Which of the following tools can be used as a Linux vulnerability scanner that is capable of identifying operating systems and network services?
Each correct answer represents a complete solution. Choose all that apply.

• A.Elsave
• B.Fport
• C.Cheops-ng
• D.Cheops

Comment: *

Name: *

Email: *

Verification: *

You work as a Desktop Technician in we-are-secure.com Inc. Due to some misunderstanding you are terminated from the company. You feel that you were wrongly terminated. Due to this, you want to revenge of your wrong termination by hacking into the we-are-secure network. Since you worked as a Desktop Technician, you remember all the server names. You try to run the axfr and ixfr commands on these servers using the DIG tool. What attack do you want to perform?

• A.Replay attack
• B.DNS zone transfer
• C.Sniffing attack
• D.Password cracking attack

Comment: *

Name: *

Email: *

Verification: *

Which type of Cross-Sire Scripting (XSS> vulnerability is hardest for automated testing tools to detect, and for what reason?

• A.Reflected XSS. because It can only be found by analyzing web server responses.
• B.Stored XSS. because it depends on emails and instant messaging systems.
• C.Reflected XSS: because it is difficult to find within large web server logs.
• D.Stored XSS. because it may be located anywhere within static or dynamic sitecontent

Comment: *

Name: *

Email: *

Verification: *

When sniffing wireless frames, the interface mode plays a key role in successfully collecting traffic. Which of the mode or modes are best used for sniffing wireless traffic?

• A.Master Ad-hoc
• B.RFMON
• C.RFMON. Ad-hoc
• D.Ad-hoc

Comment: *

Name: *

Email: *

Verification: *

In which of the following attacks is a malicious packet rejected by an IDS, but accepted by the host system?

• A.Insertion
• B.Evasion
• C.Fragmentation overwrite
• D.Fragmentation overlap

Comment: *

Name: *

Email: *

Verification: *