Internet Protocol Security IPSec is actually a suite of protocols. Each protocol within the suite provides different functionality. Collective IPSec does everything except.


A. Protect the payload and the headers
B. Authenticate
C. Encrypt
D. Work at the Data Link Layer

The establishment of a TCP connection involves a negotiation called 3 way handshake. What type of message sends the client to the server in order to begin this negotiation?


A. RST
B. ACK
C. SYN-ACK
D. SYN

Which of the following is a passive wireless packet analyzer that works on Linux-based systems?


A. Burp Suite
B. OpenVAS
C. tshark
D. Kismet

You want to do an ICMP scan on a remote computer using hping2. What is the proper syntax?


A. hping2 host.domain.com

B. hping2 –set-ICMP host.domain.com
C. hping2 -i host.domain.com
D. hping2 -1 host.domain.com

Which Metasploit Framework tool can help penetration tester for evading Anti-virus Systems?


A. msfpayload
B. msfcli
C. msfencode
D. msfd

Which of the following Nmap commands will produce the following output?

Output:


A. nmap -sN -Ps -T4 192.168.1.1
B. nmap -sT -sX -Pn -p 1-65535 192.168.1.1
C. nmap -sS -Pn 192.168.1.1
D. nmap -sS -sU -Pn -p 1-65535 192.168.1.1

In cryptanalysis and computer security, 'pass the hash' is a hacking technique that allows an attacker to authenticate to a remote server/service by using the underlying NTLM and/or LanMan hash of a user's password, instead of requiring the associated plaintext password as is normally the case.
Metasploit Framework has a module for this technique: psexec. The psexec module is often used by penetration testers to obtain access to a given system that you already know the credentials for. It was written by sysinternals and has been integrated within the framework. Often as penetration testers, successfully gain access to a system through some exploit, use meterpreter to grab the passwords or other methods like fgdump, pwdump, or cachedump and then utilize rainbowtables to crack those hash values.

Which of the following is true hash type and sort order that is using in the psexec module's 'smbpass'?


A. NT:LM
B. LM:NT
C. LM:NTLM
D. NTLM:LM

Which protocol is used for setting up secured channels between two devices, typically in VPNs?


A. IPSEC
B. PEM
C. SET
D. PPP

Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it begins to close.

What just happened?


A. Phishing
B. Whaling
C. Tailgating
D. Masquerading

You're doing an internal security audit and you want to find out what ports are open on all the servers. What is the best way to find out?


A. Scan servers with Nmap
B. Physically go to each server
C. Scan servers with MBSA
D. Telent to every port on each server