During a black-box pen test you attempt to pass IRC traffic over port 80/TCP from a compromised web enabled host. The traffic gets blocked; however, outbound HTTP traffic is unimpeded. What type of firewall is inspecting outbound traffic?


A. Circuit
B. Stateful
C. Application
D. Packet Filtering

What is the process of logging, recording, and resolving events that take place in an organization?


A. Incident Management Process
B. Security Policy
C. Internal Procedure
D. Metrics

While scanning with Nmap, Patin found several hosts which have the IP ID of incremental sequences. He then decided to conduct: nmap Pn p sl kiosk.adobe.com www.riaa.com kiosk.adobe.com is the host with incremental IP ID sequence. What is the purpose of using -sl with Nmap?


A. Conduct stealth scan
B. Conduct ICMP scan
C. Conduct IDLE scan
D. Conduct silent scan

You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any any -> 192.168.100.0/24 21 (msg:FTP on the network!;)


A. A firewall IPTable
B. FTP Server rule
C. A Router IPTable
D. An Intrusion Detection System

During the security audit of IT processes, an IS auditor found that there were no documented security procedures. What should the IS auditor do?


A. Create a procedures document
B. Terminate the audit
C. Conduct compliance testing
D. Identify and evaluate existing practices

Analyst is investigating proxy logs and found out that one of the internal user visited website storing suspicious java scripts. After opening one of them, he noticed that it is very hard to understand the code and that all codes differ from the typical java script. What is the name of this technique to hide the code and extend analysis time?


A. Steganography
B. Code encoding
C. Obfuscation
D. Encryption

A pen-tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?


A. Winprom
B. Libpcap
C. Winpsw
D. Winpcap

The Open Web Application Security Project (OWASP) is the worldwide not-for-profit charitable organization focused on improving the security of software. What item is the primary concern on OWASPs Top Ten Project Most Critical Web Application Security Risks?


A. Cross Site Scripting
B. Injection
C. Path disclosure
D. Cross Site Request Forgery

Which of the following is not a Bluetooth attack?


A. Bluesnarfing
B. Bluedriving
C. Bluesmacking
D. Bluejacking

Which of the following parameters describe LM Hash:

I The maximum password length is 14 characters
II There are no distinctions between uppercase and lowercase
III The password is split into two 7-byte halves


A. II
B. I
C. I, II, and III
D. IandII