SEC504 Practice Test

SEC504 Practice Test practice questions, page 12 of 13, with answer review and explanations.

Question 56

SIMULATION - Fill in the blank with the appropriate word. StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's/GS option use ______ defense against buffer overflow attacks.

Question 57

Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs when a particular operation/function writes more data into a variable than the variable was designed to hold. Which of the following are the two popular types of buffer overflows? Each correct answer represents a complete solution. Choose two.

  1. Dynamic buffer overflows
  2. Stack based buffer overflow
  3. Heap based buffer overflow
  4. Static buffer overflows

Question 58

Maria works as a professional Ethical Hacker. She is assigned a project to test the security of www.we-are-secure.com. She wants to test a DoS attack on the We-are-secure server. She finds that the firewall of the server is blocking the ICMP messages, but it is not checking the UDP packets. Therefore, she sends a large amount of UDP echo request traffic to the IP broadcast addresses. These UDP requests have a spoofed source address of the We-are-secure server. Which of the following DoS attacks is Maria using to accomplish her task?

  1. Ping flood attack
  2. Fraggle DoS attack
  3. Teardrop attack
  4. Smurf DoS attack

Question 59

Your company has been hired to provide consultancy, development, and integration services for a company named Brainbridge International. You have prepared a case study to plan the upgrade for the company. Based on the case study, which of the following steps will you suggest for configuring WebStore1? Each correct answer represents a part of the solution. Choose two.

  1. Customize IIS 6.0 to display a legal warning page on the generation of the 404.2 and 404.3 errors.
  2. Move the WebStore1 server to the internal network.
  3. Configure IIS 6.0 on WebStore1 to scan the URL for known buffer overflow attacks.
  4. Move the computer account of WebStore1 to the Remote organizational unit (OU).

Question 60

Which of the following attacks is specially used for cracking a password?

  1. PING attack
  2. Dictionary attack
  3. Vulnerability attack
  4. DoS attack