Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.

• A.tcp wrapper provides access control, host address spoofing, client username lookups, etc.
• B.When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running the server program directly.
• C.tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as tokens to filter for access control purposes.
• D.tcp wrapper protects a Linux server from IP address spoofing.

Comment: *

Name: *

Email: *

Verification: *

You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing.
Recently, your company has assigned you a project to test the security of the we-aresecure.com Web site. For this, you want to perform the idle scan so that you can get the ports open in the we-are-secure.com server. You are using Hping tool to perform the idle scan by using a zombie computer. While scanning, you notice that every IPID is being incremented on every query, regardless whether the ports are open or close. Sometimes, IPID is being incremented by more than one value.
What may be the reason?

• A.The firewall is blocking the scanning process.
• B.The zombie computer is not connected to the we-are-secure.com Web server.
• C.The zombie computer is the system interacting with some other system besides your computer.
• D.Hping does not perform idle scanning.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are true about firewalking?
Each correct answer represents a complete solution. Choose all that apply.

• A.To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall.
• B.A malicious attacker can use firewalking to determine the types of ports/protocols that can bypass the firewall.
• C.Firewalking works on the UDP packets.
• D.In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall.

Comment: *

Name: *

Email: *

Verification: *

Which of the following attacks saturates network resources and disrupts services to a specific computer?

• A.Teardrop attack
• B.Polymorphic shell code attack
• C.Denial-of-Service (DoS) attack
• D.Replay attack

Comment: *

Name: *

Email: *

Verification: *

Which of the following functions can be used as a countermeasure to a Shell Injection attack?
Each correct answer represents a complete solution. Choose all that apply.

• A.mysql_real_escape_string()
• B.escapeshellarg()
• C.regenerateid()
• D.escapeshellcmd()

Comment: *

Name: *

Email: *

Verification: *