SEC504 Sample Questions & Answers

Fill in the blank with the appropriate word. StackGuard (as used by Immunix),ssp/ProPolice(as used by OpenBSD), and Microsoft's/GS option use_______defense against buffer overflow attacks.

John works as a Network Security Professional. He is assigned a project to test the security of www.we-are-secure.com. He establishes a connection to a target host running a Web service with netcat and sends a bad html request in order to retrieve information about the service on the host.

Which of the following attacks is John using?

Many organizations create network maps of their network system to visualize the network and understand the relationship between the end devices and the transport layer that provide services.

Which of the following are the techniques used for network mapping by large organizations? Each correct answer represents a complete solution. Choose three.

Which of the following methods can be used to detect session hijacking attack?

Which of the following attacks involves multiple compromised systems to attack a single target?

Which of the following steps can be taken as countermeasures against sniffer attacks? Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements about buffer overflow are true?

Each correct answer represents a complete solution. Choose two.

Which of the following statements are true about Dsniff?

Each correct answer represents a complete solution. Choose two.

Andrew, a bachelor student of Faulkner University, creates a gmail account. He uses 'Faulkner' as the password for the gmail account. After a few days, he starts receiving a lot of e-mails stating that his gmail account has been hacked. He also finds that some of his important mails have been deleted by someone. Which of the following methods has the attacker used to crack Andrew's password? Each correct answer represents a complete solution. Choose all that apply.

You work as a Network Penetration tester in the Secure Inc. Your company takes the projects to test the security of various companies. Recently, Secure Inc. has assigned you a project to test the security of a Web site. You go to the Web site login page and you run the following SQL query:

What task will the above SQL query perform?