Nursingismylife

Through which of the following can port scans gain information about Windows IPC administrative share information? A.NULL Sessions B. Telnet C. Web browser D. Social Engineering - ANSWERNull Sessions NetBIOS enumeration can allow ___________. A. Registry enumeration B. Trusted domain enumeration C. User enumeration D. All of the above - ANSWERAll of the above

You get a phone call from someone telling you they are from the IRS and they are sending the police to your house now to arrest you unless you provide a method of payment immediately. What tactic is the caller using? 1. Pretexting 2. Biometrics 3. Smishing 4. Rogue access - ANSWER1. Pretexting Biometrics is the use of a physical attribute to provide authentication. Smishing is using short message service (SMS/texting) to gather information from people. Rogue access isn't really anyth...

insecure application. - ANSWERAn application designed without security devices is considered a(n): are faster than manual methods - ANSWERAutomated methods for obtaining network range information Traceroute - ANSWERWhich of the following refers to a software program used to determine the path a data packet traverses to get to a specific IP address? Whois - ANSWERWhich of the following refers to is the protocol designed to query databases to look up and identify the registrant of a domai...

To remove malware from the network before it gets to the endpoint, you would use which of the following? Packet filter Application layer gateway Unified threat management appliance Stateful firewall - ANSWERC. Packet filters are used to make block/allow decisions based on header data like source and destination address and port. Stateful firewalls add in the ability to factor in the state of the connection—new, related, established. An Application layer gateway knows about Application la...

What are the two types of wireless networks? 1. Star and ring 2. Bus and hybrid 3. Infrastructure and hybrid 4. Infrastructure and ad hoc - ANSWER4. Infrastructure and ad hoc An infrastructure wireless network is one that uses an access point. An ad hoc wireless network is one organized by the participants. These are the two types of wireless networks. Star, ring, bus, and hybrid are all wired topologies. How many stages are used in the WPA handshake? 1. Two 2. Four 3. Three 4....

Countermeasures that an organization can take regarding protecting domain information include: - ANSWEREmploying a commonly available proxy service to block the access of sensitive domain data. Cryptography provides an invaluable service to security by providing all of the following except: - ANSWERthe ability to hack into systems and remain undetected. Which of the following terms refers to the process of positively identifying a party as a user, computer, or service? - ANSWERAuthenticati...

What are the types of software forensic tools? - ANSWERcommand line applications GUI applications What are commonly used to copy data from a suspect's disk drive to an image file? - ANSWERsoftware forensic tools Where are the stored hashes for passwords in Windows found? - ANSWERHKEY_LOCAL_MACHINESAM Where does Mac OS store passwords? - ANSWERkeychain Where does linux store passwords? - ANSWER/etc/shadow 1. Which of the following is not a graphic file type? a. Bitmap gr...

A Trojan horse is an example of malicious code. - ANSWERTrue Denial of service (DoS) attacks overload a system's resources so it cannot provide the required services. - ANSWERTrue Intrusion detection systems (IDS) and intrusion prevention systems (IPS) are considered physical controls. - ANSWERFalse Inside attacks against an organization do not cause a serious threat because they are rarely effective. - ANSWERFalse White-hat hackers are sometimes referred to as ethical hackers. - ...

Ethical hacker - ANSWERHired by companies to perform penetration tests Penetration test - ANSWERAttempt to break into a company's network to find the weak links Vulnerability assessment - ANSWERTester attempts to enumerate all vulnerabilities found in an application or system Certified Ethical Hacker (CEH) - ANSWERDeveloped by the International Council of Electronic Commerce Consultants (EC-Council). Most likely to be placed on a team that conducts penetration tests. Red team - AN...

the end or clearing of a connection. - ANSWERA packet flagged with the FIN flag signals: Wardialing - ANSWERA technique that has existed for more than 25 years as a footprinting tool and involves the use of modems is called: Scanrand - ANSWERWhich of the following is unique among network scanners because it scans ports in parallel using what is known as stateless scanning? THC-Amap - ANSWERWhich of the following excels at allowing the security professional to find services that have bee...

