Your company was hired by a small healthcare provider to perform a technician assessment on the network. What is the best approach for discovering vulnerabilities on a Windows-based computer?

• A.Use a scan tool like Nessus
• B.Check MITRE.org for the latest list of CVE findings
• C.Create a disk image of a clean Windows installation
• D.Use the built-in Windows Update tool

Comment: *

Name: *

Email: *

Verification: *

Which tool allows analysts and pen testers to examine links between data using graphs and link analysis?

• A.Maltego
• B.Cain & Abel
• C.Metasploit
• D.Wireshark

Comment: *

Name: *

Email: *

Verification: *

A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network.
What are some things he can do to prevent it? Select the best answers.

• A.Use a firewall between all LAN segments.
• B.Use a tool like ARPwatch to monitor for strange ARP activity.
• C.If you have a small network, use static ARP entries.
• D.Use only static IP addresses on all PC's.
• E.Use port security on his switches.

Comment: *

Name: *

Email: *

Verification: *

You are using NMAP to resolve domain names into IP addresses for a ping sweep later.
Which of the following commands looks for IP addresses?

• A.>host -t a hackeddomain.com
• B.>host -t soa hackeddomain.com
• C.>host -t ns hackeddomain.com
• D.>host -t AXFR hackeddomain.com

Comment: *

Name: *

Email: *

Verification: *

Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?

• A.Key registry
• B.Directory
• C.Key escrow
• D.Recovery agent

Comment: *

Name: *

Email: *

Verification: *