Which of the following is a restriction being enforced in white box testing?


A. Only the internal operation of a system is known to the tester
B. The internal operation of a system is completely known to the tester
C. The internal operation of a system is only partly accessible to the tester
D. Only the external operation of a system is accessible to the tester

Which specific element of security testing is being assured by using hash?


A. Authentication
B. Integrity
C. Confidentiality
D. Availability

Which of the following is a wireless network detector that is commonly found on Linux?


A. Kismet
B. Abel
C. Netstumbler
D. Nessus

What would you type on the Windows command line in order to launch the Computer Management Console provided that you are logged in as an admin?


A. c:compmgmt.msc
B. c:gpedit
C. c:ncpa.cpl
D. c:services.msc

A software tester is randomly generating invalid inputs in an attempt to crash the program. Which of the following is a software testing technique used to determine if a software program properly handles a wide range of invalid input?


A. Mutating
B. Randomizing
C. Fuzzing
D. Bounding

Which of the following is designed to verify and authenticate individuals taking part in a data exchange within an enterprise?


A. SOA
B. Single-Sign On
C. PKI
D. Biometrics

This configuration allows NIC to pass all traffic it receives to the Central Processing Unit (CPU), instead of passing only the frames that the controller is intended to receive. Select the option that BEST describes the above statement.


A. Multi-cast mode
B. WEM
C. Promiscuous mode
D. Port forwarding

A new wireless client that is 802.11 compliant cannot connect to a wireless network given that the client can see the network and it has compatible hardware and software installed. Upon further tests and investigation it was found out that the Wireless Access Point (WAP) was not responding to the association requests being sent by the wireless client. What MOST likely is the issue on this scenario?


A. The client cannot see the SSID of the wireless network
B. The WAP does not recognize the clients MAC address.
C. The wireless client is not configured to use DHCP.
D. Client is configured for the wrong channel

Which of the following is the BEST way to protect Personally Identifiable Information (PII) from being exploited due to vulnerabilities of varying web applications?


A. Use cryptographic storage to store all PII
B. Use full disk encryption on all hard drives to protect PII
C. Use encrypted communications protocols to transmit PII
D. Use a security token to log into all Web applications that use PII

A possibly malicious sequence of packets that were sent to a web server has been captured by an Intrusion Detection System (IDS) and was saved to a PCAP file. As a network administrator, you need to determine whether this packets are indeed malicious.
What tool are you going to use?


A. Intrusion Prevention System (IPS)
B. Vulnerability scanner
C. Protocol analyzer
D. Network sniffer