Which of the following takes control of a session between a server and a client using TELNET, FTP, or any other non-encrypted TCP/IP utility?

• A.Session Hijacking
• B.Dictionary attack
• C.Trojan horse
• D.Social Engineering

Comment: *

Name: *

Email: *

Verification: *

A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a
computer or network. It is also known as network saturation attack or bandwidth consumption attack. Attackers
perform DoS attacks by sending a large number of protocol packets to a network. The problems caused by a DoS
attack are as follows:
* Saturation of network resources
* Disruption of connections between two computers, thereby preventing communications between services
* Disruption of services to a specific computer
* Failure to access a Web site
* Increase in the amount of spam
Which of the following can be used as countermeasures against DoS attacks?
Each correct answer represents a complete solution. Choose all that apply.

• A.Blocking undesired IP addresses
• B.Permitting network access only to desired traffic
• C.Disabling unneeded network services
• D.Applying router filtering

Comment: *

Name: *

Email: *

Verification: *

Your IDS discovers that an intruder has gained access to your system. You immediately stop that access, change
passwords for administrative accounts, and secure your network. You discover an odd account (not administrative)
that has permission to remotely access the network. What is this most likely?

• A.A backdoor the intruder created so that he can re-enter the network.
• B.A normal account you simply did not notice before. Large networks have a number of accounts; it is hard to track
  them all.
• C.An example of privilege escalation.
• D.An example of IP spoofing.

Comment: *

Name: *

Email: *

Verification: *

Adam works as a Security Administrator for the Umbrella Inc. A project has been assigned to him to strengthen the
security policies of the company, including its password policies. However, due to some old applications, Adam is only
able to enforce a password group policy in Active Directory with a minimum of 10 characters. He informed the
employees of the company, that the new password policy requires that everyone must have complex passwords with
at least 14 characters. Adam wants to ensure that everyone is using complex passwords that meet the new security
policy requirements. He logged on to one of the network's domain controllers and runs the following command:

Which of the following actions will this command take?

• A.Dumps the SAM password file to pwd.txt
• B.The password history file is transferred to pwd.txt
• C.Dumps the Active Directory password hashes to pwd.txt
• D.Dumps the SAM password hashes to pwd.txt

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are true regarding SYN flood attack?

• A.SYN cookies provide protection against the SYN flood by eliminating the resources allocated on the target host.
• B.SYN flood is a form of Denial-of-Service (DoS) attack.
• C.The attacker sends a succession of SYN requests to a target system.
• D.The attacker sends thousands and thousands of ACK packets to the victim.

Comment: *

Name: *

Email: *

Verification: *