SEC504 Practice Test

SEC504 Practice Test practice questions, page 10 of 13, with answer review and explanations.

Question 46

Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

  1. Fragroute
  2. Absinthe
  3. Stick
  4. ADMutate

Question 47

Which of the following attacks come under the category of layer 2 Denial-of-Service attacks? Each correct answer represents a complete solution. Choose all that apply.

  1. Spoofing attack
  2. SYN flood attack
  3. Password cracking
  4. RF jamming attack

Question 48

Which of the following tools can be used to perform brute force attack on a remote database? Each correct answer represents a complete solution. Choose all that apply.

  1. SQLBF
  2. SQLDict
  3. FindSA
  4. nmap

Question 49

Which of the following are the primary goals of the incident handling team? Each correct answer represents a complete solution. Choose all that apply.

  1. Freeze the scene.
  2. Repair any damage caused by an incident.
  3. Prevent any further damage.
  4. Inform higher authorities.

Question 50

You see the career section of a company's Web site and analyze the job profile requirements. You conclude that the company wants professionals who have a sharp knowledge of Windows server 2003 and Windows active directory installation and placement. Which of the following steps are you using to perform hacking?

  1. Scanning
  2. Covering tracks
  3. Reconnaissance
  4. Gaining access