- (Topic 4)
Which of the following guidelines or standards is associated with the credit card industry?

1. A. Control Objectives for Information and Related Technology (COBIT)
2. B. Sarbanes-Oxley Act (SOX)
3. C. Health Insurance Portability and Accountability Act (HIPAA)
4. D. Payment Card Industry Data Security Standards (PCI DSS)

Correct Answer: D

- (Topic 1)
In the context of password security: a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive - though slow. Usually, it tries every possible letter and number combination in its automated exploration. If you would use both brute force and dictionary combined together to have variations of words, what would you call such an attack?

1. A. Full Blown Attack
2. B. Thorough Attack
3. C. Hybrid Attack
4. D. BruteDict Attack

Correct Answer: C

- (Topic 8)
If you receive a RST packet while doing an ACK scan, it indicates that the port is open.(True/False).

1. A. True
2. B. False

Correct Answer: A
When and ACK is sent to an open port, a RST is returned.

- (Topic 5)
Advanced encryption standard is an algorithm used for which of the following?

1. A. Data integrity
2. B. Key discovery
3. C. Bulk data encryption
4. D. Key recovery

Correct Answer: C

- (Topic 8)
Scanning for services is an easy job for Bob as there are so many tools available from the Internet. In order for him to check the vulnerability of XYZ, he went through a few scanners that are currently available. Here are the scanners that he uses:
1. Axent’s NetRecon (http://www.axent.com)
2. SARA, by Advanced Research Organization (http://www-arc.com/sara)
3. VLAD the Scanner, by Razor (http://razor.bindview.com/tools/)
However, there are many other alternative ways to make sure that the services that have been scanned will be more accurate and detailed for Bob.
What would be the best method to accurately identify the services running on a victim host?

1. A. Using Cheops-ng to identify the devices of XYZ.
2. B. Using the manual method of telnet to each of the open ports of XYZ.
3. C. Using a vulnerability scanner to try to probe each port to verify or figure out which service is running for XYZ.
4. D. Using the default port and OS to make a best guess of what services are running on each port for XYZ.

Correct Answer: B
By running a telnet connection to the open ports you will receive banners that tells you what service is answering on that specific port.