You work as security technician at XYZ.com. While doing web application testing, you might be required to look through multiple web pages online which can take a long time. Which of the processes listed below would be a more efficient way of doing this type of validation?

Which of the following best describes session key creation in SSL?

The intrusion detection system at a software development company suddenly generates multiple alerts regarding attacks against the company ' s external webserver, VPN concentrator, and DNS servers.  What should the security team do to determine which alerts to check first?

While conducting a penetration test, the tester determines that there is a firewall between the tester ' s machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model.  Which type of firewall is the tester trying to traverse?

Which of the following is an example of two factor authentication?

Which of the following guidelines or standards is associated with the credit card industry?

One advantage of an application-level firewall is the ability to

A circuit level gateway works at which of the following layers of the OSI Model?

A developer for a company is tasked with creating a program that will allow customers to update their billing and shipping information. The billing address field used is limited to 50 characters.  What pseudo code would the developer use to avoid a buffer overflow attack on the billing address field?

Which Open Web Application Security Project (OWASP) implements a web application full of known vulnerabilities?

Which of the following programs is usually targeted at Microsoft Office products?

How can rainbow tables be defeated?

Which solution can be used to emulate computer services, such as mail and ftp, and to capture information related to logins or actions?

After gaining access to the password hashes used to protect access to a web based application, knowledge of which cryptographic algorithms would be useful to gain access to the application?

What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

Which of the following is an application that requires a host application for replication?

An engineer is learning to write exploits in C++ and is using the exploit tool Backtrack. The engineer wants to compile the newest C++ exploit and name it calc.exe. Which command would the engineer use to accomplish this?

An attacker has been successfully modifying the purchase price of items purchased on the company ' s web site. The security administrators verify the web server and Oracle database have not been compromised directly. They have also verified the Intrusion Detection System (IDS) logs and found no attacks that could have caused this. What is the mostly likely way the attacker has been able to modify the purchase price?

A bank stores and processes sensitive privacy information related to home loans.  However, auditing has never been enabled on the system.  What is the first step that the bank should take before enabling the audit feature?

In the context of Windows Security, what is a ' null ' user?