In which of the following attacks does an attacker spoof the source address in IP packets that are sent to the victim?

• A.DDoS
• B.Dos
• C.SQL injection
• D.Backscatter

Comment: *

Name: *

Email: *

Verification: *

John works as a professional Ethical Hacker. He is assigned a project to test the security of www.weare- secure.com. He is working on the Linux operating system. He wants to sniff the we-are-secure network and intercept a conversation between two employees of the company through session hijacking. Which of the following tools will John use to accomplish the task?

• A.Hunt
• B.IPChains
• C.Ethercap
• D.Tripwire

Comment: *

Name: *

Email: *

Verification: *

Which of the following steps of incident response is steady in nature?

• A.Containment
• B.Eradication
• C.Preparation
• D.Recovery

Comment: *

Name: *

Email: *

Verification: *

John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we-are- secure Website login page from the SQL injection attack?

• A.Use the escapeshellarg() function
• B.Use the session_regenerate_id() function
• C.Use the mysql_real_escape_string() function for escaping input
• D.Use the escapeshellcmd() function

Comment: *

Name: *

Email: *

Verification: *

In which of the following steps of the incident handling processes does the Incident Handler make sure that all
business processes and functions are back to normal and then also wants to monitor the system or processes to
ensure that the system is not compromised again?

• A.Eradication
• B.Recovery
• C.Lesson Learned
• D.Containment

Comment: *

Name: *

Email: *

Verification: *