NVST quiz 2 (31- 60)

Which of the following SuperScan4's tool is used to uncover the users account list?

Which of the following are the basic types of hackers attack?
i. Denial of Service Attack
ii. Repudiation Attack
iii. Access Attack
iv. Modification Attack

Which of the following is a class C address?

Which of the following event file is used to stores events associated with the systems functioning e.g. failure of a driver or inability of a service to start in Windows system?

The most important elements of Google’s technology are:
i. The Google bots
ii. The Google index
iii. The Google cache
iv. The Google API

Most Application-layer protocols only use UDP or TCP at the Transport layer. Which of the following could use both?

Which of the following is the type of algorithm used by MD5?

The exploitation of resources can be performed in many ways. Some of the more common ways are:
i. Technical Vulnerability Exploitation
ii. Denial of Service
iii. Information Gathering
iv. Social Engineering

Starting with Windows XP Service pack 2 and Windows Server 2003 Service Pack 1, Microsoft's OS provides a feature called _____________ to support non-executable stack or heap pabilities.

Which of the following is Not a feature of Windows User-Mode Rootkits?

Consider the situation in which an intervening entity such as a firewall blocks direct access to a target system. Resourceful attackers can find their way around these obstacles using.

A(n) _______ is a manner of manipulating software to result in undesired behaviour.

Which of the following event file is used to stores events associated with application e.g. database, Web servers or user applications in Windows system?

Which of the following is Not the correct method to defense against bots, backdoors & spyware?

Which of the following is NOT a Distributed Denial-of-Service defenses?

Which of the following is FALSE?

Which of the following is a correct definition of a Trojan?

Each of the following protocols can be used by TCP for transmissions over the Internet except _________.

The most popular techniques for launching packet floods are:
i. Bonk;
ii. SYN floods
iii. Smurf attacks
iv. Distributed DoS attacks

IP addresses beginning with 127 decimal are reserved for ___________.

Which of the following protocol does Ethereal indicate when pinging a computer?

For Information Gathering Methodology under Publicly Available Information, what is the common information an attacker looks for?
i. Names
ii. Emails
iii. Technologies
iv. Current events / Recent happenings

What does it mean when running the following command at PC 192.168.1.2? winrelay –lip 192.168.1.2 –lp 4000 –dip 192.168.1.23 –dp 5000 –proto tcp
i. It is a Trojan horse;
ii. PC 192.168.1.2 has been setup to listen to port 4000;
iii. The traffic arrives at port 5000 will be redirected to port 4000;
iv. PC 192.168.1.23 is the destination where the traffic will go to.

Windows s events information is constantly being written into,
i. SECURITY.LOG ;
ii. FILE.LOG;
iii. APPLICATION.LOG;
iv. SYSTEM.LOG.

Sending an e-mail from one address but making it seem as if it is coming from another is called ______________.

Which one of the following best describes the type of attack designed to bring a network to a halt by flooding the systems with useless traffic?

Which are the other three of the SIX common techniques can be applied to mount an effective defence against the attacks from having the ability to alter logs?
• Activate Logging
• Setting Proper Permissions
• Using a Separate Logging Server

i. Encrypting Log Files
ii. Making Log Files Append Only
iii. Protecting Log Files Using Write-once Media
iv. Renaming Log Files

What is the meaning of Anonymizing HTTP Proxy?

Which one of the following is not true about a web server?

Password cracking involves _________________ .