Which of the following tools is spyware that makes Windows clients send their passwords as clear text?

• A.Pwddump2
• B.SMBRelay
• C.KrbCrack
• D.C2MYAZZ

Comment: *

Name: *

Email: *

Verification: *

You are concerned about attackers simply passing by your office, discovering your wireless network, and getting into your network via the wireless connection. Which of the following are
NOT steps in securing your wireless connection?
Each correct answer represents a complete solution. Choose two.

• A.Not broadcasting SSID
• B.Strong password policies on workstations.
• C.Hardening the server OS
• D.MAC filtering on the router
• E.Using either WEP or WPA encryption

Comment: *

Name: *

Email: *

Verification: *

John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters='or''=' as a username and successfully logs on to the user page of the Web site. Now, John asks the we-are-secure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we-are- secure Website login page from the SQL injection attack?

• A.Use the session_regenerate_id() function
• B.Use the escapeshellcmd() function
• C.Use the mysql_real_escape_string() function for escaping input
• D.Use the escapeshellarg() function

Comment: *

Name: *

Email: *

Verification: *

The employees of EWS Inc. require remote access to the company's Web servers. In order to provide solid wireless security, the company uses EAP-TLS as the authentication protocol. Which of the following statements are true about EAP-TLS?
Each correct answer represents a complete solution. Choose all that apply.

• A.It is supported by all manufacturers of wireless LAN hardware and software.
• B.It uses a public key certificate for server authentication.
• C.It uses password hash for client authentication.
• D.It provides a moderate level of security.

Comment: *

Name: *

Email: *

Verification: *

You work as an Administrator for Bluesky Inc. The company has 145 Windows XP Professional client computers and eighty Windows 2003 Server computers. You want to install a security layer of WAP specifically designed for a wireless environment. You also want to ensure that the security layer provides privacy, data integrity, and authentication for client-server communications over a wireless network. Moreover, you want a client and server to be authenticated so that wireless transactions remain secure and the connection is encrypted. Which of the following options will you use to accomplish the task?

• A.Wired Equivalent Privacy (WEP)
• B.Virtual Private Network (VPN)
• C.Wireless Transport Layer Security (WTLS)
• D.Recovery Console

Comment: *

Name: *

Email: *

Verification: *