Which of the following can be used as a countermeasure against the SQL injection attack?
Each correct answer represents a complete solution. Choose two.

• A.mysql_real_escape_string()
• B.session_regenerate_id()
• C.mysql_escape_string()
• D.Prepared statement

Comment: *

Name: *

Email: *

Verification: *

Maria works as a professional Ethical Hacker. She has been assigned the project of testing the security of www.gentech.com. She is using dumpster diving to gather information about Gentech Inc.
In which of the following steps of malicious hacking does dumpster diving come under?

• A.Mutual authentication
• B.Reconnaissance
• C.Role-based access control
• D.Multi-factor authentication

Comment: *

Name: *

Email: *

Verification: *

You send SYN packets with the exact TTL of the target system starting at port 1 and going up to port 1024 using hping2 utility. This attack is known as __________.

• A.Port scanning
• B.Cloaking
• C.Firewalking
• D.Spoofing

Comment: *

Name: *

Email: *

Verification: *

Which of the following strategies allows a user to limit access according to unique hardware information supplied by a potential client?

• A.WEP
• B.Extensible Authentication Protocol (EAP)
• C.Wireless Transport Layer Security (WTLS)
• D.MAC address filtering

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are correct about spoofing and session hijacking?
Each correct answer represents a complete solution. Choose all that apply.

• A.Session hijacking is an attack in which an attacker takes over the session, and the valid user's session is
  disconnected.
• B.Spoofing is an attack in which an attacker can spoof the IP address or other identity of the target
  and the valid user cannot be active.
• C.Spoofing is an attack in which an attacker can spoof the IP address or other identity of the target but the valid user
  can be active.
• D.Session hijacking is an attack in which an attacker takes over the session, and the valid user's session is not
  disconnected.

Comment: *

Name: *

Email: *

Verification: *