Which of the following statements are true about tcp wrappers?
Each correct answer represents a complete solution. Choose all that apply.

• A.When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running the server
  program directly.
• B.tcp wrapper provides access control, host address spoofing, client username lookups, etc.
• C.tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as tokens to
  filter for access control purposes.
• D.tcp wrapper protects a Linux server from IP address spoofing.

Comment: *

Name: *

Email: *

Verification: *

You work as a Network Administrator for InformSec Inc. You find that the TCP port number 23476 is open on your server. You suspect that there may be a Trojan named Donald Dick installed on your server. Now you want to verify whether Donald Dick is installed on it or not. For this, you want to know the process running on port 23476, as well as the process id, process name, and the path of the process on your server. Which of the following applications will you most likely use to accomplish the task?

• A.SubSeven
• B.Tripwire
• C.Fport
• D.Netstat

Comment: *

Name: *

Email: *

Verification: *

Choose and reorder the steps of an incident handling process in their correct order.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

Which of the following controls is described in the statement given below?
"It ensures that the enforcement of organizational security policy does not rely on voluntary web application user compliance. It secures information by assigning sensitivity labels on information and comparing this to the level of security a user is operating at."

• A.Role-based Access Control
• B.Discretionary Access Control
• C.Attribute-based Access Control
• D.Mandatory Access Control

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a type of computer security vulnerability typically found in Web applications that allow code injection by malicious Web users into the Web pages viewed by other users?

• A.SID filtering
• B.Cookie poisoning
• C.Cross-site scripting
• D.Privilege Escalation

Comment: *

Name: *

Email: *

Verification: *