Q43. What is the main difference between LAN MAN and NTLMv1 challenge/responses?

Q44. You work as a Network Administrator for Net World International. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2003. There are ten Sales Managers in the company. The company has recently provided laptops to all its Sales Managers. All the laptops run Windows XP Professional. These laptops will be connected to the company’s network through wireless connections. The company’s management wants to implement Shared Key authentication for these laptops. When you try to configure the network interface card of one of the laptops for Shared Key authentication, you find no such option. What will you do to enable Shared Key authentication?

Q45. Mark works as a Network Administrator for NetTech Inc. Several employees of the company work from the remote locations. The company provides a dial-up connection to employees to connect to the company’s network using remote access service. Mark wants to implement call back feature for the employees who are dialing for long distance. Which of the following protocols will he use for remote access services to accomplish the task?

Q46. Which of the following Penetration Testing steps includes network mapping and OS fingerprinting?

Q47. Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he review to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

Q48. You want to perform an active session hijack against Secure Inc. You have found a target that allows Telnet session. You have also searched an active session due to the high level of traffic on the network. What should you do next?

Q49. Analyze the command output below, what action is being performed by the tester?

Q50. Why is it important to have a cheat sheet reference of database system tables when performing SQL Injection?

Q51. Which of the following tools allow you to perform HTTP tunneling?
Each correct answer represents a complete solution. Choose all that apply.

Q52. You have obtained the hash below from the /etc/shadow file. What are you able to discern simply by looking at this hash?

Q53. You run the rdisk /s command to retrieve the backup SAM file on a computer. Where should you go on the computer to find the file?

Q54. TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to the target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the attacker and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored and the port will drop the packet. Which of the following operating systems can be easily identified with the help of TCP FIN scanning?

Q55. Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active Directory domain-based network. The domain contains one hundred Windows XP Professional client computers. Mark is deploying an 802.11 wireless LAN on the network. The wireless LAN will use Wired Equivalent Privacy (WEP) for all the connections. According to the company’s security policy, the client computers must be able to automatically connect to the wireless LAN. However, the unauthorized computers must not be allowed to connect to the wireless LAN and view the wireless network. Mark wants to configure all the wireless access points and client computers to act in accordance with the company’s security policy. What will he do to accomplish this? Each correct answer represents a part of the solution. Choose three.

Q56. Which of the following tools can be used to automate the MITM attack?

Q57. You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

Q58. Which of following tasks can be performed when Nikto Web scanner is using a mutation technique?
Each correct answer represents a complete solution. Choose all that apply.

Q59. Which of the following tools can be used for cracking the password of Server Message Block (SMB)?
Each correct answer represents a complete solution. Choose all that apply.

Q60. You are performing a wireless penetration lest and are currently looking for rogue access points in one of their large facilities. You need to select an antenna that you can setup in a building and monitor the area for several days to see if any access points are turned on during the duration of the test. What type of antenna will you be selecting for this task?

Q61. In which of the following scanning methods does an attacker send the spoofed IP address to send a SYN packet to the target?

Q62. John, a novice web user, makes a new E-mail account and keeps his password as “apple”, his favorite fruit.
John’s password is vulnerable to which of the following password cracking attacks?
Each correct answer represents a complete solution. Choose all that apply.

Q63. What is the MOST important document to obtain before beginning any penetration testing?

Q64. Which of the following attacks allows an attacker to recover the key in an RC4 encrypted stream from a large number of messages in that stream?

Q65. How can a non-privileged user on a Unix system determine if shadow passwords are being used?

Q66. When sniffing wireless frames, the interface mode plays a key role in successfully collecting traffic. Which of the mode or modes are best used for sniffing wireless traffic?