In _______ mechanism, the system or application sends log records either on the local disk or over the network.

• A.Host-based
• B.Network-based
• C.Pull-based
• D.Push-based

Comment: *

Name: *

Email: *

Verification: *

Which of the following protocols is used for inter-domain multicast routing and natively supports "source-specific multicast" (SSM)?

• A.BGMP
• B.DVMRP
• C.OSPF
• D.EIGRP

Comment: *

Name: *

Email: *

Verification: *

Which of the following tool is used for passive attacks to capture network traffic?

• A.Sniffer
• B.Intrusion prevention system
• C.warchalking
• D.Intrusion detection system
• E.None

Comment: *

Name: *

Email: *

Verification: *

Which of the following steps are required in an idle scan of a closed port?
Each correct answer represents a part of the solution. Choose all that apply.

• A.The attacker sends a SYN/ACK to the zombie.
• B.The zombie's IP ID increases by only 1.
• C.In response to the SYN, the target sends a RST.
• D.The zombie ignores the unsolicited RST, and the IP ID remains unchanged.
• E.The zombie's IP ID increases by 2.

Correct Answer: A,B,C,D

Following are the steps required in an idle scan of a closed port:
1.Probe the zombie's IP ID: The attacker sends a SYN/ACK to the zombie. The zombie, unaware of the SYN/ ACK, sends back a RST, thus disclosing its IP ID.

2.Forge a SYN packet from the zombie: In response to the SYN, the target sends a RST. The zombie ignores the unsolicited RST, and the IP ID remains unchanged.

3.Probe the zombie's IP ID again: The zombie's IP ID has increased by only 1 since step 1. So the port is closed.

Comment: *

Name: *

Email: *

Verification: *

Larry is responsible for the company's network consisting of 300 workstations and 25 servers. After using a hosted email service for a year, the company wants to control the email internally. Larry likes this idea because it will give him more control over the email. Larry wants to purchase a server for email but does not want the server to be on the internal network due to the potential to cause security risks. He decides to place the server outside of the company's internal firewall. There is another firewall connected directly to the Internet that will protect traffic from accessing the email server. The server will be placed between the two firewalls. What logical area is Larry putting the new email server into?

• A.Larry is going to put the email server in a hot-server zone.
• B.He will put the email server in an IPsec zone.
• C.He is going to place the server in a Demilitarized Zone (DMZ)
• D.For security reasons, Larry is going to place the email server in the company's Logical Buffer Zone (LBZ).

Comment: *

Name: *

Email: *

Verification: *