Which type of Cross-Sire Scripting (XSS> vulnerability is hardest for automated testing tools to detect, and for what reason?

• A.Reflected XSS. because It can only be found by analyzing web server responses.
• B.Stored XSS. because it depends on emails and instant messaging systems.
• C.Stored XSS. because it may be located anywhere within static or dynamic sitecontent
• D.Reflected XSS: because it is difficult to find within large web server logs.

Comment: *

Name: *

Email: *

Verification: *

Which of the following tools can be used to perform Windows password cracking, Windows enumeration, and VoIP session sniffing?

• A.Cain
• B.L0phtcrack
• C.Pass-the-hash toolkit
• D.John the Ripper

Comment: *

Name: *

Email: *

Verification: *

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He copies the whole structure of the We-are-secure Web site to the local disk and obtains all the files on the Web site. Which of the following techniques is he using to accomplish his task?

• A.TCP FTP proxy scanning
• B.Eavesdropping
• C.Web ripping
• D.Fingerprinting

Comment: *

Name: *

Email: *

Verification: *

You have compromised a Windows XP system and Injected the Meterpreter payload into the lsass process. While looking over the system you notice that there is a popular password management program on the system. When you attempt to access the file that contains the password you find it is locked. Further investigation reveals that it is locked by the passmgr process. How can you use the Meterpreter to get access to this file?

• A.Use the execute command to the passmgr executable. That will give you access to the file.
• B.Use the getuid command to determine the user context the process is runningunder, then use the imp command to impersonate that user.
• C.Use the migrate command to jump to the passmgr process. That will give you accessto the file.
• D.use the getpid command to determine the user context the process is runningunder, then use the Imp command to impersonate that user.

Comment: *

Name: *

Email: *

Verification: *

You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing.
Recently, your company has assigned you a project to test the security of the we-aresecure. com Website. The we-are-secure.com Web server is using Linux operating system. When you port scanned the we-are- secure.com Web server, you got that TCP port 23, 25, and 53 are open. When you tried to telnet to port 23, you got a blank screen in response. When you tried to type the dir, copy, date, del, etc. commands you got only blank spaces or underscores symbols on the screen. What may be the reason of such unwanted situation?

• A.The we-are-secure.com server is using honeypot.
• B.The telnet session is being affected by the stateful inspection firewall.
• C.The telnet service of we-are-secure.com has corrupted.
• D.The we-are-secure.com server is using a TCP wrapper.

Comment: *

Name: *

Email: *

Verification: *