Sample Questions:

A web application that implements three invalid login attempts is mitigating against

Reverse brute force attacks.

Denial of service.

Brute force attacks.

Authentication bypass.

What type of attack leverages the trust that a user has in a website?

Cross-site request forgery

Cross-site scripting

Trust switching

Trust boundary issues

What does the command "xls clients -display 192.168.1.1:0.0 -/' do?

Lists the IPs of clients connected to a server

Lists the windows on a remote X Windows display

Opens a xterm window on a remote system

Performs a Man-in-the-Middle attack against a X Windows server

What is the security best-practice countermeasure to prevent port redirection?

Implementing host-based firewall ACLs

Implementing anti-virus

Consuming all ports with legitimate programs

Setting strong file system ACLs

A corporate user has just been hacked and shell code is installed. The attacker is running with NT AUTHORITY/SYSTEM privileges and cannot escalate to any other account. What protection mechanism will prevent the user's data from compromise?

Bit locker

Full disk encryption

Encrypted File System

Tight file level ACLs

Wireless protection based solely on MAC filtering goes against security best practices because

MAC addresses start with either 00:00:00:00 or ff:ff:ff:ff.

MAC addresses depend on your operating system.

MAC addresses can be spoofed Network card vendors all use the same

MAC addresses

After compromising a Linux/Unix host, an attacker tried to run the ifconfig command but receives the error following message: ifconfig: command not found What is the cause of this error message?

The ifconfig binary does not exist.

The user does not have permissions to run ifconfig

The execute bit is not set on the ifconfig binary.

The ifconfig binary is not in the user's path.