You want to search Microsoft Outlook Web Access Default Portal using Google search on the Internet so that you can perform the brute force attack and get unauthorized access. What search string will you use to accomplish the task?

• A.intitle:"Index Of" -inurl:maillog maillog size
• B.intitle:index.of inbox dbx
• C.intext:"outlook.asp"
• D.allinurl:"exchange/logon.asp"

Comment: *

Name: *

Email: *

Verification: *

GSM uses either A5/1 or A5/2 stream cipher for ensuring over-the-air voice privacy. Which of the following cryptographic attacks can be used to break both ciphers?

• A.Replay attack
• B.Known plaintext attack
• C.Man-in-the-middle attack
• D.Ciphertext only attack

Comment: *

Name: *

Email: *

Verification: *

You want to retrieve password files (stored in the Web server's index directory) from various Web sites. Which of the following tools can you use to accomplish the task?

• A.Nmap
• B.Sam spade
• C.Whois
• D.Google

Comment: *

Name: *

Email: *

Verification: *

Why is OSSTMM beneficial to the pen tester?

• A.It provides a legal and contractual framework for testing
• B.It provides in-depth knowledge on tools
• C.It provides report templates
• D.It includes an automated testing engine similar to Metasploit

Comment: *

Name: *

Email: *

Verification: *

A Web developer with your company wants to have wireless access for contractors that come in to work on various projects. The process of getting this approved takes time. So rather than wait, he has put his own wireless router attached to one of the network ports in his department. What security risk does this present?

• A.It is likely to increase network traffic and slow down network performance.
• B.An unauthorized WAP is one way for hackers to get into a network.
• C.This circumvents network intrusion detection.
• D.None, adding a wireless access point is a common task and not a security risk.

Comment: *

Name: *

Email: *

Verification: *