You have been contracted to penetration test an e-mail server for a client that wants to know for sure if the sendmail service is vulnerable to any known attacks. You have permission to run any type of test, how will you proceed to give the client the most valid answer?

• A.Run all known sendmail exploits against the server and see if you can compromisethe service, even if it crashed the machine or service
• B.Run a banner grabbing vulnerability checker to determine the sendmail version andpatch level, then look up and report all the vulnerabilities that exist for that versionand patch level
• C.Run all sendmail exploits that will not crash the server and see if you cancompromise the service
• D.Log into the e-mail and determine the sendmail version and patch level, then lookup and report all the vulnerabilities that exist for that version and patch level

Comment: *

Name: *

Email: *

Verification: *

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

Which of the following tools is John using to crack the wireless encryption keys?

• A.Kismet
• B.AirSnort
• C.PsPasswd
• D.Cain

Comment: *

Name: *

Email: *

Verification: *

GSM uses either A5/1 or A5/2 stream cipher for ensuring over-the-air voice privacy. Which of the following cryptographic attacks can be used to break both ciphers?

• A.Ciphertext only attack
• B.Man-in-the-middle attack
• C.Replay attack
• D.Known plaintext attack

Comment: *

Name: *

Email: *

Verification: *

Peter, a malicious hacker, obtains e-mail addresses by harvesting them from postings, blogs, DNS listings, and Web pages. He then sends large number of unsolicited commercial e-mail (UCE) messages on these addresses. Which of the following e-mail crimes is Peter committing?

• A.E-mail spoofing
• B.E-mail Spam
• C.E-mail bombing
• D.E-mail Storm

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT a Back orifice plug-in?

• A.STCPIO
• B.BOSOCK32
• C.Beast
• D.BOPeep

Comment: *

Name: *

Email: *

Verification: *