A penetration tester obtains telnet access to a target machine using a captured credential. While trying to transfer her exploit to the target machine, the network intrusion detection systems keeps detecting her exploit and terminating her connection. Which of the following actions will help the penetration tester transfer an exploit and compile it in the target system?

• A.Use the http service's PUT command to push the file onto the target machine.
• B.Use the scp service, protocol SSHv2 to pull the file onto the target machine.
• C.Use the telnet service's ECHO option to pull the file onto the target machine
• D.Use the ftp service in passive mode to push the file onto the target machine.

Comment: *

Name: *

Email: *

Verification: *

The employees of CCN Inc. require remote access to the company's proxy servers. In order to provide solid wireless security, the company uses LEAP as the authentication protocol. Which of the following is supported by the LEAP protocol?
Each correct answer represents a complete solution. Choose all that apply.

• A.Dynamic key encryption
• B.Strongest security level
• C.Password hash for client authentication
• D.Public key certificate for server authentication

Comment: *

Name: *

Email: *

Verification: *

Which of the following are considered Bluetooth security violations?
Each correct answer represents a complete solution. Choose two.

• A.SQL injection attack
• B.Cross site scripting attack
• C.Bluebug attack
• D.Bluesnarfing
• E.Social engineering

Comment: *

Name: *

Email: *

Verification: *

You work as a professional Ethical Hacker. You are assigned a project to perform blackhat testing on www.we-are-secure.com. You visit the office of we-are-secure.com as an air-condition mechanic. You claim that someone from the office called you saying that there is some fault in the air-conditioner of the server room. After some inquiries/arguments, the Security Administrator allows you to repair the air-conditioner of the server room.
When you get into the room, you found the server is Linux-based. You press the reboot button of the server after inserting knoppix Live CD in the CD drive of the server. Now, the server promptly boots backup into Knoppix. You mount the root partition of the server after replacing the root password in the /etc/shadow file with a known password hash and salt. Further, you copy the netcat tool on the server and install its startup files to create a reverse tunnel and move a shell to a remote server whenever the server is restarted. You simply restart the server, pull out the Knoppix Live CD from the server, and inform that the air-conditioner is working properly.
After completing this attack process, you create a security auditing report in which you mention various threats such as social engineering threat, boot from Live CD, etc. and suggest the countermeasures to stop booting from the external media and retrieving sensitive data. Which of the following steps have you suggested to stop booting from the external media and retrieving sensitive data with regard to the above scenario?
Each correct answer represents a complete solution. Choose two.

• A.Placing BIOS password
• B.Setting only the root level access for sensitive data
• C.Using password protected hard drives
• D.Encrypting disk partitions

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are true about WPA?
Each correct answer represents a complete solution. Choose all that apply.

• A.WPA provides better security than WEP.
• B.Shared-key WPA is vulnerable to password cracking attacks if a weak passphrase is used.
• C.WPA-PSK converts the passphrase into a 256-bit key.
• D.WPA-PSK requires a user to enter an 8-character to 63-character passphrase into a wireles s client.

Comment: *

Name: *

Email: *

Verification: *