Question 1

Stephanie works as senior security analyst for a manufacturing company in Detroit. Stephanie manages network security throughout the organization. Her colleague Jason told her in confidence that he was able to see confidential corporate information posted on the external website http://www.jeansclothesman.com. He tries random URLs on the company's website and finds confidential information leaked over the web. Jason says this happened about a month ago. Stephanie visits the said URLs, but she finds nothing. She is very concerned about this, since someone should be held accountable if there was sensitive information posted on the website. Where can Stephanie go to see past versions and pages of a website?

Options :

A : She should go to the web page Samspade.org to see web pages that might no longer be on the website

B : If Stephanie navigates to Search.com; she will see old versions of the company website

C : Stephanie can go to Archive.org to see past versions of the company website

D : AddressPast.com would have any web pages that are no longer hosted on the company-s website

Answer: C

Question 2

While probing an organization you discover that they have a wireless network. From your attempts to connect to the WLAN you determine that they have deployed MAC filtering by using ACL on the access points. What would be the easiest way to circumvent and communicate on the WLAN?

Options :

A : Attempt to crack the WEP key using Airsnort.

B : Attempt to brute force the access point and update or delete the MAC ACL.

C : Steel a client computer and use it to access the wireless network.

D : Sniff traffic if the WLAN and spoof your MAC address to one that you captured.

Answer: D

Question 3

Which of the following techniques does a vulnerability scanneruse in order to detect a vulnerability on a target service?

Options :

A : Port scanning

B : Banner grabbing

C : Injecting arbitrary data

D : Analyzing service response

Answer: D

Question 4

Consider the following code:

URL:http://www.certified.com/search.pl?

text=<script>alert([removed])</script>

If an attacker can trick a victim user to click a link like this, and the Web application does not validate input, then the victim's browser will pop up an alert showing the users current set of cookies. An attacker can do much more damage, including stealing passwords, resetting your home page, or redirecting the user to another Web site. What is the countermeasure against XSS scripting?

Options :

A : Create an IP access list and restrict connections based on port number

B : Replace '<' and '>' characters with '& l t;' and '& g t;' using server scripts

C : Disable Javascript in IE and Firefox browsers

D : Connect to the server using HTTPS protocol instead of HTTP

Answer: B

Question 5

You receive an e-mail like the one shown below. When you click on the link contained in the mail, you are redirected to a website seeking you to download free Anti-Virus software.

Dear valued customers,

We are pleased to announce the newest version of Antivirus 2010 for Windows which will probe you with total security against the latest spyware, malware, viruses, Trojans and other online threats. Simply visit the link below and enter your antivirus code:

Antivirus code: 5014

http://www.juggyboy/virus/virus.html

Thank you for choosing us, the worldwide leader Antivirus solutions.

Mike Robertson

PDF Reader Support

If you want to stop receiving mail, please go to:

http://www.juggyboy.com

or you may contact us at the following address: Media Internet Consultants, Edif. Neptuno, Planta Baja, Ave. Ricardo J. Alfaro, Tumba Muerto, n/a Panama

How will you determine if this is Real Anti-Virus or Fake Anti-Virus website?

Options :

A : Look at the website design, if it looks professional then it is a Real Anti-Virus website

B : Connect to the site using SSL, if you are successful then the website is genuine

C : Search using the URL and Anti-Virus product name into Google and lookout for suspicious warnings against this site

D : Download and install Anti-Virus software from this suspicious looking site, your Windows 7 will prompt you and stop the installation if the downloaded file is a malware

Answer: C