Which of the following penetration testing phases involves gathering data from whois, DNS, and network scanning, which helps in mapping a target network and provides valuable information regarding the operating system and applications running on the systems?

• A.Post-attack phase
• B.Attack phase
• C.Pre-attack phase
• D.On-attack phase

Comment: *

Name: *

Email: *

Verification: *

While reviewing traffic from a tcpdump capture, you notice the following commands being sent from a remote system to one of your web servers:
C:\>sc winternet.host.com create ncservicebinpath- "c:\tools\ncexe -I -p 2222 -e cmd.exe" C:\>sc vJnternet.host.com query ncservice.
What is the intent of the commands?

• A.The first command creates a backdoor shell as a service. It is being started on TCP2222 using cmd.exe.
  The second command verifies the service is created and itsstatus.
• B.The first command creates a backdoor shell as a service. It is being started on UDP2222 using cmd.exe.
  The second command verifies the service is created and itsstatus.
• C.This creates a service called ncservice which is linked to the cmd.exe command andits designed to stop any instance of nc.exe being run. The second command verifiesthe service is created and its status.
• D.The first command verifies the service is created and its status. The secondcommand creates a backdoor shell as a service. It is being started on TCP 2222connected to cmd.exe.

Comment: *

Name: *

Email: *

Verification: *

Which of the following wireless security features provides the best wireless security mechanism?

• A.WPA with 802.1X authentication
• B.WPA with Pre Shared Key
• C.WPA
• D.WEP

Comment: *

Name: *

Email: *

Verification: *

A penetration tester wishes to stop the Windows Firewall process on a remote host running Windows Vista She issues the following commands:

A check of the remote host indicates that Windows Firewall is still running. Why did the command fail?

• A.The user does not have the access level needed to stop the firewall.
• B.The sc command needs to be passed the IP address of the target.
• C.The kernel prevented the command from being executed.
• D.The remote server timed out and did not complete the command.

Comment: *

Name: *

Email: *

Verification: *

A client has asked for a vulnerability scan on an internal network that does not have internet access. The rules of engagement prohibits any outside connection for the Nessus scanning machine. The customer has asked you to scan for a new critical vulnerability, which was released after the testing started, winch of the following methods of updating the Nessus plugins does not violate the rules of engagement?

• A.Change the routing and connect through an alternative gateway
• B.Connect the scanning machine via wireless bridge and download the updateddirectly
• C.Download the updates on an alternative machine and manually load on scanningmachine
• D.Proceed with the test and note the limitation of updating the plugins

Comment: *

Name: *

Email: *

Verification: *