You are the Administrator for a corporate network. You are concerned about denial of service attacks.
Which of the following measures would be most helpful in defending against a Denial-of-Service (DoS) attack?

• A.Implement network based antivirus.
• B.Place a honey pot in the DMZ.
• C.Shorten the timeout for connection attempts.
• D.Implement a strong password policy.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about threats are true?
Each correct answer represents a complete solution. Choose all that apply.

• A.A threat is a weakness or lack of safeguard that can be exploited by vulnerability, thus causing harm to the information systems or networks.
• B.A threat is a potential for violation of security which exists when there is a circumstance, capability, action, or event that could breach security and cause harm.
• C.A threat is a sequence of circumstances and events that allows a human or other agent to cause an information-related misfortune by exploiting vulnerability in an IT product.
• D.A threat is any circumstance or event with the potential of causing harm to a system in the form of destruction, disclosure, modification of data, or denial of service.

Comment: *

Name: *

Email: *

Verification: *

Adam works as an Incident Handler for Umbrella Inc. His recent actions towards the incident are not up to the standard norms of the company. He always forgets some steps and procedures while handling responses as they are very hectic to perform.
Which of the following steps should Adam take to overcome this problem with the least administrative effort?

• A.Create incident checklists.
• B.Appoint someone else to check the procedures.
• C.Create incident manual read it every time incident occurs.
• D.Create new sub-team to keep check.

Comment: *

Name: *

Email: *

Verification: *

John works as a Penetration Tester in a security service providing firm named you-are-secure Inc. Recently, John's company has got a project to test the security of a promotional Website www.missatlanta.com and assigned the pen-testing work to John. When John is performing penetration testing, he inserts the following script in the search box at the company home page:
<script>alert('Hi, John')</script>
After pressing the search button, a pop-up box appears on his screen with the text - "Hi, John." Which of the following attacks can be performed on the Web site tested by john while considering the above scenario?

• A.Buffer overflow attack
• B.Replay attack
• C.CSRF attack
• D.XSS attack

Comment: *

Name: *

Email: *

Verification: *

Which of the following tools is used for port scanning?

• A.L0phtcrack
• B.Nmap
• C.NETSH
• D.NSLOOKUP

Comment: *

Name: *

Email: *

Verification: *