Pass the SANS Certified Incident Handler SEC504 Questions and answers with ExamsMirror

Which of the following functions in c/c++ can be the cause of buffer overflow?

Each correct answer represents a complete solution. Choose two.

In which of the following attacks does an attacker spoof the source address in IP packets that are sent to the victim?

Which of the following can be used to perform session hijacking?

Each correct answer represents a complete solution. Choose all that apply.

You work as a Network Penetration tester in the Secure Inc. Your company takes the projects to test the security of various companies. Recently, Secure Inc. has assigned you a project to test the security of a Web site. You go to the Web site login page and you run the following SQL query:

SELECT email, passwd, login_id, full_name

FROM members

WHERE email = 'attacker@somehwere.com'; DROP TABLE members; --'

What task will the above SQL query perform?

Which of the following nmap command parameters is used for TCP SYN port scanning?

Against which of the following does SSH provide protection?

Each correct answer represents a complete solution. Choose two.

Which of the following are the automated tools that are used to perform penetration testing?

Each correct answer represents a complete solution. Choose two.

Which of the following penetration testing phases involves reconnaissance or data gathering?

Which of the following US Acts emphasized a "risk-based policy for cost-effective security" and makes mandatory for agency program officials, chief information officers, and inspectors general (IGs) to conduct annual reviews of the agency's information security program and report the results to Office of Management and Budget?

Which of the following is the process of comparing cryptographic hash functions of system executables and configuration files?