Question 1

To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program. What term is commonly used when referring to this type of testing?

Options :

A : Randomizing

B : Bounding

C : Mutating

D : Fuzzing

Answer: D

Question 2

Jude, a pen tester working in Keiltech Ltd., performs sophisticated security testing on his company's network infrastructure to identify security loopholes. In this process, he started to circumvent the network protection tools and firewalls used in the company. He employed a technique that can create forged TCP sessions by carrying out multiple SYN, ACK, and RST or FIN packets. Further, this process allowed Jude to execute DDoS attacks that can exhaust the network resources. What is the attack technique used by Jude for finding loopholes in the above scenario?

Options :

A : UDP flood attack

B : Ping-of-death attack

C : Spoofed session flood attack

D : Peer-to-peer attack

Answer: C

Question 3

Scenario1:

1.Victim opens the attacker's web site.

2.Attacker sets up a web site which contains interesting and attractive content like 'Do you want to make

$1000 in a day?'.

3.Victim clicks to the interesting and attractive content URL.

4.Attacker creates a transparent 'iframe' in front of the URL which victim attempts to click, so victim thinks

that he/she clicks to the 'Do you want to make $1000 in a day?' URL but actually he/she clicks to the content

or URL that exists in the transparent 'iframe' which is setup by the attacker.

What is the name of the attack which is mentioned in the scenario?

Options :

A : Session Fixation

B : HTML Injection

C : HTTP Parameter Pollution

D : Clickjacking Attack

Answer: D

Question 4

The network users are complaining because their system are slowing down. Further, every time they attempt to go a website, they receive a series of pop-ups with advertisements. What types of malware have the system been infected with?

Options :

A : Virus

B : Spyware

C : Trojan

D : Adware

Answer: D

Question 5

An LDAP directory can be used to store information similar to a SQL database. LDAP uses a _____ database structure instead of SQL’s _____ structure. Because of this, LDAP has difficulty representing many-to-one relationships.

Options :

A : Relational, Hierarchical

B : Strict, Abstract

C : Hierarchical, Relational

D : Simple, Complex

Answer: C