Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

• A.Use a system that is not directly interacting with the router
• B.Use it on a system in an external DMZ in front of the firewall
• C.Use a system that has a dynamic addressing on the network
• D.It doesn't matter as all replies are faked

Comment: *

Name: *

Email: *

Verification: *

Jason has set up a honeypot environment by creating a DMZ that has no physical or logical access to his production network. In this honeypot, he has placed a server running Windows Active Directory. He has also placed a Web server in the DMZ that services a number of web pages that offer visitors a chance to download sensitive information by clicking on a button. A week later, Jason finds in his network logs how an intruder accessed the honeypot and downloaded sensitive information. Jason uses the logs to try and prosecute the intruder for stealing sensitive corporate information. Why will this not be viable?

• A.Intruding into a DMZ is not illegal
• B.Intruding into a honeypot is not illegal
• C.Enticement
• D.Entrapment

Comment: *

Name: *

Email: *

Verification: *

A(n) _____________________ is one that's performed by a computer program rather than the attacker manually performing the steps in the attack sequence.

• A.distributed attack
• B.blackout attack
• C.automated attack
• D.central processing attack

Comment: *

Name: *

Email: *

Verification: *

A small law firm located in the Midwest has possibly been breached by a computer hacker looking to obtain information on their clientele. The law firm does not have any on-site IT employees, but wants to search for evidence of the breach themselves to prevent any possible media attention. Why would this not be recommended?

• A.Searching for evidence themselves would not have any ill effects
• B.Searching can change date/time stamps
• C.Searching creates cache files, which would hinder the investigation
• D.Searching could possibly crash the machine or device

Comment: *

Name: *

Email: *

Verification: *

On Linux/Unix based Web servers, what privilege should the daemon service be run under?

• A.You cannot determine what privilege runs the daemon service
• B.Something other than root
• C.Guest
• D.Root

Comment: *

Name: *

Email: *

Verification: *