Hacker Tools, Techniques, Exploits and Incident Handling (SEC504) Practice Test

Questions # 91:

Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

Options:

Klez

Code red

SQL Slammer

Beast

Questions # 92:

Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to test the network security of the company. He created a webpage to discuss the progress of the tests with employees who were interested in following the test. Visitors were allowed to click on a company's icon to mark the progress of the test. Adam successfully embeds a keylogger. He also added some statistics on the webpage. The firewall protects the network well and allows strict Internet access.

How was security compromised and how did the firewall respond?

Options:

The attack was social engineering and the firewall did not detect it.

Security was not compromised as the webpage was hosted internally.

The attack was Cross Site Scripting and the firewall blocked it.

Security was compromised as keylogger is invisible for firewall.

Questions # 93:

You work as a System Engineer for Cyber World Inc. Your company has a single Active Directory domain. All servers in the domain run Windows Server 2008. The Microsoft Hyper-V server role has been installed on one of the servers, namely uC1. uC1 hosts twelve virtual machines. You have been given the task to configure the Shutdown option for uC1, so that each virtual machine shuts down before the main Hyper-V server shuts down. Which of the following actions will you perform to accomplish the task?

Options:

Enable the Shut Down the Guest Operating System option in the Automatic Stop Action Properties on each virtual machine.

Manually shut down each of the guest operating systems before the server shuts down.

Create a batch file to shut down the guest operating system before the server shuts down.

Create a logon script to shut down the guest operating system before the server shuts down.

Questions # 94:

Which of the following attacks is specially used for cracking a password?

Options:

PING attack

Dictionary attack

Vulnerability attack

DoS attack

Questions # 95:

Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?

Options:

Gathering private and public IP addresses

Collecting employees information

Banner grabbing

Performing Neotracerouting

Questions # 96:

Which of the following statements are true about netcat?

Each correct answer represents a complete solution. Choose all that apply.

Options:

It provides special tunneling, such as UDP to TCP, with the possibility of specifying all network parameters.

It can be used as a file transfer solution.

It provides outbound and inbound connections for TCP and UDP ports.

The nc -z command can be used to redirect stdin/stdout from a program.

Questions # 97:

Which of the following tools can be used to perform brute force attack on a remote database?

Each correct answer represents a complete solution. Choose all that apply.

Options:

SQLBF

SQLDict

FindSA

nmap

Questions # 98:

Which of the following password cracking attacks is based on a pre-calculated hash table to retrieve plain text passwords?

Options:

Rainbow attack

Brute Force attack

Dictionary attack

Hybrid attack

Viewing page 10 out of 10 pages

Viewing questions 91-100 out of questions

Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the SANS Certified Incident Handler SEC504 Questions and answers with ExamsMirror

Exam SEC504 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES