Hacker Tools, Techniques, Exploits and Incident Handling (SEC504) Practice Test

Questions # 81:

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. On the We-are-secure login page, he enters ='or''=' as a username and successfully logs in to the user page of the Web site.

The we-are-secure login page is vulnerable to a __________.

Options:

Dictionary attack

SQL injection attack

Replay attack

Land attack

Questions # 82:

Which of the following statements about a Trojan horse are true?

Each correct answer represents a complete solution. Choose two.

Options:

It is a macro or script that attaches itself to a file or template.

The writers of a Trojan horse can use it later to gain unauthorized access to a computer.

It is a malicious software program code that resembles another normal program.

It infects the boot record on hard disks and floppy disks.

Questions # 83:

Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

Options:

Fragroute

Absinthe

Stick

ADMutate

Questions # 84:

Which of the following applications is an example of a data-sending Trojan?

Options:

SubSeven

Senna Spy Generator

Firekiller 2000

eBlaster

Questions # 85:

Which of the following are the primary goals of the incident handling team?

Each correct answer represents a complete solution. Choose all that apply.

Options:

Freeze the scene.

Repair any damage caused by an incident.

Prevent any further damage.

Inform higher authorities.

Questions # 86:

Which of the following tools is used to download the Web pages of a Website on the local system?

Options:

wget

jplag

Nessus

Ettercap

Questions # 87:

Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of Cross-Site Scripting attack Ryan intends to do?

Options:

Non persistent

Document Object Model (DOM)

SAX

Persistent

Questions # 88:

You want to scan your network quickly to detect live hosts by using ICMP ECHO Requests. What type of scanning will you perform to accomplish the task?

Options:

Idle scan

TCP SYN scan

XMAS scan

Ping sweep scan

Questions # 89:

Which of the following functions can you use to mitigate a command injection attack?

Each correct answer represents a part of the solution. Choose all that apply.

Options:

escapeshellarg()

escapeshellcmd()

htmlentities()

strip_tags()

Questions # 90:

Your network is being flooded by ICMP packets. When you trace them down they come from multiple different IP addresses. What kind of attack is this?

Options:

Syn flood

Ping storm

Smurf attack

DDOS

Viewing page 9 out of 10 pages

Viewing questions 81-90 out of questions

Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the SANS Certified Incident Handler SEC504 Questions and answers with ExamsMirror

Exam SEC504 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES