QUESTION 213
You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linuxbased server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?

QUESTION 214
A client has asked for a vulnerability scan on an internal network that does not have internet access. The rules of engagement prohibits any outside connection for the Nessus scanning machine. The customer has asked you to scan for a new critical vulnerability, which was released after the testing started, winch of the following methods of updating the Nessus plugins does not violate the rules of engagement?

QUESTION 215
Which of the following security policies will you implement to keep safe your data when you connect your Laptop to the office network over IEEE 802.11 WLANs?
Each correct answer represents a complete solution. Choose two.

QUESTION 216
An executive in your company reports odd behavior on her PDA. After investigation you discover that a trusted device is actually copying data off the PDA. The executive tells you that the behavior started shortly after accepting an e-business card from an unknown person. What type of attack is this?

QUESTION 217
Where are Netcat’s own network activity messages, such as when a connection occurs, sent?

QUESTION 218
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He has successfully completed the following steps of the preattack phase:
Information gathering
Determining network range
Identifying active machines
Finding open ports and applications
lOS fingerprinting
Fingerprinting services
Now John wants to perform network mapping of the We-are-secure network. Which of the following tools can he use to accomplish his task?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 219
You want that some of your Web pages should not be crawled. Which one of the following options will you use to accomplish the task?

QUESTION 220
Which of the following is a person-to-person attack in which an attacker convinces the target that he or she has a problem or might have a certain problem in the future and that he, the attacker, is ready to help solve the problem?

QUESTION 221
Every network device contains a unique built in Media Access Control (MAC) address, which is used to identify the authentic device to limit the network access. Which of the following addresses is a valid MAC address?

QUESTION 222
Which of the following statements are true about NTLMv1?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 223
John visits an online shop that stores the IDs and prices of the items to buy in a cookie. After selecting the items that he wants to buy, the attacker changes the price of the item to 1.
Original cookie values:
ItemID1=2
ItemPrice1=900
ItemID2=1
ItemPrice2=200
Modified cookie values:
ItemID1=2
ItemPrice1=1
ItemID2=1
ItemPrice2=1
Now, he clicks the Buy button, and the prices are sent to the server that calculates the total price.
Which of the following hacking techniques is John performing?

QUESTION 224
Which of the following event logs contains traces of brute force attempts performed by an attacker?

QUESTION 225
John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we- are-secure.com. He enters the following command on the Linux terminal:chmod 741 secure.c Considering the above scenario, which of the following statements are true?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 226
How can web server logs be leveraged to perform Cross-Site Scripting (XSSI?

QUESTION 227
Which of the following tools can be used for cracking the password of Server Message Block (SMB)?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 228
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He has successfully completed the following pre-attack phases while testing the security of the server:
Footprinting Scanning Now he wants to conduct the enumeration phase. Which of the following tools can John use to conduct it?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 229
Which of the following ports will you scan to search for SNMP enabled devices in the network?

QUESTION 230
Which of the following statements are true about NTLMv1?
Each correct answer represents a complete solution. Choose all that apply.