Exam Dumps VCE

Q32. Which of the following is the method of hiding data within another media type such as graphic or document?

Q33. Adam is a novice Web user. He chooses a 22 letters long word from the dictionary as his password. How long will it
take to crack the password by an attacker?

Q34. Which of the following is a process of searching unauthorized modems?

Q35. Which of the following Incident handling process phases is responsible for defining rules, collaborating human
workforce, creating a back-up plan, and testing the plans for an enterprise?

Q36. Which of the following attacks capture the secret value like a hash and reuse it later to gain access to a system without ever decrypting or decoding the hash?

Q37. Which of the following languages are vulnerable to a buffer overflow attack?
Each correct answer represents a complete solution. Choose all that apply.

Q38. Brutus is a password cracking tool that can be used to crack the following authentications:
l HTTP (Basic Authentication)
l HTTP (HTML Form/CGI)
l POP3 (Post Office Protocol v3)
l FTP (File Transfer Protocol)
l SMB (Server Message Block)
l Telnet
Which of the following attacks can be performed by Brutus for password cracking?
Each correct answer represents a complete solution. Choose all that apply.

Q39. Which of the following protocols uses only User Datagram Protocol (UDP)?

Q40. When you conduct the XMAS scanning using Nmap, you find that most of the ports scanned do not give a response. What can be the state of these ports?

Q41. John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He finds that the We-are-secure server is vulnerable to attacks. As a countermeasure, he suggests that the Network Administrator should remove the IPP printing capability from the server. He is suggesting this as a countermeasure against __________.

Q42. Which of the following penetration testing phases involves reconnaissance or data gathering?

Q43. You are monitoring your network’s behavior. You find a sudden increase in traffic on the network. It seems to come in
bursts and emanate from one specific machine. You have been able to determine
that a user of that machine is unaware of the activity and lacks the computer knowledge required to be responsible
for a computer attack. What attack might this indicate?

Q44. Which of the following types of attacks is only intended to make a computer resource unavailable to its users?

Q45. John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He wants to perform a stealth scan to discover open ports and applications running on the We-are-secure server. For this purpose, he wants to initiate scanning with the IP address of any third party. Which of the following scanning techniques will John use to accomplish his task?

Q46. You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. An attacker uses software that keeps trying password combinations until the correct password is found. Which type of attack is this?

Q47. Which of the following malicious software travels across computer networks without the assistance of a user?

Q48. Which of the following is a type of computer security vulnerability typically found in Web applications that allow code injection by malicious Web users into the Web pages viewed by other users?

Q49. Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

Q50. John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-
secure.com. He performs Web vulnerability scanning on the We-are-secure server. The output of the scanning test is
as follows:
C:whisker.pl -h target_IP_address
— whisker / v1.4.0 / rain forest puppy / www.wiretrip.net — = – = – = – = – =
= Host: target_IP_address
= Server: Apache/1.3.12 (Win32) ApacheJServ/1.1
mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22
+ 200 OK: HEAD /cgi-bin/printenv
John recognizes /cgi-bin/printenv vulnerability (‘Printenv’ vulnerability) in the We_are_secure server. Which of the
following statements about ‘Printenv’ vulnerability are true?
Each correct answer represents a complete solution. Choose all that apply.

Q51. OutGuess is used for __________ attack.

Q52. Which of the following types of attacks is targeting a Web server with multiple compromised computers that are simultaneously sending hundreds of FIN packets with spoofed IP source IP addresses?