Which of the following tasks is NOT performed by antiviruses?

• A.Integrity scanning
• B.Session hijacking
• C.Heuristic scanning
• D.Activity blocking

Comment: *

Name: *

Email: *

Verification: *

Which of the following vulnerability scanner scans from CGI, IDA, Unicode, and Nimda vulnerabilities?

• A.SARA
• B.Nessus
• C.Hackbot
• D.Cgichk

Comment: *

Name: *

Email: *

Verification: *

John works as an Ethical Hacker for uCertify Inc. He wants to find out the ports that are open in uCertify's server using a port scanner. However, he does not want to establish a full TCP connection. Which of the following scanning techniques will he use to accomplish this task?

• A.Xmas tree
• B.TCP SYN/ACK
• C.TCP SYN
• D.TCP FIN

Comment: *

Name: *

Email: *

Verification: *

You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing.
Recently, your company has assigned you a project to test the security of the we-aresecure. com network.
Now, when you have finished your penetration testing, you find that the weare- secure.com server is highly vulnerable to SNMP enumeration. You advise the we-are-secure Inc. to turn off SNMP; however, this is not possible as the company is using various SNMP services on its remote nodes. What other step can you suggest to remove SNMP vulnerability?
Each correct answer represents a complete solution. Choose two.

• A.Close port TCP 53.
• B.Change the default community string names.
• C.Upgrade SNMP Version 1 with the latest version.
• D.Install antivirus.

Comment: *

Name: *

Email: *

Verification: *

When DNS is being used for load balancing, why would a penetration tester choose to identify a scan target by its IP address rather than its host name?

• A.Asingle IP may have multiple domains.
• B.A single domain name can only have one IP address.
• C.Scanning tools only recognize IP addresses
• D.A single domain name may have multiple IP addresses.

Comment: *

Name: *

Email: *

Verification: *