CSCI 6250 - Module 1

What is an OSCP?

EC-Council has developed a cert; multiple-choice; based on 22 domains

As a security tester, what should you do before installing hacking software on your computer?

Which federal law amended Chapter 119 of Title 18, U.S. Code?

Relies on creativity, knowledge of best practices, legal issues, client rules, threats, and security risks.

SANS Institute offers IT security training and certifications through Global Information Assurance Certification (GIAC).

What organization offers the PenTest+ certification exam?

Some hackers are skillful computer experts, but others are younger, inexperienced people who experienced hackers call

A team that conducts penetration tests.

A written contract isn’t necessary when a friend recommends a client.

The U.S. Department of Justice defines a hacker as which of the following?

Which organization issues the Top 25 list of software errors?

Which federal law prohibits intercepting any communication, regardless of how it was transmitted?

Management doesn't tell staff that pen testing is taking place & tester doesn't get any diagrams/describe company tech

What three models do penetration or security testers use to conduct tests?

Both penetration testers and security testers need _ skills to perform their duties effectively.

Before using hacking software over the Internet, you should contact which of the following?

A person who hacks computer systems for political or social reasons

How can you find out which computer crime laws are applicable in your state?

In a _, the tester attempts to enumerate all the vulnerabilities found in an application or on a system.

A security tester should have which of the following attributes?

A penetration tester is which of the following?

Which advanced cert tests hands-on skills with exploits, scripting, buffer overflows, and attacking vulnerable systems?

You should also read your ISP contract, specifically the section titled “Acceptable Use Policy” or something similar.

Which federal law prohibits intercepting any communication, regardless of how it was transmitted?

Tester is told network topology & technology company is using & is given permission to interview IT personnel & company

Testers use _ to detect computing devices on a network and itemize the services they offer.

_ might only want to prove how vulnerable a system is by accessing the computer or network without destroying any data.

If your program in NYC blocks user access to network resources, what law have you violated?

What is the Budapest Convention?

Advanced cert proving skills to scope assessments, follow laws, scan, test, analyze data, and report results clearly.

A _ accesses a computer system or network without the authorization of the systems owner.

As a security tester, you can’t make a network impenetrable.

A team composed of people with varied skills who attempt to penetrate a network is called which of the following?

By Institute for Security and Open Methodologies (ISECOM); uses open Source Security Testing Methodology Manual (OSSTMM)

What is done first to identify targets for penetration testing.

Company gives the tester only partial information. hybrid of the white and black box models.

Companies sometimes hire _ to conduct penetration tests.

In a _, an ethical hacker attempts to break into a company’s network or applications to find weak links.

In a _, testers break in, analyze security policies, and report vulnerabilities to management.

What portion of your ISP contract might affect your ability to conduct a penetration test over the Internet?

Those who break into systems to steal or destroy data are often referred to as _

Which federal law prohibits unauthorized access of classified information?

You do not need to keep up with laws involving computer tech.

Covers: Professional, Enumeration, Assessments, Application, Verification

What organization offers the CEH certification exam?

If you're hired as an independent contractor for security testing, draw up a contract with the client.

Issued by ISC²; become one of the standards for many security professionals; tests security-related managerial skills

Skills a security tester needs are:

Experienced hackers refer to inexperienced hackers who copy/use prewritten scripts/programs as which of the following?