ___.

The best defense against any type of sniffing is...

You conducted a SYN scan. A RST/ACK was returned. What is the status of the port?

You are on as an admin on a Win 10 machine. To launch the computer mangement console you..

This DNS record type maps an alias to a FQDN.

The implicit deny at the end of access list statements blocks any traffic not in the filter.

The Resource Identifier (RID) is a part of the Security Identifier (SID)

What is the most dangerous type of rootkit?

Which one of the following is NOT a hashing algorithm?

Which Linux folder holds the password and shadow files?

This type of firewall filters traffic based on session rules only.

Which SQL command is used retrieve information from a RDBMS?

Installing Trojans is associated with what part of hacking process?

Sniffing occurs at layer ____ of the OSI model.

Another term for firewalking-externally testing ports on a firewall by generating a connections

An attacker has full knowledge of the target system. What type hack is he or she going to do

This law has 5 subsections and addresses safe handling of medical and health patient records

Elements of security can be broken down into..

What is HTML encoding sign for ampersand?

Which command more than likely generated the results below?

Examine the code in the figure. What type of attack is being leveraged in the code?

A ___ trojan gives the attacker remote control over a spawned shell on a victim's computer.

Which of the following attacks is a DoS attack on a bluetooth device?

What is the first step of the 3-part TCP Handshake to establish a connection.

Port 53 is associated with what service traditionally?

You conduct a UDP scan to an open port. What response do you expect to return?

In this attack, the attacker name drops a VIPs name in order to gain access to the system/info

What is the appropriate response to go inside the red box for the figure below?

This malware encrypts your data demands bitcoins for you to unlock your data.

Which type of attack is displayed in the code below? http://www.badsite.com/../../etc/password

A brute force attack can eventually break any cipher

What attack is # 1 on OWASPs Web and Webserver attacks?

Within a PKI system, which of the following generates keys?

Passive sniffing means sniffing using a hub, because all traffic is passed to all ports.

A __ virus overwrites a part of the host file and doesn't increase the size of the file.

In ____ a large number of malicious packets are crafted to confuse the IDS and hide real attack

What's an application sandbox?

A dictionary attack uses pre-computed hashes

What is the most important part of the hacking process that will take the most time?

What meterpreter command elevates your privileges after you have spawned a shell?

Calculate the number of keys required for N = 10

Which Wireshark filter shows all packets containing the word password

A protocol that uses Diffie Helman to create IPSec session data transfer keys

What password cracking method takes the most time, effort, and processing costs?

Which of the following Wireless Standard/distance is NOT correct?

SNMP TRAP is normally associated with what port?

Which algorithm outputs a 160-bit value?

Who has the authority to frame an access policy in a DAC system?

Which attack makes use of an already authenticated connection?

___ is the IT security principle that ensures data is only viewable by authorized users.

Which processs evaluates the adherence of an organization to its security policy?

What are the three types of scanning?

What character is the best choice to start an SQL Injection attempt?

What ICMP code is associated with the response from the ping command below?

Which ICMP Error Message means that ICMP communications are administratively prohibited?

______ is the method of hiding a small or narrowband signal in a larger cover signal.

In the TCP Hijack Attack, the attacker doesn't have to be on the same network as the victim.

Which of the following is not a Risk Management Strategy?

What happens when a switch's CAM table is full?

The ___ virus uses code around the virus execution code to protect the malicious instructions.

Untethered jailbroken phones have un-patched kernals; may get stuck in a partial started state

The well-known ports are...

>nmap -sn 192.168.1.13-199

This attack uses an excessive amount of UDP packets to overwhelm a target and DoS it.

Where is the SAM file located?

Review the figure below. Select the correct assesment of the nbtstat screenshot.

_____ is another term for "bricking" a system which causes permanent damage to a system.

Which if the following is a preventive control?

Which of the following is an example of multi-factor authentication?

___ scanning is scanning that can be conducted, but blamed on another attacker.

Review the scenario below and provide your answer.

Snow is a __ type of application.

What type of traffic traditionally travels over TCP port 443?

What nmap scan requires root level privileges?

How does ARP work?

Which virus evades detection by rewriting its code?

Which of the following is a countermeasure to ARP spoofing?

You are deploying a remote access solution.What should be used to reduce potential MITM attacks

Which activity ensures IT system Integrity?

The __ of the Wireshark interface shows data in a hexdump format.

Name resolvers answer requests and hold records.

_ offers development tools, conifiguration management, and deployment platforms to develop apps

What is the standard for digital certificates in a PKI System?

After a DHCP rate limit message max threshold is crossed, what occurs?

Which one of the commands listed below is not a SQL Command?

What type of NID detects a spike in traffic during off-duty hours and sends as alert?

An hacker waits for an employee to enter a building and follows them in after speaking to them.

Snort can be used as both an IDS and IPS.

____ running on Mac OS X, can be used to brute-force WEP or WPA passwords.

Using Pop-up windows to get a user to click the the pop up and download malware is a ____

Purchasing insurance lowering a cyber risk profile rating is a Risk _ risk management mechanism

In this attack the hacker only has access to ciphertext and can brute force or freq analysis.

PGP, IKE, and SSL are all examples of what type of cryptography?

A TCP datagram has the FIN, URG, and PSH flags. What would be the binary value for the packet?

What type of attack is described below?

Which of the following is true about the SNMP community strings?

This hacker, hacks and doesn't care about the consequences of his or her actions.

Which file must be checked to ensure that users do not have null password in a Linux system?

When an attack is politically motivated, it is said to be...

Which one of the methods below will NOT defend against MAC Spoofing?