The following is an entry captured by a network IDS. You are assigned the task of analyzing this entry. You notice the value 0x90, which is the most common NOOP instruction for the Intel processor. You figure that the attacker is attempting a buffer overflow attack.
You also notice "/bin/sh" in the ASCII part of the output.
As an analyst what would you conclude about the attack?

• A.The attacker is creating a directory on the compromised machine
• B.The attacker is attempting an exploit that launches a command-line shell
• C.The attacker is attempting a buffer overflow attack and has succeeded
• D.The buffer overflow attack has been neutralized by the IDS

Comment: *

Name: *

Email: *

Verification: *

Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it begins to close.
What just happened?

• A.Piggybacking
• B.Masqurading
• C.Phishing
• D.Whaling

Comment: *

Name: *

Email: *

Verification: *

A company's Web development team has become aware of a certain type of security vulnerability in their
Web software. To mitigate the possibility of this vulnerability being exploited, the team wants to modify the
software requirements to disallow users from entering HTML as input into their Web application.
What kind of Web application vulnerability likely exists in their software?

• A.Cross-site scripting vulnerability
• B.SQL injection vulnerability
• C.Cross-site Request Forgery vulnerability
• D.Session management vulnerability

Comment: *

Name: *

Email: *

Verification: *

This is an attack that takes advantage of a web site vulnerability in which the site displays content that includes un-sanitized user-provided data.

What is this attack?

• A.Cross-site-scripting attack
• B.SQL Injection
• C.Buffer Overflow attack
• D.URL Traversal attack

Comment: *

Name: *

Email: *

Verification: *

Nathan is testing some of his network devices. Nathan is using Macof to try and flood the ARP cache of these switches.
If these switches' ARP cache is successfully flooded, what will be the result?

• A.The switches will route all traffic to the broadcast address created collisions.
• B.If the ARP cache is flooded, the switches will drop into pix mode making it less susceptible to attacks.
• C.Depending on the switch manufacturer, the device will either delete every entry in its ARP cache or reroute packets to the nearest switch.
• D.The switches will drop into hub mode if the ARP cache is successfully flooded.

Comment: *

Name: *

Email: *

Verification: *