The tools which receive event logs from servers, network equipment, and applications, and perform analysis and correlation on those logs, and can generate alarms for security relevant issues, are known as what?

Reveal Solution Hide Solution

Password cracking programs reverse the hashing process to recover passwords. (True/False.)

Reveal Solution Hide Solution

Attacker creates a transparent ‘iframe’ in front of the URL which victim attempts to click, so victim thinks that he/she clicks to the ‘Do you want to make $1000 in a day?’ URL but actually he/she clicks to the content or URL that exists in the transparent ‘iframe’ which is setup by the attacker.

What is the name of the attack which is mentioned in the scenario?

Reveal Solution Hide Solution

Sarah, a system administrator, was alerted of potential malicious activity on the network of her company. She discovered a malicious program spread through the instant messenger application used by her team. The attacker had obtained access to one of her teammate’s messenger accounts and started sending files across the contact list.

Which best describes the attack scenario and what measure could have prevented it?

Reveal Solution Hide Solution

Todd has been asked by the security officer to purchase a counter-based authentication system.

Which of the following best describes this type of system?

Reveal Solution Hide Solution

A penetration tester is performing an enumeration on a client’s network. The tester has acquired permission to perform enumeration activities. They have identified a remote inter-process communication (IPC) share and are trying to collect more information about it. The tester decides to use a common enumeration technique to collect the desired data.

Which of the following techniques would be most appropriate for this scenario?

Reveal Solution Hide Solution

A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24.

Which of the following has occurred?

Reveal Solution Hide Solution

Sam, a web developer, was instructed to incorporate a hybrid encryption software program into a web application to secure email messages. Sam used an encryption software, which is a free implementation of the OpenPGP standard that uses both symmetric-key cryptography and asymmetric-key cryptography for improved speed and secure key exchange.

What is the encryption software employed by Sam for securing the email messages?

Reveal Solution Hide Solution

What is the proper response for a NULL scan if the port is closed?

Reveal Solution Hide Solution

In an attempt to damage the reputation of a competitor organization, Hailey, a professional hacker, gathers a list of employee and client email addresses and other related information by using various search engines, social networking sites, and web spidering tools. In this process, she also uses an automated tool to gather a list of words from the target website to further perform a brute-force attack on the previously gathered email addresses.

What is the tool used by Hailey for gathering a list of words from the target website?

Reveal Solution Hide Solution