John works as a Penetration Tester in a security service providing firm named you-are-secure Inc. Recently, John's company has got a project to test the security of a promotional Website www.missatlanta.com and assigned the pen-testing work to John. When John is performing penetration testing, he inserts the following script in the search box at the company home page:
<script>alert('Hi, John')</script>
After pressing the search button, a pop-up box appears on his screen with the text - "Hi, John." Which of the following attacks can be performed on the Web site tested by john while considering the above scenario?

• A.Replay attack
• B.Buffer overflow attack
• C.XSS attack
• D.CSRF attack

Comment: *

Name: *

Email: *

Verification: *

Which of the following types of malware can an antivirus application disable and destroy?
Each correct answer represents a complete solution. Choose all that apply.

• A.Rootkit
• B.Trojan
• C.Crimeware
• D.Worm
• E.Adware
• F.Virus

Comment: *

Name: *

Email: *

Verification: *

When you conduct the XMAS scanning using Nmap, you find that most of the ports scanned do not give a response.
What can be the state of these ports?

• A.Filtered
• B.Closed
• C.Open

Comment: *

Name: *

Email: *

Verification: *

John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network.
The company is aware of various types of security attacks and wants to impede them. Hence, management has assigned John a project to port scan the company's Web Server. For this, he uses the nmap port scanner and issues the following command to perform idle port scanning:
nmap -PN -p- -sI IP_Address_of_Company_Server
He analyzes that the server's TCP ports 21, 25, 80, and 111 are open.
Which of the following security policies is the company using during this entire process to mitigate the risk of hacking attacks?

• A.Non-disclosure agreement
• B.Antivirus policy
• C.Acceptable use policy
• D.Audit policy

Comment: *

Name: *

Email: *

Verification: *

Fill in the blank with the appropriate term.
______ is a technique used to make sure that incoming packets are actually from the networks that they claim to be from.

Comment: *

Name: *

Email: *

Verification: *