Frank is working on a vulnerability assessment for a company on the West coast. The company hired Frank to assess its network security through scanning, pen tests, and vulnerability assessments. After discovering numerous known vulnerabilities detected by a temporary IDS he set up, he notices a number of items that show up as unknown but questionable in the logs.

He looks up the behavior on the Internet, but cannot find anything related. 

What organization should Frank submit the log to find out if it is a new vulnerability or not?

Reveal Solution Hide Solution

What is a difference between host-based intrusion detection systems (HIDS) and network-based intrusion detection systems (NIDS)?

Reveal Solution Hide Solution

A chipset is a group of integrated circuits that are designed to work together and are usually marketed as a single product.” It is generally the motherboard chips or the chips used on the expansion card.

Which one of the following is well supported in most wireless applications?

Reveal Solution Hide Solution

In the process of hacking a web application, attackers manipulate the HTTP requests to subvert the application authorization schemes by modifying input fields that relate to the user ID, username, access group, cost, file names, file identifiers, etc.

They first access the web application using a low privileged account and then escalate privileges to access protected resources. 

What attack has been carried out?

Reveal Solution Hide Solution

In which of the following IDS evasion techniques does IDS reject the packets that an end system accepts?

Reveal Solution Hide Solution

Besides the policy implications of chat rooms, Internet Relay Chat (IRC) is frequented by attackers and used as a command and control mechanism.

IRC normally uses which one of the following TCP ports?

Reveal Solution Hide Solution

Internet Control Message Protocol (ICMP) messages occur in many situations, such as whenever a datagram cannot reach the destination or the gateway does not have the buffering capacity to forward a datagram.

Each ICMP message contains three fields: type, code, and checksum. Different types of Internet Control Message Protocols (ICMPs) are identified by a TYPE field.

If the destination is not reachable, which one of the following are generated?

Reveal Solution Hide Solution

John and Hillary works at the same department in the company. John wants to find out Hillary’s network password so he can take a look at her documents on the file server. He enables Lophtcrack program to sniffing mode. John sends Hillary an email with a link to Error! Reference source not found.

What information will he be able to gather from this?

Reveal Solution Hide Solution

Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM file on a computer. 

Where should Harold navigate on the computer to find the file?

Reveal Solution Hide Solution

Which one of the following log analysis tools is a Cisco Router Log Format log analyzer and it parses logs, imports them into a SQL database (or its own built-in database), aggregates them, and generates the dynamically filtered reports, all through a web interface?

Reveal Solution Hide Solution