Which of the following applications is an example of a data-sending Trojan?

• A.SubSeven
• B.Senna Spy Generator
• C.Firekiller 2000
• D.eBlaster

Comment: *

Name: *

Email: *

Verification: *

John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters ='or''=' as a username and successfully logs on to the user page of the Web site. Now, John asks the we-aresecure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we-are-secure Website login page from the SQL injection attack?

• A.Use the escapeshellarg() function
• B.Use the escapeshellcmd() function
• C.Use the mysql_real_escape_string() function for escaping input
• D.Use the session_regenerate_id() function

Comment: *

Name: *

Email: *

Verification: *

You work as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. You are working as a root user on the Linux operating system. Your company is facing an IP spoofing attack.
Which of the following tools will you use to get an alert saying that an upcoming IP packet is being spoofed?

• A.Despoof
• B.Dsniff
• C.ethereal
• D.Neotrace

Comment: *

Name: *

Email: *

Verification: *

You run the following PHP script:
<?php $name = mysql_real_escape_string($_POST["name"]);
$password = mysql_real_escape_string($_POST["password"]); ?>
What is the use of the mysql_real_escape_string() function in the above script.
Each correct answer represents a complete solution. Choose all that apply.

• A.It can be used as a countermeasure against a SQL injection attack.
• B.It escapes all special characters from strings $_POST["name"] and $_POST["password"].
• C.It escapes all special characters from strings $_POST["name"] and $_POST["password"] except ' and ".
• D.It can be used to mitigate a cross site scripting attack.

Comment: *

Name: *

Email: *

Verification: *

Which of the following options scans the networks for vulnerabilities regarding the security of a network?

• A.Port enumerators
• B.System enumerators
• C.Network enumerators
• D.Vulnerability enumerators

Comment: *

Name: *

Email: *

Verification: *