quiz-ethical hacking

Question Description

Question 1 (1 point)

Saved

In the URL encoding scheme, the URL is converted into a valid ASCII format, so that data can be safely transported over HTTP. Which character is used in the URL encoding followed by the character’s two-digit ASCII code, which is expressed in hexadecimal?. Select one

Question 1 options:

	#
	&
	$
	%

Question 2 (1 point)

Vulnerability management life cycle is an important process that helps in finding and remediating security weaknesses before they are exploited.

identify the phase that involves the remediation.

Question 2 options:

	Pre-Assessment Phase
	Vulnerability Assessment Phase
	Risk Assessment Phase
	Post Assessment Phase

Question 3 (1 point)

Silicon Pvt Ltd is a reputed company, which is having around 1000’s employees working in their company. One day, one of the employees approached the authorized person of the organization claiming that he/she forgot their ID badge and requested the person to allow through a secure door. Whereas the authorized person believed that the person forgot the ID badge and helped the person to go through the entrance by swiping with his/her ID badge. Later on that authorized person realized that the person is a non-employee of the organization and he/she is an intruder who intentionally entered into the company From the above scenario, which of the following comes under the Human-based Social Engineerin

Question 3 options:

	Tailgating
	Piggybacking
	Reverse Social Engineering
	None of the above

Question 4 (1 point)

Run the following ‘nbtstat’ command, in order to get the content of NetBIOS name cache, the tables of NetBIOS names and their resolved IP addresse

Question 4 options:

	. nbstat .exe –e
	nbstat .exe –t
	nbstat .exe –c
	nbstat .exe –i

Question 5 (1 point)

Which type of attack that search for the web server login passwords by using the alphabetical letters, symbols and number is called

Question 5 options:

	Password Guessing
	Dictionary Attack
	Brute Force Attack
	Hybrid Attack

Question 6 (1 point)

From the following TCP Communication Flags identity the flag which Initiates a connection between different hosts.

Question 6 options:

	SYN
	FIN
	ACK
	. PSH

Question 7 (1 point)

Saved

Google supports several advanced operators that help in modifying the search. Which of the following Google advanced search operator displays the web pages stored in the Google cache

Question 7 options:

	[site:]
	[link:]
	[info:]
	[cache:]

Question 8 (1 point)

Which of the following term is defined as the process of installing a modified set of kernel patches that allows running third-party applications not signed by the OS vendor?

Question 8 options:

	Tracking
	Hijacking
	Blackjacking
	Jailbreaking

Question 9 (1 point)

Jack, a skillful hacker targeted a major banking services firm located in Japan, using the LOIC (Low Orbit Ion Cannon) tool, Jack made the number of HTTP requests rise to a high level, which made the victim’s server with the number of requests and resulted in failure of server responding to the request and crashed. Which type of attack Jack performed in the above scenario?

Question 9 options:

	Social engineering attack
	MITM attack
	Packet Injection attack
	DoS and DDoS

Question 10 (1 point)

Which of the following statement is true for Service Request Floods A. An attacker or group of zombies attempts to exhaust server resources by setting up and tearing down TCP connections B. It attacks the servers with a high rate of connections from a valid source C. It initiates a request for a single connection

Question 10 options:

	ONLY An attacker or group of zombies attempts to exhaust server resources by setting up and tearing down TCP is true connections
	Both It attacks the servers with a high rate of connections from a valid source and It initiates a request for a single connection are true
	Both An attacker or group of zombies attempts to exhaust server resources by setting up and tearing down TCP connections and It attacks the servers with a high rate of connections from a valid source are true
	Only It initiates a request for a single connection is true

Question 11 (1 point)

Using which port the attacker can compromise the entire network, and receive a copy of every packet that passes through a switch

Question 11 options:

	SPAN Port
	TAP Port
	UDP port
	TCP port

Question 12 (1 point)

In which type of Social engineering technique does an attacker secretly observers the target to gain critical information such as passwords, credit card information, etc.

Question 12 options:

	Eavesdropping
	Shoulder surfing
	Dumpster diving
	Impersonation on social networking sites

Question 13 (1 point)

In Code Breaking Methodologies, which of the following method involves the use of social engineering techniques to extract cryptographic keys

Question 13 options:

	Brute-Force
	Trickery and Deceit
	Frequency Analysis
	One-Time Pad

Question 14 (1 point)

In the Command Injection attacks, the following type of attack is used to deface a website virtually. Select one

Question 14 options:

	HTML Embedding
	Shell Injection
	Website Embedding
	HTML injection

Question 15 (1 point)

Which type of rootkit is used to hide the information about the attacker by replacing original system calls with fake ones?

