SEC504 Practice Test

SEC504 Practice Test practice questions, page 9 of 13, with answer review and explanations.

Question 41

Which of the following statements about a Trojan horse are true? Each correct answer represents a complete solution. Choose two.

  1. It is a macro or script that attaches itself to a file or template.
  2. The writers of a Trojan horse can use it later to gain unauthorized access to a computer.
  3. It is a malicious software program code that resembles another normal program.
  4. It infects the boot record on hard disks and floppy disks.

Question 42

In which of the following attacking methods does an attacker distribute incorrect IP address?

  1. IP spoofing
  2. Mac flooding
  3. DNS poisoning
  4. Man-in-the-middle

Question 43

Which of the following types of attacks is mounted with the objective of causing a negative impact on the performance of a computer or network?

  1. Vulnerability attack
  2. Man-in-the-middle attack
  3. Denial-of-Service (DoS) attack
  4. Impersonation attack

Question 44

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server. The output of the scanning test is as follows: C:\whisker.pl -h target_IP_address --whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = - = = Host: target_IP_address = Server: Apache/1.3.12 (Win32) ApacheJServ/1.1 mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22 + 200 OK: HEAD /cgi-bin/printenv - John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server. Which of the following statements about 'Printenv' vulnerability are true? Each correct answer represents a complete solution. Choose all that apply.

  1. This vulnerability helps in a cross site scripting attack.
  2. 'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the attacker.
  3. The countermeasure to 'printenv' vulnerability is to remove the CGI script.
  4. With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other malicious scripts.

Question 45

Which of the following tools can be used for steganography? Each correct answer represents a complete solution. Choose all that apply.

  1. Image hide
  2. Stegbreak
  3. Snow.exe
  4. Anti-x