SEC504 Practice Test

SEC504 Practice Test practice questions, page 5 of 13, with answer review and explanations.

Question 21

Which of the following types of attacks is the result of vulnerabilities in a program due to poor programming techniques?

  1. Evasion attack
  2. Denial-of-Service (DoS) attack
  3. Ping of death attack
  4. Buffer overflow attack

Question 22

Adam works as an Incident Handler for Umbrella Inc. His recent actions towards the incident are not up to the standard norms of the company. He always forgets some steps and procedures while handling responses as they are very hectic to perform. Which of the following steps should Adam take to overcome this problem with the least administrative effort?

  1. Create incident manual read it every time incident occurs.
  2. Appoint someone else to check the procedures.
  3. Create incident checklists.
  4. Create new sub-team to keep check.

Question 23

Jason, a Malicious Hacker, is a student of Baker university. He wants to perform remote hacking on the server of DataSoft Inc. to hone his hacking skills. The company has a Windows-based network. Jason successfully enters the target system remotely by using the advantage of vulnerability. He places a Trojan to maintain future access and then disconnects the remote session. The employees of the company complain to Mark, who works as a Professional Ethical Hacker for DataSoft Inc., that some computers are very slow. Mark diagnoses the network and finds that some irrelevant log files and signs of Trojans are present on the computers. He suspects that a malicious hacker has accessed the network. Mark takes the help from Forensic Investigators and catches Jason. Which of the following mistakes made by Jason helped the Forensic Investigators catch him?

  1. Jason did not perform a vulnerability assessment.
  2. Jason did not perform OS fingerprinting.
  3. Jason did not perform foot printing.
  4. Jason did not perform covering tracks.
  5. Jason did not perform port scanning.

Question 24

Which of the following is a technique of using a modem to automatically scan a list of telephone numbers, usually dialing every number in a local area code to search for computers, Bulletin board systems, and fax machines?

  1. Demon dialing
  2. Warkitting
  3. War driving
  4. Wardialing

Question 25

SIMULATION - Fill in the blank with the appropriate term. _______is the practice of monitoring and potentially restricting the flow of information outbound from one network to another