SEC504 Practice Test

SEC504 Practice Test practice questions, page 7 of 13, with answer review and explanations.

Question 31

Which of the following commands can be used for port scanning?

  1. nc -t
  2. nc -z
  3. nc -w
  4. nc -g

Question 32

Adam, a novice computer user, works primarily from home as a medical professional. He just bought a brand new Dual Core Pentium computer with over 3 GB of RAM. After about two months of working on his new computer, he notices that it is not running nearly as fast as it used to. Adam uses antivirus software, anti- spyware software, and keeps the computer up-to-date with Microsoft patches. After another month of working on the computer, Adam finds that his computer is even more noticeably slow. He also notices a window or two pop-up on his screen, but they quickly disappear. He has seen these windows show up, even when he has not been on the Internet. Adam notices that his computer only has about 10 GB of free space available. Since his hard drive is a 200 GB hard drive, Adam thinks this is very odd. Which of the following is the mostly likely the cause of the problem?

  1. Computer is infected with the stealth kernel level rootkit.
  2. Computer is infected with stealth virus.
  3. Computer is infected with the Stealth Trojan Virus.
  4. Computer is infected with the Self-Replication Worm.

Question 33

Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of Cross-Site Scripting attack Ryan intends to do?

  1. Non persistent
  2. Document Object Model (DOM)
  3. SAX
  4. Persistent

Question 34

You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. An attacker uses software that keeps trying password combinations until the correct password is found. Which type of attack is this?

  1. Denial-of-Service
  2. Man-in-the-middle
  3. Brute Force
  4. Vulnerability

Question 35

Many organizations create network maps of their network system to visualize the network and understand the relationship between the end devices and the transport layer that provide services. Which of the following are the techniques used for network mapping by large organizations? Each correct answer represents a complete solution. Choose three.

  1. Packet crafting
  2. Route analytics
  3. SNMP-based approaches
  4. Active Probing