Question 15 options:

	Application Level Rootkit
	Library Level Rootkit
	Boot Loader Level Rootkit
	Hardware/Firmware Rootkit

Question 16 (1 point)

Switch Port Stealing sniffing technique uses the following attack to sniff the packets

Question 16 options:

	MAC flooding
	ARP Spoofing
	DHCP attacks
	DNS poisoning

Question 17 (1 point)

Identify the following technique, in which the attacker use drones to detect open wireless networks

Question 17 options:

	WarChalking
	WarFlying
	WarWalking
	WarDriving

Question 18 (1 point)

In which of the following mobile platform vulnerabilities, unsolicited text/email messages sent to mobile devices from known/ unknown phone numbers/email IDs.

Question 18 options:

	Mobile Phishing
	SMS Spam
	SMS Phishing
	Mobile Spam

Question 19 (1 point)

Identify the ports that are allowed by the firewall in an organization

Question 19 options:

	Port 443 and Port 69
	Port 80 and Port 69
	Port 80 and Port 110
	Port 80 and Port 443

Question 20 (1 point)

Identify which of the following detection is used to detect the intrusion based on the fixed behavioral characteristics of the user and components in a computer system

Question 20 options:

	Anomaly Detection
	Protocol Anomaly Detection
	Intrusion Detection System
	Signature Recognition

Question 21 (1 point)

Sam receives an email with an attachment, he downloads the file and finds that it is infected with virus which overwrites a part of the host file with a constant content without increasing the length of the file and preserving its functionality. Which type of virus that the file was infected by?

Question 21 options:

	Cavity Viruses
	Shell Viruses
	File Extension Viruses
	Cluster Viruses

Question 22 (1 point)

Which of the following attack allows Android users to attain privileged control access with in Android’s subsystem

Question 22 options:

	Rooting
	Jailbreaking
	SMiShing
	App Sandboxing

Question 23 (1 point)

From the following identify the technique through which an attacker distributes malware on the web by sending a malware attached email and tricking the victim to click the attachment.

Question 23 options:

	Social Engineered Click-jacking
	Spearphishing Sites
	Spam Emails
	Drive-by Downloads

Question 24 (1 point)

From the following, identify the attack in which an attacker exploit default configuration and settings of off-the-self libraries and code.

Question 24 options:

	Operating System Attack
	Misconfiguration Attacks
	Application-Level Attack
	Shrink-Wrap Code Attacks

Question 25 (1 point)

Identify the hacking phase in which an attacker tries to gather information about the target prior to launch an attack

Question 25 options:

	Scanning
	Gaining Access
	Reconnaissance
	Clearing Tracks

Question 26 (1 point)

Identify the type of vulnerability assessment used to determine the vulnerabilities in a workstation or server by performing configuration level check through the command line.

Question 26 options:

	Active Assessment
	Network Assessments
	Host-Based Assessment
	Application Assessment

Question 27 (1 point)

Attacker uses the ‘%00’ character prior to a string in order to bypass detection mechanism. Identify the type of evasion technique used by the attacker.

Question 27 options:

	Case Variation
	URL Encoding
	Null Byte
	Obfuscated Codes

Question 28 (1 point)

In the SQL Injection Characters, which of the following character represents the global variable?

Question 28 options:

	%
	@@variable
	\|\|
	@variable

Question 29 (1 point)

Saved

Identify the type of cloud computing, which provides virtual machines and other abstracted hardware and operating systems which may be controlled through a service API

Question 29 options:

	Software-as-a-Service (SaaS)
	Platform-as-a-Service (PaaS)
	Infrastructure-as-a-Service (IaaS)
	Virtual Service

Question 30 (1 point)

Saved

Identify the type of virus that adds its code to the host code without relocating the host code to insert its own code at the beginning

Question 30 options:

	Intrusive Viruses
	Transient Viruses
	Add-on Viruses
	Shell Viruses

Question 31 (1 point)

Identify the type of IDS alert that occurs when an IDS fails to react to an actual attack event

Question 31 options:

