SEC504 Practice Test

SEC504 Practice Test practice questions, page 8 of 13, with answer review and explanations.

Question 36

Which of the following functions can you use to mitigate a command injection attack? Each correct answer represents a part of the solution. Choose all that apply.

  1. escapeshellarg()
  2. escapeshellcmd()
  3. htmlentities()
  4. strip_tags()

Question 37

Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to test the network security of the company. He created a webpage to discuss the progress of the tests with employees who were interested in following the test. Visitors were allowed to click on a company's icon to mark the progress of the test. Adam successfully embeds a keylogger. He also added some statistics on the webpage. The firewall protects the network well and allows strict Internet access. How was security compromised and how did the firewall respond?

  1. The attack was social engineering and the firewall did not detect it.
  2. Security was not compromised as the webpage was hosted internally.
  3. The attack was Cross Site Scripting and the firewall blocked it.
  4. Security was compromised as keylogger is invisible for firewall.

Question 38

Which of the following types of attacks is only intended to make a computer resource unavailable to its users?

  1. Denial of Service attack
  2. Replay attack
  3. Teardrop attack
  4. Land attack

Question 39

Which of the following statements about Denial-of-Service (DoS) attack are true? Each correct answer represents a complete solution. Choose three.

  1. It disrupts services to a specific computer.
  2. It changes the configuration of the TCP/IP protocol.
  3. It saturates network resources.
  4. It disrupts connections between two computers, preventing communications between services.

Question 40

Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point. Which of the following type of scans would be most accurate and reliable?

  1. UDP sacn
  2. TCP Connect scan
  3. ACK scan
  4. Fin scan