SIMULATION
Fill in the blank with the appropriate name of the tool.
______ scans for rootkits by comparing SHA-1 hashes of important files with known good ones in online database.

Comment: *

Name: *

Email: *

Verification: *

Which of the following takes control of a session between a server and a client using TELNET, FTP, or any other non-
encrypted TCP/IP utility?

• A.Dictionary attack
• B.Social Engineering
• C.Trojan horse
• D.Session Hijacking

Comment: *

Name: *

Email: *

Verification: *

You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linuxbased server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?

• A.Cookie poisoning
• B.Replay
• C.XSS
• D.Brute force

Comment: *

Name: *

Email: *

Verification: *

You work as a System Administrator in SunSoft Inc. You are running a virtual machine on Windows Server
2003. The virtual machine is protected by DPM. Now, you want to move the virtual machine to another host.
Which of the following steps can you use to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

• A.Remove the original virtual machine from the old server and stop the protection for the original virtual machine.
• B.Run consistency check.
• C.Add the copied virtual machine to a protection group.
• D.Copy the virtual machine to the new server.

Comment: *

Name: *

Email: *

Verification: *

John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we-are-secure Website login page from the SQL injection attack?

• A.Use the session_regenerate_id() function
• B.Use the escapeshellcmd() function
• C.Use the mysql_real_escape_string() function for escaping input
• D.Use the escapeshellarg() function

Comment: *

Name: *

Email: *

Verification: *