	True Positive
	True Negative
	False Negative
	False Positive

Question 32 (1 point)

Saved

Cloud Pent Testing is not allowed for one of the following Cloud Computing type, as it might impact on the infrastructure

Question 32 options:

	Platform-as-a-Service (PaaS)
	Software-as-a-Service (SaaS)
	Hybrid-as-a-Service(HaaS)
	Infrastructure-as-a-Service (IaaS)

Question 33 (1 point)

The testing that is also called black box testing, which require no knowledge of the inner design of the code is called

Question 33 options:

	Fuzzing Test
	Function Test
	Static Test
	Dynamic Test

Question 34 (1 point)

Saved

Identify the command which is used to adjust RSSI range

Question 34 options:

	python RFCrack.py –i –F MOD_2FSK -F 314350000
	python RFCrack.py -j -F 314000000
	python RFCrack.py -r -U “-75” -L “-5” -M MOD_2FSK -F 314350000
	python RFCrack.py -r -M MOD_2FSK -F 314350000

Question 35 (1 point)

Which type of DNS record helps in mapping an IP address to a hostname?

Question 35 options:

	HINFO
	TXT
	PTR
	NS

Question 36 (1 point)

Saved

Which of the following sequence is used by the attacker, in the Directory Traversal Attacks to access restricted directories outside of the web server root directory. Select one

Question 36 options:

	/…
	//…
	..//
	../

Question 37 (1 point)

Saved

Which of the following attack involves in stealing a cloud service provider’s domain name

Question 37 options:

	Cybersquatting
	Domain Snipping
	DNS Poisoning
	d. Domain Hijacking

Question 38 (1 point)

Identify the rootkit, which helps in hiding the directories, remote connections and logins.

Question 38 options:

	Azazel
	ZeroAccess
	Necurs
	Avatar

Question 39 (1 point)

Saved

Which of the following executing application allows an attacker to modify the registry and to change local admin passwords?

Question 39 options: -->



^{Have a similar assignment? "Place an order for your assignment and have exceptional work written by our team of experts, guaranteeing you A results."}

Our Service Charter

1. Professional & Expert Writers: Eminence Papers only hires the best. Our writers are specially selected and recruited, after which they undergo further training to perfect their skills for specialization purposes. Moreover, our writers are holders of masters and Ph.D. degrees. They have impressive academic records, besides being native English speakers.

2. Top Quality Papers: Our customers are always guaranteed of papers that exceed their expectations. All our writers have +5 years of experience. This implies that all papers are written by individuals who are experts in their fields. In addition, the quality team reviews all the papers before sending them to the customers.

3. Plagiarism-Free Papers: All papers provided by Eminence Papers are written from scratch. Appropriate referencing and citation of key information are followed. Plagiarism checkers are used by the Quality assurance team and our editors just to double-check that there are no instances of plagiarism.

4. Timely Delivery: Time wasted is equivalent to a failed dedication and commitment. Eminence Papers are known for the timely delivery of any pending customer orders. Customers are well informed of the progress of their papers to ensure they keep track of what the writer is providing before the final draft is sent for grading.

5. Affordable Prices: Our prices are fairly structured to fit in all groups. Any customer willing to place their assignments with us can do so at very affordable prices. In addition, our customers enjoy regular discounts and bonuses.

6. 24/7 Customer Support: At Eminence Papers, we have put in place a team of experts who answer all customer inquiries promptly. The best part is the ever-availability of the team. Customers can make inquiries anytime.

How It Works

Step 1: Fill the Order Form
Complete the order form and upload all of your files, including any instructions, rubrics, or other materials provided by your instructor.

Step 2: Make Payment
Complete the order payment after filling in the order form. We’ll receive your order and assign it to a writer.

Step 3: The Writing Process
The assigned writer will complete your paper and forward it to our Editing Team for review and approval.

Step 4: Download Paper
Once approved by the editor, the completed paper will be uploaded to your account for you to download, review and approve.

Free resources

Dissertation help

info@eminencepapers.com

Office Address: 2066 N Capitol Ave, San Jose, CA 95132, United States

We Can Write It for You! Enjoy 20% OFF on This Order. Use Code SAVE20

Get my 20% OFF!

Stuck with your Assignment?

Continue Shopping

Enjoy 20% OFF Today

Use code SAVE20

RemoteExec

PDQ Deploy