When you are collecting information to perform a data analysis, Google commands are very useful to find sensitive information and files. These files may contain information about passwords, system functions, or documentation. What command will help you to search files using Google as a search engine?


A. site: target.com filetype:xls username password email
B. domain: target.com archieve:xls username password email
C. inurl: target.com filename:xls username password email
D. site: target.com file:xls username password email

This phase will increase the odds of success in later phases of the penetration test. It is also the very first step in Information Gathering and it will tell you the landscape looks like.
What is the most important phase of ethical hacking in which you need to spend a considerable amount of time?


A. network mapping
B. footprinting
C. escalating privileges
D. gaining access

You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions. Which command-line utility are you most likely to use?


A. Relational Database
B. MS Excel
C. Notepad
D. Grep

You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it. What tool will help you with the task?


A. Armitage
B. DMitry
C. Metagoofil
D. cdpsnarf

Which command can be used to show the current TCP/IP connections?


A. Netsh
B. Net use connection
C. Netstat
D. Net use

You are performing a penetration test for a client and have gained shell access to a Windows machine on the internal network. You intend to retrieve all DNS records for the internal domain. If the DNS server is at 192.168.10.2 and the domain name is abccorp.local, what command would you type at the nslookup prompt to attempt a zone transfer?


A. list domain=abccorp.local type=zone
B. Is d accorp.local
C. list server=192.168.10.2 type=all
D. Iserver 192.168.10.2 t all

Which of the following statements is FALSE with respect to Intrusion Detection Systems?


A. Intrusion Detection Systems can easily distinguish a malicious payload in an encrypted traffic
B. Intrusion Detection Systems can examine the contents of the data in context of the network protocol
C. Intrusion Detection Systems can be configured to distinguish specific content in network packets
D. Intrusion Detection Systems require constant update of the signature library

What is the purpose of DNS AAAA record?


A. Address prefix record
B. Address database record
C. Authorization, Authentication and Auditing record
D. IPv6 address resolution record

An LDAP directory can be used to store information similar to a SQL database. LDAP uses a ____ database structure instead of SQLs ______ structure. Because of this, LDAP has difficulty representing many-to-one relationships.


A. Strict, Abstract
B. Simple, Complex
C. Relational, Hierarchical
D. Hierarchical, Relational

>NMAP sn 192.168.11.200-215 The NMAP command above performs which of the following?


A. A port scan
B. A ping scan
C. An operating system detect
D. A trace sweep