An acronym for Create, Read/Report, Update, and Delete; a technique to validate or refine use cases - ANSWERCRUD technique A unique set of internal activities within a use case - ANSWERScenarios or use case instance A representation of the period during which a method of an object is alive and executing is called ____. - ANSWERactivation lifeline ___ is a relationship between packages, classes, or use cases in which a change in the independent item requires a change in the dependent ite...

The 802.11n standard uses a new method of transmitting signals, which can transmit multiple signals across multiple antennas. This new method of transmitting signals is called: - ANSWERmultiple input and multiple output (MIMO) Which of the following is NOT a countermeasure to threats against wireless LANs? - ANSWERPromiscuous clients Which of the following is used to make calls or send text messages from the targeted device? - ANSWERBluebugging

Ryan received a security audit that included a finding that the organization lacked sufficient physical controls in its security program. What action is Ryan most likely to take? a) Install a new firewall b) Upgrade an existing fence c) Enhance an existing policy d) Upgrade existing encryption - ANSWERUpgrade an existing fence Which hacking methodology is defined as an attacker wanting to cover their tracks by erasing any traces of their presence in the target system? a) Assault b) Exfi...

A fence that is at least __________ in height presents a psychological deterrent to most potential intruders. - ANSWER8 feet A bollard is used as a physical security control against which of the following? - ANSWERAutomobiles What is an intrusion detection system used exclusively in conjunction with fences? - ANSWERPIDAS A type 2 error is also known as what? - ANSWERFalse acceptance rate Which type of biometric system is frequently found on laptops? - ANSWERFinger scan

Domain Name Service (DNS) - ANSWERA hierarchical system of servers and services specifically designed to translate IP addresses into domain names (forward lookups) as well as the reverse (reverse lookups) is called denial of service attack - ANSWERAn attack in which a service is overwhelmed by traffic preventing or denying its legitimate use is called a A firewall - ANSWERWhich of the following regulates the flow of traffic between different networks?

Which of these devices would not be considered part of the Internet of Things? Smartphone Thermostat Light bulb Set-top cable box - ANSWERA. A thermostat is an embedded device without a traditional user interface. A light bulb would have no user interface, even if it has network capabilities. A set-top cable box would have a custom interface and not a general-purpose one. The only device here that is a general-purpose computing platform with a traditional user interface—screen and keyboa...

Which of the following is a penetration testing framework? A. TKIP B. HIPAA C. RFC 1087 D. NIST 800-53 - ANSWERD. NIST 800-53 Which of the following is a corporate governance law that affects public corporations' financial reporting? A. SOX B. HIPAA C. FISMA D. NIST 800-53 - ANSWERA. SOX

If you receive a RST (reset) packet back from a target host, what do you know about your target? 1. The target is using UDP rather than TCP. 2. The destination port is open on the target host. 3. The source port in the RST message is closed. 4. The target expects the PSH flag to be set. - The source port in the RST message is closed. What is the difference between a SYN scan and a full connect scan? 1. A SYN scan and a full connect scan are the same. 2. A full connect scan sends an ...

What type of penetration testing is most often used when an organization wants to closely simulate how an attacker views a system? - ANSWERBlack-box testing Denial of service (DoS) and distributed denial of service (DDoS) attacks have the same effect; however, a distributed denial of service (DDos) attack: - ANSWERis launched from large numbers of hosts that have been compromised and act after receiving a particular command. Which of the following terms refers to the ability to verify that...

Which of the following is a penetration testing framework? - ANSWERNist 800-53 Which of the following is a corporate governance law that affects public corporations' financial reporting? - ANSWERSOX In which of the following phases does an attacker passively acquire information about the intended victim's systems? - ANSWERFootprinting Which of the following is a common application layer attack? - ANSWERMalware Which of the following biometric authentication methods is most freq...