John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we- are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The output of the scanning test is as follows:
C:\whisker.pl -h target_IP_address
-- whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = -
= Host: target_IP_address
= Server: Apache/1.3.12 (Win32) ApacheJServ/1.1
mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22
+ 200 OK: HEAD /cgi-bin/printenv
John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server. Which of the following statements about 'Printenv' vulnerability are true?
Each correct answer represents a complete solution. Choose all that apply.

• A.This vulnerability helps in a cross site scripting attack.
• B.'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the attacker.
• C.The countermeasure to 'printenv' vulnerability is to remove the CGI script.
• D.With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other malicious scripts.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about threats are true?
Each correct answer represents a complete solution. Choose all that apply.

• A.A threat is a weakness or lack of safeguard that can be exploited by vulnerability, thus causing harm to the information systems or networks.
• B.A threat is a potential for violation of security which exists when there is a circumstance, capability, action, or event that could breach security and cause harm.
• C.A threat is a sequence of circumstances and events that allows a human or other agent to cause an information-related misfortune by exploiting vulnerability in an IT product.
• D.A threat is any circumstance or event with the potential of causing harm to a system in the form of destruction, disclosure, modification of data, or denial of service.

Comment: *

Name: *

Email: *

Verification: *

Which of the following services CANNOT be performed by the nmap utility?
Each correct answer represents a complete solution. Choose all that apply.

• A.Passive OS fingerprinting
• B.Sniffing
• C.Active OS fingerprinting
• D.Port scanning

Comment: *

Name: *

Email: *

Verification: *

Which of the following scanning tools is also a network analysis tool that sends packets with nontraditional IP stack parameters and allows the scanner to gather information from the response packets generated?

• A.HPing
• B.Tcpview
• C.Nessus
• D.Legion

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.

• A.tcp wrapper provides access control, host address spoofing, client username lookups, etc.
• B.When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running the server program directly.
• C.tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as tokens to filter for access control purposes.
• D.tcp wrapper protects a Linux server from IP address spoofing.

Comment: *

Name: *

Email: *

Verification: *