How does an operating system protect the passwords used for account logins?


A. The operating system performs a one-way hash of the passwords.
B. The operating system stores the passwords in a secret file that users cannot find.
C. The operating system encrypts the passwords, and decrypts them when needed.
D. The operating system stores all passwords in a protected segment of non-volatile memory.

Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?


A. Netstat WMI Scan
B. Silent Dependencies
C. Consider unscanned ports as closed
D. Reduce parallel connections on congestion

A hacker, who posed as a heating and air conditioning specialist, was able to install a sniffer program in a switched environment network. Which attack could the hacker use to sniff all of the packets in the network?


A. Fraggle
B. MAC Flood
C. Smurf
D. Tear Drop

A hacker is attempting to see which IP addresses are currently active on a network. Which NMAP switch would the hacker use?


A. -sO
B. -sP
C. -sS
D. -sU

Which of the following open source tools would be the best choice to scan a network for potential targets?


A. NMAP
B. NIKTO
C. CAIN
D. John the Ripper

Which of the following parameters enables NMAP's operating system detection feature?


A. NMAP -sV
B. NMAP -oS
C. NMAP -sR
D. NMAP -O

What results will the following command yield: 'NMAP -sS -O -p 123-153 192.168.100.3'?


A. A stealth scan, opening port 123 and 153
B. A stealth scan, checking open ports 123 to 153
C. A stealth scan, checking all open ports excluding ports 123 to 153
D. A stealth scan, determine operating system, and scanning ports 123 to 153

Which command lets a tester enumerate alive systems in a class C network via ICMP using native Windows tools?


A. ping 192.168.2.
B. ping 192.168.2.255

C. for %V in (1 1 255) do PING 192.168.2.%V
D. for /L %V in (1 1 254) do PING -n 1 192.168.2.%V | FIND /I "Reply"

Which solution can be used to emulate computer services, such as mail and ftp, and to capture information related to logins or actions?


A. Firewall
B. Honeypot
C. Core server
D. Layer 4 switch

A security administrator notices that the log file of the companys webserver contains suspicious entries:

Based on source code analysis, the analyst concludes that the login.php script is vulnerable to

A. command injection.
B. SQL injection.
C. directory traversal.
D. LDAP injection.