SEC504 Practice Questions

Brutus is a password cracking tool that can be used to crack the following authentications:

• HTTP (Basic Authentication)
• HTTP (HTML Form/CGI)
• POP3 (Post Office Protocol v3)
• FTP (File Transfer Protocol)
• SMB (Server Message Block)
• Telnet

Which of the following attacks can be performed by Brutus for password cracking? Each correct answer represents a complete solution. Choose all that apply.

Victor wants to send an encrypted message to his friend. He is using certain steganography technique to accomplish this task. He takes a cover object and changes it accordingly to hide information. This secret information is recovered only when the algorithm compares the changed cover with the original cover. Which of the following Steganography methods is Victor using to accomplish the task?

John works as a professional Ethical Hacker. He has been assigned the project of testing the security o fwww.we-are-secure.com. He wants to perform a stealth scan to discover open ports and applications running on the We-are-secure server. For this purpose, he wants to initiate scanning with the IP address of any third party. Which of the following scanning techniques will John use to accomplish his task?

Which of the following techniques does an attacker use to sniff data frames on a local area network and modify the traffic?

An incident handler is analyzing network traffic with Wireshark and observes a large number of DNS queries for subdomains of c2.attacker.com. The subdomains appear to be encoded strings. This activity is indicative of which post-exploitation technique?

Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is eavesdropping the conversation and keeps the password. After the interchange is over, Eve connects to Bob posing as Alice; when asked for a proof of identity, Eve sends Alice's password read from the last session, which Bob accepts.
Which of the following attacks is being used by Eve?

In which of the following steps of the incident handling processes does the Incident Handler make sure that all business processes and functions are back to normal and then also wants to monitor the system or processes to ensure that the system is not compromised again?

Victor is a novice Ethical Hacker. He is learning the hacking process, i.e., the steps taken by malicious hackers to perform hacking. Which of the following steps is NOT included in the hacking process?

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

Which of the following statements about reconnaissance is true?