ITN 260 EXAMINATION QUESTIONS
WITH ALL CORRECT ANSWERS
Which SQL injection statement example below could be used to discover the name of
the table? - Answer-whatever' AND 1=(SELECT COUNT(*) FROM tabname); --
When TCP/IP was developed, the host table concept was expanded into a hierarchical
name system for matching computer names and numbers using this service: - Answer-
DNS
Which SQL injection statement can be used to erase an entire database table? -
Answer-whatever'; DROP TABLE members
Cipher locks are sometimes combined with what type of sensor, which uses infrared
beams that are aimed across a doorway? - Answer-Tailgate sensors
Instead of trying to make a match, modern AV techniques are beginning to use a type of
detection that attempts to identify the characteristics of a virus. What is the name for this
technique? - Answer-heuristic detection
A spiked collar that extends horizontally for up to 3 feet from the pole is an example of
what kind of technology? - Answer-Anti-climb
Which of the following is not one of the types of settings that would be included in a
Microsoft Windows security template? - Answer-Resolution settings
On a compromised computer, you have found that a user without administrative
privileges was able to perform a task limited to only administrative accounts. What type
of exploit has occurred? - Answer-Privilege escalation
Select the tool below that consists of a system of security tools that is used to recognize
and identify data that is critical to an organization and ensure that it is protected: -
Answer-Data Loss Prevention
The exchange of information among DNS servers regarding configured zones is known
as: - Answer-zone transfer
What language below is for the transport and storage of data, with the focus on what the
data is? - Answer-XML
How can an attacker substitute a DNS address so that a computer is automatically
redirected to another device? - Answer-DNS poisoning
, What type of video surveillance is typically used by banks, casinos, airports, and military
installations, and commonly employs guards who actively monitor the surveillance? -
Answer-CCTV
Attacks that take place against web based services are considered to be what type of
attack? - Answer-Server Side
How can an area be made secure from a non-secured area via two interlocking doors to
a small room? - Answer-Using a mantrap
The default root directory of the Microsoft Internet Information Services (IIS) Web server
is located at which directory below? - Answer-C:\Inetpub\ wwwroot
Most DLP systems make use of what method of security analysis below? - Answer-
Content inspection
An independently rotating large cup affixed to the top of a fence prevents the hands of
intruders from gripping the top of a fence to climb over it. What is the name for this
technology? - Answer-roller barrier
What language below is used to view and manipulate data that is stored in a relational
database? - Answer-SQL
Which SQL statement represents a SQL injection attempt to determine the names of
different fields in a database? - Answer-whatever' AND email IS NULL; -
What is the name for a cumulative package of all patches and hotfixes as well as
additional features up to a given point? - Answer-service pack
What is the best way to prevent data input by a user from having potentially malicious
effects on software - Answer-Escaping user responses
Choose the SQL injection statement example below that could be used to find specific
users: - Answer-whatever' OR full_name LIKE '%Mia%':
What language below is designed to display data, with a primary focus on how the data
looks? - Answer-HTML
To what specific directory are users generally restricted to on a web server? - Answer-
ROOT
What type of device, sometimes called a packet filter, is designed to prevent malicious
network packets from entering or leaving computers or networks? - Answer-Firewall
WITH ALL CORRECT ANSWERS
Which SQL injection statement example below could be used to discover the name of
the table? - Answer-whatever' AND 1=(SELECT COUNT(*) FROM tabname); --
When TCP/IP was developed, the host table concept was expanded into a hierarchical
name system for matching computer names and numbers using this service: - Answer-
DNS
Which SQL injection statement can be used to erase an entire database table? -
Answer-whatever'; DROP TABLE members
Cipher locks are sometimes combined with what type of sensor, which uses infrared
beams that are aimed across a doorway? - Answer-Tailgate sensors
Instead of trying to make a match, modern AV techniques are beginning to use a type of
detection that attempts to identify the characteristics of a virus. What is the name for this
technique? - Answer-heuristic detection
A spiked collar that extends horizontally for up to 3 feet from the pole is an example of
what kind of technology? - Answer-Anti-climb
Which of the following is not one of the types of settings that would be included in a
Microsoft Windows security template? - Answer-Resolution settings
On a compromised computer, you have found that a user without administrative
privileges was able to perform a task limited to only administrative accounts. What type
of exploit has occurred? - Answer-Privilege escalation
Select the tool below that consists of a system of security tools that is used to recognize
and identify data that is critical to an organization and ensure that it is protected: -
Answer-Data Loss Prevention
The exchange of information among DNS servers regarding configured zones is known
as: - Answer-zone transfer
What language below is for the transport and storage of data, with the focus on what the
data is? - Answer-XML
How can an attacker substitute a DNS address so that a computer is automatically
redirected to another device? - Answer-DNS poisoning
, What type of video surveillance is typically used by banks, casinos, airports, and military
installations, and commonly employs guards who actively monitor the surveillance? -
Answer-CCTV
Attacks that take place against web based services are considered to be what type of
attack? - Answer-Server Side
How can an area be made secure from a non-secured area via two interlocking doors to
a small room? - Answer-Using a mantrap
The default root directory of the Microsoft Internet Information Services (IIS) Web server
is located at which directory below? - Answer-C:\Inetpub\ wwwroot
Most DLP systems make use of what method of security analysis below? - Answer-
Content inspection
An independently rotating large cup affixed to the top of a fence prevents the hands of
intruders from gripping the top of a fence to climb over it. What is the name for this
technology? - Answer-roller barrier
What language below is used to view and manipulate data that is stored in a relational
database? - Answer-SQL
Which SQL statement represents a SQL injection attempt to determine the names of
different fields in a database? - Answer-whatever' AND email IS NULL; -
What is the name for a cumulative package of all patches and hotfixes as well as
additional features up to a given point? - Answer-service pack
What is the best way to prevent data input by a user from having potentially malicious
effects on software - Answer-Escaping user responses
Choose the SQL injection statement example below that could be used to find specific
users: - Answer-whatever' OR full_name LIKE '%Mia%':
What language below is designed to display data, with a primary focus on how the data
looks? - Answer-HTML
To what specific directory are users generally restricted to on a web server? - Answer-
ROOT
What type of device, sometimes called a packet filter, is designed to prevent malicious
network packets from entering or leaving computers or networks? - Answer-Firewall
