Question 1

Which of the following characteristics differentiate a rainbow table attack from a brute force attack? (Choose

two.)

Options :

A : Rainbow table attacks greatly reduce compute cycles at attack time.

B : Rainbow tables must include precomputed hashes.

C : Rainbow table attacks do not require access to hashed passwords.

D :

Rainbow table attacks must be performed on the network.

E :

Rainbow table attacks bypass maximum failed login restrictions.

Answer: A,B

Question 2

After reports of slow internet connectivity, a technician reviews the following logs from a server’s host-based

firewall:

Which of the following can the technician conclude after reviewing the above logs?

Options :

A : The server is under a DDoS attack from multiple geographic locations.

B : The server is compromised, and is attacking multiple hosts on the Internet.

C : The server is under an IP spoofing resource exhaustion attack.

D :

The server is unable to complete the TCP three-way handshake and send the last ACK.

Answer: C

Question 3

A hacker has a packet capture that contains:

Which of the following tools will the hacker use against this type of capture?

Options :

A : Password cracker

B : Vulnerability scanner

C : DLP scanner

D : Fuzzer

Answer: A

Question 4

SIMULATION

You have just received some room and WiFi access control recommendations from a security consulting

company. Click on each building to bring up available security controls. Please implement the following

requirements:

The Chief Executive Officer's (CEO) office had multiple redundant security measures installed on the door to

the office. Remove unnecessary redundancies to deploy three-factor authentication, while retaining the

expensive iris render.

The Public Cafe has wireless available to customers. You need to secure the WAP with WPA and place a

passphrase on the customer receipts.

In the Data Center you need to include authentication from the "something you know" category and take

advantage of the existing smartcard reader on the door.

In the Help Desk Office, you need to require single factor authentication through the use of physical tokens

given to guests by the receptionist.

The PII Office has redundant security measures in place. You need to eliminate the redundancy while

maintaining three-factor authentication and retaining the more expensive controls.

Instructions: The original security controls for each office can be reset at any time by selecting the Reset button. Once you have met the above requirements for each office, select the Save button. When you have completed the entire simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.