Which of the following display filters will you enable in Ethereal to view the three-way handshake for a connection from host 192.168.0.1?

What does the following command in netcat do?

nc -l -u -p55555 < /etc/passwd

Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the command prompt, she types the following command.

For /f " tokens=1 %%a in (hackfile.txt) do net use * \\10.1.2.3\c$ /user: " Administrator " %%a

What is Eve trying to do?

Exhibit:

The following is an entry captured by a network IDS.You are assigned the task of analyzing this entry. You notice the value 0x90, which is the most common NOOP instruction for the Intel processor. You figure that the attacker is attempting a buffer overflow attack. You also notice " /bin/sh " in the ASCII part of the output. As an analyst what would you conclude about the attack?

Assuring two systems that are using IPSec to protect traffic over the internet, what type of general attack could compromise the data?

Which of the following is the primary objective of a rootkit?

Exhibit:

Study the following log extract and identify the attack.

How would you describe a simple yet very effective mechanism for sending and receiving unauthorized information or data between machines without alerting any firewalls and IDS ' s on a network?

Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two.

What would you call this attack?

A remote user tries to login to a secure network using Telnet, but accidently types in an invalid user name or password. Which responses would NOT be preferred by an experienced Security Manager? (multiple answer)

Windows LAN Manager (LM) hashes are known to be weak. Which of the following are known weaknesses of LM? (Choose three)

Which initial procedure should an ethical hacker perform after being brought into an organization?   

To reduce the attack surface of a system, administrators should perform which of the following processes to remove unnecessary software, services, and insecure configuration settings?

Your computer is infected by E-mail tracking and spying Trojan. This Trojan infects the computer with a single file - emos.sys

Which step would you perform to detect this type of Trojan?

TCP/IP Session Hijacking is carried out in which OSI layer?

Which of the following tool would be considered as Signature Integrity Verifier (SIV)?

You run nmap port Scan on 10.0.0.5 and attempt to gain banner/server information from services running on ports 21, 110 and 123.

Here is the output of your scan results:

Which of the following nmap command did you run?

In what stage of Virus life does a stealth virus gets activated with the user performing certain actions such as running an infected program?

What type of Virus is shown here?

How do you defend against Privilege Escalation?