SEC504 Practice Test

SEC504 Practice Test practice questions, page 4 of 13, with answer review and explanations.

Question 16

You run the following bash script in Linux: for i in 'cat hostlist.txt' ;do nc -q 2 -v $i 80 < request.txt done Where, hostlist.txt file contains the list of IP addresses and request.txt is the output file. Which of the following tasks do you want to perform by running this script?

  1. You want to put nmap in the listen mode to the hosts given in the IP address list.
  2. You want to perform banner grabbing to the hosts given in the IP address list.
  3. You want to perform port scanning to the hosts given in the IP address list.
  4. You want to transfer file hostlist.txt to the hosts given in the IP address list.

Question 17

Which of the following characters will you use to check whether an application is vulnerable to an SQL injection attack?

  1. Dash (-)
  2. Double quote (")
  3. Single quote (')
  4. Semi colon (;)

Question 18

Adam has installed and configured his wireless network. He has enabled numerous security features such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless router. Adam notices that when he uses his wireless connection, the speed is sometimes 16 Mbps and sometimes it is only 8 Mbps or less. Adam connects to the management utility wireless router and finds out that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the router's logs and notices that the unfamiliar machine has the same MAC address as his laptop. Which of the following attacks has been occurred on the wireless network of Adam?

  1. NAT spoofing
  2. DNS cache poisoning
  3. MAC spoofing
  4. ARP spoofing

Question 19

Which of the following tools can be used to detect the steganography?

  1. Dskprobe
  2. Blindside
  3. ImageHide
  4. Snow

Question 20

Which of the following statements are true about session hijacking? Each correct answer represents a complete solution. Choose all that apply.

  1. Use of a long random number or string as the session key reduces session hijacking.
  2. It is used to slow the working of victim's network resources.
  3. TCP session hijacking is when a hacker takes over a TCP session between two machines.
  4. It is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system.