John works as a professional Ethical Hacker. He is assigned a project to test the security of www.weare-secure.com. He
installs a rootkit on the Linux server of the We-are-secure network. Which of the following statements are true about
rootkits?
Each correct answer represents a complete solution. Choose all that apply.

• A.They allow an attacker to set a Trojan in the operating system and thus open a backdoor for
  anytime access.
• B.They allow an attacker to conduct a buffer overflow.
• C.They allow an attacker to replace utility programs that can be used to detect the attacker's
  activity.
• D.They allow an attacker to run packet sniffers secretly to capture passwords.

Comment: *

Name: *

Email: *

Verification: *

A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a
computer or network. It is also known as network saturation attack or bandwidth consumption attack. Attackers
perform DoS attacks by sending a large number of protocol packets to a network. The problems caused by a DoS
attack are as follows:
* Saturation of network resources
* Disruption of connections between two computers, thereby preventing communications between services
* Disruption of services to a specific computer
* Failure to access a Web site
* Increase in the amount of spam
Which of the following can be used as countermeasures against DoS attacks?
Each correct answer represents a complete solution. Choose all that apply.

• A.Disabling unneeded network services
• B.Blocking undesired IP addresses
• C.Permitting network access only to desired traffic
• D.Applying router filtering

Comment: *

Name: *

Email: *

Verification: *

Which of the following is used to determine the range of IP addresses that are mapped to a live hosts?

• A.Port sweep
• B.Ping sweep
• C.IP sweep
• D.Telnet sweep

Comment: *

Name: *

Email: *

Verification: *

You work as a Network Administrator for InformSec Inc. You find that the TCP port number 23476 is open on your server. You suspect that there may be a Trojan named Donald Dick installed on your server. Now you want to verify whether Donald Dick is installed on it or not. For this, you want to know the process running on port 23476, as well as the process id, process name, and the path of the process on your server. Which of the following applications will you most likely use to accomplish the task?

• A.Tripwire
• B.SubSeven
• C.Netstat
• D.Fport

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

• A.Beast
• B.SQL Slammer
• C.Code red
• D.Klez

Comment: *

Name: *

Email: *

Verification: *