Online Access Free EC1-349 Exam Questions

Web applications provide an Interface between end users and web servers through a set of web pages that are generated at the server-end or contain script code to be executed dynamically within the client Web browser.

• A.True
• B.False

Attackers can manipulate variables that reference files with "dot-dot-slash (./)" sequences and their variations such as http://www.juggyDoy.corn/GET/process.php./././././././././etc/passwd.
Identify the attack referred.

• A.Directory traversal
• B.XSS attack
• C.SQL Injection
• D.File injection

Log management includes all the processes and techniques used to collect, aggregate, and analyze computer-generated log messages. It consists of the hardware, software, network and media used to generate, transmit, store, analyze, and dispose of log data.

• A.True
• B.False

Attacker uses vulnerabilities in the authentication or session management functions such as exposed accounts, session IDs, logout, password management, timeouts, remember me. secret question, account update etc. to impersonate users, if a user simply closes the browser without logging out from sites accessed through a public computer, attacker can use the same browser later and exploit the user's privileges. Which of the following vulnerability/exploitation is referred above?

• A.Timeout Exploitation
• B.Session ID in URLs
• C.I/O exploitation
• D.Password Exploitation

Email spoofing refers to:

• A.Sending huge volumes of email to an address in an attempt to overflow the mailbox or overwhelm the server where the email address Is hosted to cause a denial-of-service attack
• B.A sudden spike of "Reply All" messages on an email distribution list, caused by one misdirected message
• C.The forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source
• D.The criminal act of sending an illegitimate email, falsely claiming to be from a legitimate site in an attempt to acquire the user's personal or account information