The "gray box testing" methodology enforces what kind of restriction?

• A.The internal operation of a system is only partly accessible to the tester.
• B.The internal operation of a system is completely known to the tester.
• C.Only the external operation of a system is accessible to the tester.
• D.Only the internal operation of a system is known to the tester.

Comment: *

Name: *

Email: *

Verification: *

What is GINA?

• A.Graphical Identification and Authentication DLL
• B.Gateway Interface Network Application
• C.GUI Installed Network Application CLASS
• D.Global Internet National Authority (G-USA)

Comment: *

Name: *

Email: *

Verification: *

What is the best description of SQL Injection?

• A.It is an attack used to gain unauthorized access to a database.
• B.It is an attack used to modify code in an application.
• C.It is a Man-in-the-Middle attack between your SQL Server and Web App Server.
• D.It is a Denial of Service Attack.

Comment: *

Name: *

Email: *

Verification: *

Which command line switch would be used in NMAP to perform operating system detection?

• A.-sP
• B.-O
• C.-sO
• D.-OS

Comment: *

Name: *

Email: *

Verification: *

A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.P.'s computer.
What is the consultant's obligation to the financial organization?

• A.Say nothing and continue with the security testing.
• B.Bring the discovery to the financial organization's human resource department.
• C.Stop work immediately and contact the authorities.
• D.Delete the pornography, say nothing, and continue security testing.

Comment: *

Name: *

Email: *

Verification: *