Boot Camp Exam

___ scanning is scanning that can be conducted, but blamed on another attacker.

The ___ is a targeted phishing attack aimed at specific individuals within the organization.

_ offers development tools, conifiguration management, and deployment platforms to develop apps

This hacker, hacks and doesn't care about the consequences of his or her actions.

You conduct a UDP scan to an open port. What response do you expect to return?

Calculate the number of keys required for N = 10

The port(s) normally used with Satan's Back Door is(are)

What is HTML encoding sign for ampersand?

Untethered jailbroken phones have un-patched kernals; may get stuck in a partial started state

Which type of attack is displayed in the code below? http://www.badsite.com/../../etc/password

Which attack makes use of an already authenticated connection?

This attack uses an excessive amount of UDP packets to overwhelm a target and DoS it.

The ___ virus uses code around the virus execution code to protect the malicious instructions.

This law has 5 subsections and addresses safe handling of medical and health patient records

Which net command listed below shows all systems in the domain name provided?

What is the first step of the 3-part TCP Handshake to establish a connection.

What is a collision attack in cryptography?

The __ of the Wireshark interface shows data in a hexdump format.

This is a protocol based Trojan that uses the ping protocol to covertly share information.

Which of the following is a countermeasure to ARP spoofing?

Which processs evaluates the adherence of an organization to its security policy?

Examine the code in the figure. What type of attack is being leveraged in the code?

Which command executes an ICMP (Ping) scan

Which Google hack operator can't be mixed with other google hack operators?

What type of attack is described below?

The Resource Identifier (RID) is a part of the Security Identifier (SID)

What part of the TCP 3-way connection is listed below?

Which of the following attacks is a DoS attack on a bluetooth device?

What character is the best choice to start an SQL Injection attempt?

What type of traffic traditionally travels over TCP port 443?

_____ is another term for "bricking" a system which causes permanent damage to a system.

Which of the following is true about the SNMP community strings?

What nmap scan requires root level privileges?

Where is the SAM file located?

You have compromised a server at 10.10.0.5. To enumerate all machines on that network use ___.

This malware encrypts your data demands bitcoins for you to unlock your data.

An hacker waits for an employee to enter a building and follows them in after speaking to them.

Snow is a __ type of application.

Installing Trojans is associated with what part of hacking process?

Review the figure below. Select the correct assesment of the nbtstat screenshot.

The best defense against any type of sniffing is...

Which of the following is not a Risk Management Strategy?

What meterpreter command elevates your privileges after you have spawned a shell?

Port 53 is associated with what service traditionally?

What attack is # 1 on OWASPs Web and Webserver attacks?

After a DHCP rate limit message max threshold is crossed, what occurs?

What happens when a switch's CAM table is full?

Elements of security can be broken down into..

Which Linux folder holds the password and shadow files?

What password cracking method takes the most time, effort, and processing costs?

What's an application sandbox?

What ICMP code is associated with the response from the ping command below?

A brute force attack can eventually break any cipher

A _ is an entity that can damage a system through unauthorized access, or destruction.

Command to set all privileges the user, read/write to group, and read only to all others?

What is the standard for digital certificates in a PKI System?

You are on as an admin on a Win 10 machine. To launch the computer mangement console you..

____ running on Mac OS X, can be used to brute-force WEP or WPA passwords.

Which of the following is an example of multi-factor authentication?

XOR the two strings in the image shown.

Sniffing occurs at layer ____ of the OSI model.

___ is the IT security principle that ensures data is only viewable by authorized users.

What is the appropriate response to go inside the red box for the figure below?

When an attack is politically motivated, it is said to be...

An NMAP scan of a network shows that port 445 is open on the machines. What risk does this pose

What are the three types of scanning?

Which file must be checked to ensure that users do not have null password in a Linux system?

SNMP TRAP is normally associated with what port?

An attacker has full knowledge of the target system. What type hack is he or she going to do

This law deals with e-commerce and electronic financial transaction standards and regulations.

A __ virus overwrites a part of the host file and doesn't increase the size of the file.

Systems that make use of two or more access control mechanisms are known as having ___

Using Pop-up windows to get a user to click the the pop up and download malware is a ____

PGP, IKE, and SSL are all examples of what type of cryptography?

Which Wireshark filter shows all packets containing the word password

______ is the method of hiding a small or narrowband signal in a larger cover signal.

In this attack the hacker only has access to ciphertext and can brute force or freq analysis.

What is the most dangerous type of rootkit?

What is a Trojan Wrapper?

Snort can be used as both an IDS and IPS.

Which one of the methods below will NOT defend against MAC Spoofing?

Which one of the programs listed below is NOT capable of conducting an integrity check?

The implicit deny at the end of access list statements blocks any traffic not in the filter.

You need to capture, decode, and extract voice traffic data. What software can do this?

A protocol that uses Diffie Helman to create IPSec session data transfer keys

Which activity ensures IT system Integrity?

A TCP datagram has the FIN, URG, and PSH flags. What would be the binary value for the packet?

Name resolvers answer requests and hold records.

In ____ a large number of malicious packets are crafted to confuse the IDS and hide real attack

Within a PKI system, which of the following generates keys?

Passive sniffing means sniffing using a hub, because all traffic is passed to all ports.

What type of NID detects a spike in traffic during off-duty hours and sends as alert?

In the TCP Hijack Attack, the attacker doesn't have to be on the same network as the victim.

Purchasing insurance lowering a cyber risk profile rating is a Risk _ risk management mechanism

You conducted a SYN scan. A RST/ACK was returned. What is the status of the port?

Which virus evades detection by rewriting its code?

__ attacks exploit web page vulnerabilities allowing attackers to send unsolicited requests.

Another term for firewalking-externally testing ports on a firewall by generating a connections

This type of firewall filters traffic based on session rules only.

In this attack, the attacker name drops a VIPs name in order to gain access to the system/info

Which one of the commands listed below is not a SQL Command?

This DNS record type maps an alias to a FQDN.

A ___ trojan gives the attacker remote control over a spawned shell on a victim's computer.

>nmap -sn 192.168.1.13-199

Who has the authority to frame an access policy in a DAC system?

You are configuring a Wireshark filter and want to look at all NTP packets. You should...

The well-known ports are...

What's a bootrom exploit?

How does ARP work?

Review the scenario below and provide your answer.

A dictionary attack uses pre-computed hashes

Which one of the following is NOT a hashing algorithm?

Which if the following is a preventive control?

You are deploying a remote access solution.What should be used to reduce potential MITM attacks

This type of Intrusion detection mechanism is based on recognizing system behavior deviations.

Which of the following Wireless Standard/distance is NOT correct?

Which algorithm outputs a 160-bit value?

Which command more than likely generated the results below?

A _ attack occurs when an application writes more data than is allocated to a target program.

Which threat presents the highest risk to a target network or resource?

Read the question below and provide your selected port below.

Which SQL command is used retrieve information from a RDBMS?

This tool is used to assess and if required penetration test (attack) web servers.

Which ICMP Error Message means that ICMP communications are administratively prohibited?

What is the most important part of the hacking process that will take the most time?