Which one of the following Google advanced search operators allows an attacker to restrict the results to those websites in the given domain?


A. [cache:]
B. [site:]
C. [inurl:]
D. [link:]

The collection of potentially actionable, overt, and publicly available information is known as


A. Open-source intelligence
B. Human intelligence
C. Social intelligence
D. Real intelligence

Code injection is a form of attack in which a malicious user:


A. Inserts text into a data field that gets interpreted as code
B. Gets the server to execute arbitrary code using a buffer overflow
C. Inserts additional code into the JavaScript running in the browser
D. Gains access to the codebase on the server and inserts new code

Which of the following will perform an Xmas scan using NMAP?


A. nmap -sA 192.168.1.254
B. nmap -sP 192.168.1.254
C. nmap -sX 192.168.1.254
D. nmap -sV 192.168.1.254

You need a tool that can do network intrusion prevention and intrusion detection, function as a network sniffer, and record network activity. What tool would you most likely select?


A. Snort
B. Nmap
C. Cain & Abel
D. Nessus

The establishment of a TCP connection involves a negotiation called three-way handshake. What type of message does the client send to the server in order to begin this negotiation?


A. ACK
B. SYN
C. RST
D. SYN-ACK

What is attempting an injection attack on a web server based on responses to True/False questions called?


A. DMS-specific SQLi
B. Compound SQLi
C. Blind SQLi
D. Classic SQLi

Bob, your senior colleague, has sent you a mail regarding aa deal with one of the clients. You are requested to accept the offer and you oblige.
After 2 days, Bob denies that he had ever sent a mail.
What do you want to know to prove yourself that it was Bob who had send a mail?


A. Confidentiality
B. Integrity
C. Non-Repudiation
D. Authentication

You are attempting to run an Nmap port scan on a web server. Which of the following commands would result in a scan of common ports with the least amount of noise in order to evade IDS?


A. nmap -A -Pn
B. nmap -sP -p-65535 -T5
C. nmap -sT -O -T0
D. nmap -A –host-timeout 99 -T1

The following is part of a log file taken from the machine on the network with the IP address of 192.168.0.110:

What type of activity has been logged?


A. Teardrop attack targeting 192.168.0.110
B. Denial of service attack targeting 192.168.0.105
C. Port scan targeting 192.168.0.110
D. Port scan targeting 192.168.0.105