SIMULATION
Fill in the blank with the appropriate term.
______ is a technique used to make sure that incoming packets are actually from the networks that they claim to be from.

Comment: *

Name: *

Email: *

Verification: *

Which of the following penetration testing phases involves gathering data from whois, DNS, and network scanning, which helps in mapping a target network and provides valuable information regarding the operating system and applications running on the systems?

• A.Pre-attack phase
• B.Attack phase
• C.On-attack phase
• D.Post-attack phase

Comment: *

Name: *

Email: *

Verification: *

You want to scan your network quickly to detect live hosts by using ICMP ECHO Requests. What type of scanning will you perform to accomplish the task?

• A.Ping sweep scan
• B.Idle scan
• C.XMAS scan
• D.TCP SYN scan

Comment: *

Name: *

Email: *

Verification: *

Which of the following refers to a condition in which a hacker sends a bunch of packets that leave TCP ports half open?

• A.Spoofing
• B.Hacking
• C.SYN attack
• D.PING attack

Comment: *

Name: *

Email: *

Verification: *

Adam works as a Security Administrator for Umbrella Technology Inc. He reported a breach in security to his senior members, stating that "security defenses has been breached and exploited for 2 weeks by hackers." The hackers had accessed and downloaded 50,000 addresses containing customer credit cards and passwords. Umbrella Technology was looking to law enforcement officials to protect their intellectual property.
The intruder entered through an employee's home machine, which was connected to Umbrella Technology's corporate VPN network. The application called BEAST Trojan was used in the attack to open a "back door" allowing the hackers undetected access. The security breach was discovered when customers complained about the usage of their credit cards without their knowledge.
The hackers were traced back to Shanghai, China through e-mail address evidence. The credit card information was sent to that same e-mail address. The passwords allowed the hackers to access Umbrella Technology's network from a remote location, posing as employees.
Which of the following actions can Adam perform to prevent such attacks from occurring in future?

• A.Allow VPN access but replace the standard authentication with biometric authentication
• B.Replace the VPN access with dial-up modem access to the company's network
• C.Disable VPN access to all employees of the company from home machines
• D.Apply different security policy to make passwords of employees more complex

Comment: *

Name: *

Email: *

Verification: *