What is the most common method to exploit the "Bash Bug" or "Shellshock" vulnerability?

• A.Manipulate format strings in text fields
• B.SSH
• C.Through Web servers utilizing CGI (Common Gateway Interface) to send a malformed environment variable to a vulnerable Web server
• D.SYN Flood

Comment: *

Name: *

Email: *

Verification: *

You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture in terms of server placement?

• A.A web server and the database server facing the Internet, an application server on the internal network
• B.All three servers need to be placed internally
• C.All three servers need to face the Internet so that they can communicate between themselves
• D.A web server facing the Internet, an application server on the internal network, a database server on the internal network

Comment: *

Name: *

Email: *

Verification: *

In the field of cryptanalysis, what is meant by a "rubber-hose" attack?

• A.Forcing the targeted key stream through a hardware-accelerated device such as an ASIC.
• B.A backdoor placed into a cryptographic algorithm by its creator.
• C.Attempting to decrypt cipher text by making logical assumptions about the contents of the original plain text.
• D.Extraction of cryptographic secrets through coercion or torture.

Comment: *

Name: *

Email: *

Verification: *

#!/usr/bin/python import socket buffer=[""A""] counter=50 while len(buffer)<=100: buffer.append (""A""*counter) counter=counter+50 commands= [""HELP"",""STATS ."",""RTIME ."",""LTIME. "",""SRUN ."',""TRUN ."",""GMON
."",""GDOG ."",""KSTET .",""GTER ."",""HTER ."", ""LTER .",""KSTAN .""] for command in commands: for buffstring in buffer: print ""Exploiting"" +command +"":""+str(len(buffstring)) s=socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect(('127.0.0.1', 9999)) s.recv(50) s.send(command+buffstring) s.close() What is the code written for?

• A.Bruteforce
• B.Encryption
• C.Denial-of-service (DOS)
• D.Buffer Overflow

Comment: *

Name: *

Email: *

Verification: *

The configuration allows a wired or wireless network interface controller to pass all traffic it receives to the Central Processing Unit (CPU), rather than passing only the frames that the controller is intended to receive. Which of the following is being described?

• A.Promiscuous mode
• B.Port forwarding
• C.WEM
• D.Multi-cast mode

Comment: *

Name: *

Email: *

Verification: *