- (Topic 2)
The programmers on your team are analyzing the free, open source software being used to run FTP services on a server in your organization. They notice that there is excessive number of functions in the source code that might lead to buffer overflow. These C++ functions do not check bounds. Identify the line in the source code that might lead to buffer overflow?

1. A. 9A.9
2. B. 17B.17
3. C. 20C.20
4. D. 32D.32
5. E. 35E.35

Correct Answer: B

- (Topic 8)
In an attempt to secure his wireless network, Bob implements a VPN to cover the wireless communications. Immediately after the implementation, users begin complaining about how slow the wireless network is. After benchmarking the network’s speed. Bob discovers that throughput has dropped by almost half even though the number of users has remained the same.
Why does this happen in the VPN over wireless implementation?

1. A. The stronger encryption used by the VPN slows down the network.
2. B. Using a VPN with wireless doubles the overhead on an access point for all direct client to access point communications.
3. C. VPNs use larger packets then wireless networks normally do.
4. D. Using a VPN on wireless automatically enables WEP, which causes additional overhead.

Correct Answer: B
By applying VPN the access point will have to recalculate all headers destined for client and from clients twice.

- (Topic 8)
WinDump is a popular sniffer which results from the porting to Windows of TcpDump for Linux. What library does it use?

1. A. LibPcap
2. B. WinPcap
3. C. Wincap
4. D. None of the above

Correct Answer: B
WinPcap is the industry-standard tool for link-layer network access in Windows environments: it allows applications to capture and transmit network packets
bypassing the protocol stack, and has additional useful features, including kernel-level packet filtering, a network statistics engine and support for remote packet capture.

- (Topic 4)
Which of the following is an advantage of utilizing security testing methodologies to conduct a security audit?

1. A. They provide a repeatable framework.
2. B. Anyone can run the command line scripts.
3. C. They are available at low cost.
4. D. They are subject to government regulation.

Correct Answer: A

- (Topic 3)
If an attacker's computer sends an IPID of 24333 to a zombie (Idle Scanning) computer on
a closed port, what will be the response?

1. A. The zombie computer will respond with an IPID of 24334.
2. B. The zombie computer will respond with an IPID of 24333.
3. C. The zombie computer will not send a response.
4. D. The zombie computer will respond with an IPID of 24335.

Correct Answer: A