SEC504 Practice Test

SEC504 Practice Test practice questions, page 6 of 13, with answer review and explanations.

Question 26

You run the following command while using Nikto Web scanner: perl nikto.pl -h 192.168.0.1 -p 443 What action do you want to perform?

  1. Using it as a proxy server
  2. Updating Nikto
  3. Seting Nikto for network sniffing
  4. Port scanning

Question 27

Which of the following are types of access control attacks? Each correct answer represents a complete solution. Choose all that apply.

  1. Spoofing
  2. Brute force attack
  3. Dictionary attack
  4. Mail bombing

Question 28

Which of the following tools can be used for stress testing of a Web server? Each correct answer represents a complete solution. Choose two.

  1. Internet bots
  2. Scripts
  3. Anti-virus software
  4. Spyware

Question 29

Which of the following statements are true about tcp wrappers? Each correct answer represents a complete solution. Choose all that apply.

  1. tcp wrapper provides access control, host address spoofing, client username lookups, etc.
  2. When a user uses a TCP wrapper, the inetd daemon runs the wrapper program tcpd instead of running the server program directly.
  3. tcp wrapper allows host or subnetwork IP addresses, names and/or ident query replies, to be used as tokens to filter for access control purposes.
  4. tcp wrapper protects a Linux server from IP address spoofing.

Question 30

Which of the following DoS attacks affects mostly Windows computers by sending corrupt UDP packets?

  1. Fraggle
  2. Ping flood
  3. Bonk
  4. Smurf