Which of the following are the limitations for the cross site request forgery (CSRF) attack?
Each correct answer represents a complete solution. Choose all that apply.

• A.The attacker must determine the right values for all the form inputs.
• B.The target site should have limited lifetime authentication cookies.
• C.The target site should authenticate in GET and POST parameters, not only cookies.
• D.The attacker must target a site that doesn't check the referrer header.

Comment: *

Name: *

Email: *

Verification: *

Adam works as a Network administrator for Umbrella Inc. He noticed that an ICMP ECHO requests is coming from
some suspected outside sources. Adam suspects that some malicious hacker is trying to perform ping sweep attack on
the network of the company. To stop this malicious activity, Adam blocks the ICMP ECHO request from any outside
sources.
What will be the effect of the action taken by Adam?

• A.Network is now vulnerable to Ping of death attack.
• B.Network is protected from the ping sweep attack until the next reboot of the server.
• C.Network turns completely immune from the ping sweep attacks.
• D.Network is still vulnerable to ping sweep attack.

Comment: *

Name: *

Email: *

Verification: *

Adam works as a Senior Programmer for Umbrella Inc. A project has been assigned to him to write a short program to gather user input for a Web application. He wants to keep his program neat and simple. His chooses to use printf(str) where he should have ideally used printf("%s", str).
What attack will his program expose the Web application to?

• A.Format string attack
• B.Sequence++ attack
• C.Cross Site Scripting attack
• D.SQL injection attack

Comment: *

Name: *

Email: *

Verification: *

Which of the following attacks allows an attacker to retrieve crucial information from a Web server's database?

• A.Server data attack
• B.SQL injection attack
• C.Database retrieval attack
• D.PHP injection attack

Comment: *

Name: *

Email: *

Verification: *

You work as a professional Ethical Hacker. You are assigned a project to test the security of www.weare-secure.com. You somehow enter in we-are-secure Inc. main server, which is Windows based.
While you are installing the NetCat tool as a backdoor in the we-are-secure server, you see the file credit.dat having the list of credit card numbers of the company's employees. You want to transfer the credit.dat file in your local computer so that you can sell that information on the internet in the good price. However, you do not want to send the contents of this file in the clear text format since you do not want that the Network Administrator of the we-are-secure Inc. can get any clue of the hacking attempt. Hence, you decide to send the content of the credit.dat file in the encrypted format.
What steps should you take to accomplish the task?

• A.You will use the ftp service.
• B.You will use brutus.
• C.You will use CryptCat instead of NetCat.
• D.You will use Wireshark.

Comment: *

Name: *

Email: *

Verification: *