You work as a professional Ethical Hacker. You are assigned a project to test the security of www.weare- secure.com. You somehow enter in we-are-secure Inc. main server, which is Windows based.
While you are installing the NetCat tool as a backdoor in the we-are-secure server, you see the file credit.dat having the list of credit card numbers of the company's employees. You want to transfer the credit.dat file in your local computer so that you can sell that information on the internet in the good price.
However, you do not want to send the contents of this file in the clear text format since you do not want that the Network Administrator of the we-are-secure Inc. can get any clue of the hacking attempt. Hence, you decide to send the content of the credit.dat file in the encrypted format.
What steps should you take to accomplish the task?

• A.You will use brutus.
• B.You will use CryptCat instead of NetCat.
• C.You will use Wireshark.
• D.You will use the ftp service.

Comment: *

Name: *

Email: *

Verification: *

SIMULATION
Fill in the blank with the appropriate word.
StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use
______ defense against buffer overflow attacks.

Comment: *

Name: *

Email: *

Verification: *

Which of the following US Acts emphasized a "risk-based policy for cost-effective security" and makes mandatory for agency program officials, chief information officers, and inspectors general (IGs) to conduct annual reviews of the agency's information security program and report the results to Office of Management and Budget?

• A.The Electronic Communications Privacy Act of 1986 (ECPA)
• B.The Fair Credit Reporting Act (FCRA)
• C.The Equal Credit Opportunity Act (ECOA)
• D.Federal Information Security Management Act of 2002 (FISMA)

Comment: *

Name: *

Email: *

Verification: *

John is a malicious attacker. He illegally accesses the server of We-are-secure Inc. He then places a backdoor in the
We-are-secure server and alters its log files. Which of the following steps of malicious hacking includes altering the
server log files?

• A.Reconnaissance
• B.Covering tracks
• C.Gaining access
• D.Maintaining access

Comment: *

Name: *

Email: *

Verification: *

Your friend plans to install a Trojan on your computer. He knows that if he gives you a new version of chess.exe, you will definitely install the game on your computer. He picks up a Trojan and joins it with chess.exe. Which of the following tools are required in such a scenario?
Each correct answer represents a part of the solution. Choose three.

• A.NetBus
• B.Yet Another Binder
• C.Absinthe
• D.Chess.exe

Comment: *

Name: *

Email: *

Verification: *