EC0-350 practice questions, page 14 of 15, with answer review and explanations.
Question 66
Which of the following conditions must be given to allow a tester to exploit a Cross-Site Request Forgery (CSRF) vulnerable web application?
The victim user must open the malicious link with an Internet Explorer prior to version 8.
The session cookies generated by the application do not have the HttpOnly flag set.
The victim user must open the malicious link with a Firefox prior to version 3.
The web application should not use random tokens.
Question 67
What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?
The request to the web server is not visible to the administrator of the vulnerable application.
The attack is called "Blind" because, although the application properly filters user input, it is still vulnerable to code injection.
The successful attack does not show an error message to the administrator of the affected application.
The vulnerable application does not display errors with information about the injection results to the attacker.
Question 68
During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?
Using the Metasploit psexec module setting the SA / Admin credential
Invoking the stored procedure xp_shell to spawn a Windows command shell
Invoking the stored procedure cmd_shell to spawn a Windows command shell
Invoking the stored procedure xp_cmdshell to spawn a Windows command shell
Question 69
The precaution of prohibiting employees from bringing personal computing devices into a facility is what type of security control?
Physical
Procedural
Technical
Compliance
Question 70
A pentester gains access to a Windows application server and needs to determine the settings of the built-in Windows firewall. Which command would be used?