You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c

What is the hexadecimal value of NOP instruction?

• A.0x60
• B.0x70
• C.0x80
• D.0x90

Comment: *

Name: *

Email: *

Verification: *

Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he
uses a detection method where the anti-virus executes the malicious codes on a virtual machine to
simulate CPU and memory activities.
Which type of virus detection method did Chandler use in this context?

• A.Heuristic Analysis
• B.Code Emulation
• C.Integrity checking
• D.Scanning

Comment: *

Name: *

Email: *

Verification: *

Which of the following conditions must be given to allow a tester to exploit a Cross-Site Request Forgery (CSRF) vulnerable web application?

• A.The web application should not use random tokens.
• B.The victim user must open the malicious link with a Firefox prior to version 3.
• C.The session cookies generated by the application do not have the HttpOnly flag set.
• D.The victim user must open the malicious link with an Internet Explorer prior to version 8.

Comment: *

Name: *

Email: *

Verification: *

To maintain compliance with regulatory requirements, a security audit of the systems on a network must be performed to determine their compliance with security policies. Which one of the following tools would most likely be used in such an audit?

• A.Vulnerability scanner
• B.Protocol analyzer
• C.Port scanner
• D.Intrusion Detection System

Comment: *

Name: *

Email: *

Verification: *

During a recent security assessment, you discover the organization has one Domain Name Server (DNS) in a Demilitarized Zone (DMZ) and a second DNS server on the internal network.
What is this type of DNS configuration commonly called?

• A.Split DNS
• B.DNSSEC
• C.DynDNS
• D.DNS Scheme

Comment: *

Name: *

Email: *

Verification: *