Question 1

Where should a security tester be looking for information that could be used by an attacker against an organization? (Select all that apply)

Accepted Answer

A Security tester should search for information everywhere that he/she can access. You never know where you find that small piece of information that could
penetrate a strong defense.

Question 2

What does the term “Ethical Hacking” mean?

Accepted Answer

Ethical hacking is only about defending your self or your employer against malicious persons by using the same techniques and skills.

Question 3

What is the essential difference between an ‘Ethical Hacker’ and a ‘Cracker’?

Accepted Answer

The ethical hacker uses the same techniques and skills as a cracker and the motive is to find the security breaches before a cracker does. There is nothing that
says that a cracker does not get paid for the work he does, a ethical hacker has the owners authorization and will get paid even if he does not succeed to
penetrate the target.

Question 4

ABC.com is legally liable for the content of email that is sent from its systems, regardless of whether the message was sent for private or business-related
purpose. This could lead to prosecution for the sender and for the company’s directors if, for example, outgoing email was found to contain material that was
pornographic, racist or likely to incite someone to commit an act of terrorism.
You can always defend yourself by ‘ignorance of the law’ clause.

Accepted Answer

Ignorantia juris non excusat or Ignorantia legis neminem excusat (Latin for "ignorance of the law does not excuse" or "ignorance of the law excuses no one") is a
public policy holding that a person who is unaware of a law may not escape liability for violating that law merely because he or she was unaware of its content; that
is, persons have presumed knowledge of the law. Presumed knowledge of the law is the principle in jurisprudence that one is bound by a law even if one does not
know of it. It has also been defined as the "prohibition of ignorance of the law".

Question 5

Which of the following activities would not be considered passive footprinting?

Accepted Answer

Passive footprinting is a method in which the attacker never makes contact with the target. Scanning the targets IP addresses can be logged at the target and
therefore contact has been made.

Question 6

A Company security System Administrator is reviewing the network system log files. He notes the following:
? Network log files are at 5 MB at 12:00 noon.
? At 14:00 hours, the log files at 3 MB.
What should he assume has happened and what should he do about the situation?

Accepted Answer

You should never assume a host has been compromised without verification. Typically, disconnecting a server is an extreme measure and should only be done
when it is confirmed there is a compromise or the server contains such sensitive data that the loss of service outweighs the risk. Never assume that any
administrator or automatic process is making changes to a system. Always investigate the root cause of the change on the system and follow your organizations
security policy.

Question 7

You receive an email with the following message:
Hello Steve,
We are having technical difficulty in restoring user database record after the recent blackout. Your account data is corrupted. Please logon to the
SuperEmailServices.com and change your password.
http://www.supermailservices.com@0xde.0xad.0xbe.0xef/support/logon.htm
If you do not reset your password within 7 days, your account will be permanently disabled locking you out from our e-mail services.
Sincerely, Technical Support
SuperEmailServices
From this e-mail you suspect that this message was sent by some hacker since you have been using their e-mail services for the last 2 years and they have never
sent out an e-mail such as this. You also observe the URL in the message and confirm your suspicion about 0xde.0xad.0xbde.0xef which looks like hexadecimal
numbers. You immediately enter the following at Windows 2000 command prompt:
Ping 0xde.0xad.0xbe.0xef
You get a response with a valid IP address.
What is the obstructed IP address in the e-mail URL?

Accepted Answer

0x stands for hexadecimal and DE=222, AD=173, BE=190 and EF=239

Question 8

To what does “message repudiation” refer to what concept in the realm of email security?

Accepted Answer

A quality that prevents a third party from being able to prove that a communication between two other parties ever took place. This is a desirable quality if you do
not want your communications to be traceable.
Non-repudiation is the opposite quality—a third party can prove that a communication between two other parties took place. Non-repudiation is desirable if you want
to be able to trace your communications and prove that they occurred. Repudiation – Denial of message submission or delivery.

Question 9

A very useful resource for passively gathering information about a target company is:

Accepted Answer

A, C & D are "Active" scans, the question says: "Passively"

Question 10

Your lab partner is trying to find out more information about a competitors web site. The site has a .com extension. She has decided to use some online whois
tools and look in one of the regional Internet registrys. Which one would you suggest she looks in first?

Accepted Answer

Regional registries maintain records from the areas from which they govern. ARIN is responsible for domains served within North and South America and
therefore, would be a good starting point for a .com domain.