TechTonic, a leading software solution provider, is incorporating stringent cybersecurity measures for their Windows-based server farm. Recently, it noticed a series of unauthorized activities within its systems but could not trace back tot he origins. The company Intends to bolster Its monitoring capabilities by comprehensively analyzing Windows system logs. Which strategy should TechTonic prioritize to gain an insightful and effective analysis of its Windows logs, aiming to trace potential intrusions?

• A.Implement a centralized logging server and analyze logs using pattern-detection algorithms.
• B.Set up monitoring only for Windows Event Log IDs commonly associated with security breaches.
• C.Routinely back up logs every week and conduct a monthly manual review to detect anomalies.
• D.Focus solely on logs from critical servers, assuming other logs are less consequential.

Comment: *

Name: *

Email: *

Verification: *

A web application, www.moviescope.com. hosted on your tarqet web server is vulnerable to SQL injection attacks. Exploit the web application and extract the user credentials from the moviescope database. Identify the UID (user ID) of a user, John, in the database. Note: Vou have an account on the web application, and your credentials are samAest.
(Practical Question)

• A.3
• B.4
• C.2
• D.5

Correct Answer: B

4 is the UID (user ID) of a user, John, in the database in the above scenario. A web application is a software application that runs on a web server and can be accessed by users through a web browser. A web application can be vulnerable to SQL injection attacks, which are a type of web application attack that exploit a vulnerability in a web application that allows an attacker to inject malicious SQL statements into an input field, such as a username or password field, and execute them on the database server. SQL injection can be used to bypass authentication, access or modify sensitive data, execute commands, etc. To exploit the web application and extract the user credentials from the moviescope database, one has to follow these steps:
* Open a web browser and type www.moviescope.com
* Press Enter key to access the web application.
* Enter sam as username and test as password.
* Click on Login button.
* Observe that a welcome message with username sam is displayed.
* Click on Logout button.
* Enter sam' or '1'='1 as username and test as password.
* Click on Login button.
* Observe that a welcome message with username admin is displayed, indicating that SQL injection was successful.
* Click on Logout button.
* Enter sam'; SELECT * FROM users; - as username and test as password.
* Click on Login button.
* Observe that an error message with user credentials from users table is displayed.
The user credentials from users table are:

The UID that is mapped to user john is 4

Comment: *

Name: *

Email: *

Verification: *

An employee was fired from his security analyst job due to misconduct. While leaving, he installed a Trojan server on his workstation at 172.30.20.75. As an ethical hacker, you are asked to identify and connect to the Trojan server and explore available files. Enter the name of the VBScript file located in the Pictures folder of the workstation. Hint: You can use one of the Ttojan client applications available at "Z:\CCT-Tools\CCT Module 01 Information SecurityThreats and Vulnerabilities\Remote Access Ttojans (RAT)" of Attacker Machine-1. (Practical Question)

• A.B00m3rang
• B.ReboundBlitz
• C.Recoil Wave
• D.EchoStrike

Comment: *

Name: *

Email: *

Verification: *

Ashton is working as a security specialist in SoftEight Tech. He was instructed by the management to strengthen the Internet access policy. For this purpose, he implemented a type of Internet access policy that forbids everything and imposes strict restrictions on all company computers, whether it is system or network usage.
Identify the type of Internet access policy implemented by Ashton in the above scenario.

• A.Permissive policy
• B.Promiscuous policy
• C.Prudent policy
• D.Paranoid policy

Comment: *

Name: *

Email: *

Verification: *

In an organization, all the servers and database systems are guarded in a sealed room with a single entry point. The entrance is protected with a physical lock system that requires typing a sequence of numbers and letters by using a rotating dial that intermingles with several other rotating discs.
Which of the following types of physical locks is used by the organization in the above scenario?

• A.Electromagnetic locks
• B.Mechanical locks
• C.Digital locks
• D.Combination locks

Comment: *

Name: *

Email: *

Verification: *