Online Access Free SEC504 Exam Questions

Which of the following is the process of comparing cryptographic hash functions of system executables and configuration files?

• A.Shoulder surfing
• B.File integrity auditing
• C.Reconnaissance
• D.Spoofing

Firewalking is a technique that can be used to gather information about a remote network protected by a firewall. This technique can be used effectively to perform information gathering attacks. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which of the following are pre-requisites for an attacker to conduct firewalking?
Each correct answer represents a complete solution. Choose all that apply.

• A.An attacker should know the IP address of a host located behind the firewall.
• B.An attacker should know the IP address of the last known gateway before the firewall.
• C.ICMP packets leaving the network should be allowed.
• D.There should be a backdoor installed on the network.

Which of the following languages are vulnerable to a buffer overflow attack?
Each correct answer represents a complete solution. Choose all that apply.

• A.C
• B.Java
• C.C++
• D.Action script

Which of the following types of attacks is often performed by looking surreptitiously at the keyboard or monitor of an employee's computer?

• A.Buffer-overflow attack
• B.Shoulder surfing attack
• C.Man-in-the-middle attack
• D.Denial-of-Service (DoS) attack

Which of the following statements are true about firewalking?
Each correct answer represents a complete solution. Choose all that apply.

• A.To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall.
• B.A malicious attacker can use firewalking to determine the types of ports/protocols that can bypass the firewall.
• C.Firewalking works on the UDP packets.
• D.In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall.