NEW QUESTION 222
Which of the following tools is a wireless sniffer and analyzer that works on the Windows operating system?

NEW QUESTION 223
Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless
network of the company. He uses a tool that is a free open-source utility for network exploration.
The tool uses raw IP packets to determine the following:
What ports are open on our network systems.
What hosts are available on the network.
Identify unauthorized wireless access points.
What services (application name and version) those hosts are offering.
What operating systems (and OS versions) they are running.
What type of packet filters/firewalls are in use.
Which of the following tools is Victor using?

NEW QUESTION 224
You have been contracted to map me network and try to compromise the servers for a client. Which of the following would be an example of scope creep’ with respect to this penetration testing project?

NEW QUESTION 225
Which of the following nmap switches is used to perform ICMP netmask scanning?

NEW QUESTION 226
Which of the following tools can be used for session splicing attacks?

NEW QUESTION 227
Which of the following tools can be used as a Linux vulnerability scanner that is capable of identifying operating systems and network services?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 228
What command will correctly reformat the Unix passwordcopy and shadowcopy Tiles for input to John The Ripper?

NEW QUESTION 229
What concept do Rainbow Tables use to speed up password cracking?

NEW QUESTION 230
Which of the following standards is used in wireless local area networks (WLANs)?

NEW QUESTION 231
How can a non-privileged user on a Unix system determine if shadow passwords are being used?

NEW QUESTION 232
Which of the following can be the countermeasures to prevent NetBIOS NULL session enumeration in Windows 2000 operating systems?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 233
Which of the following event logs contains traces of brute force attempts performed by an attacker?

NEW QUESTION 234
Which of the following are considered Bluetooth security violations?
Each correct answer represents a complete solution. Choose two.

NEW QUESTION 235
You have been contracted to map me network and try to compromise the servers for a client. Which of the following would be an example of scope creep’ with respect to this penetration testing project?

NEW QUESTION 236
You’ve been asked to test a non-transparent proxy lo make sure it is working. After confirming the browser is correctly pointed at the proxy, you try to browse a web site. The browser indicates it is “loading” but never displays any part the page. Checking the proxy, you see a valid request in the proxy from your browser. Checking the response to the proxy, you see the results displayed in the accompanying screenshot. Which of the following answers is the most likely reason the browser hasn’t displayed the page yet?

NEW QUESTION 237
You are using the Nmap Scripting Engine and want detailed output of the script as it runs. Which option do you include in the command string?

NEW QUESTION 238
You run the following bash script in Linux:
for i in ‘cat hostlist.txt’ ;do nc -q 2 -v $i 80 < request.txt done where, hostlist.txt file contains the list of IP addresses and request.txt is the output file.
Which of the following tasks do you want to perform by running this script?

NEW QUESTION 239
Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless network of the company. He uses a tool that is a free open-source utility for network exploration.
The tool uses raw IP packets to determine the following:
What ports are open on our network systems.
What hosts are available on the network.
Identify unauthorized wireless access points.
What services (application name and version) those hosts are offering.
What operating systems (and OS versions) they are running.
What type of packet filters/firewalls are in use.
Which of the following tools is Victor using?

NEW QUESTION 240
Analyze the command output below. What information can the tester infer directly from the Information shown?

NEW QUESTION 241
Which of the following are the countermeasures against WEP cracking?
Each correct answer represents a part of the solution. Choose all that apply.

NEW QUESTION 242
You work as a Network Security Analyzer. You got a suspicious email while working on a forensic project. Now, you want to know the IP address of the sender so that you can analyze various information such as the actual location, domain information, operating system being used, contact information, etc. of the email sender with the help of various tools and resources. You also want to check whether this email is fake or real. You know that analysis of email headers is a good starting point in such cases. The email header of the suspicious email is given below:

What is the IP address of the sender of this email?

NEW QUESTION 243
A penetration tester used a client-side browser exploit from metasploit to get an unprivileged shell prompt on the target Windows desktop. The penetration tester then tried using the getsystem command to perform a local privilege escalation which failed. Which of the following could resolve the problem?

NEW QUESTION 244
A penetration tester used a client-side browser exploit from metasploit to get an unprivileged shell prompt on the target Windows desktop. The penetration tester then tried using the getsystem command to perform a local privilege escalation which failed. Which of the following could resolve the problem?

NEW QUESTION 245
Which of the following is NOT a Back orifice plug-in?