- (Topic 2)
An Attacker creates a zuckerjournals.com website by copying and mirroring HACKERJOURNALS.COM site to spread the news that Hollywood actor Jason Jenkins died in a car accident. The attacker then submits his fake site for indexing in major search engines. When users search for "Jason Jenkins", attacker's fake site shows up and dupes victims by the fake news.

This is another great example that some people do not know what URL's are. Real website:
Fake website: http://www.zuckerjournals.com

The website is clearly not WWW.HACKERJOURNALS.COM. It is obvious for many, but unfortunately some people still do not know what an URL is. It's the address that you enter into the address bar at the top your browser and this is clearly not legit site, its www.zuckerjournals.com
How would you verify if a website is authentic or not?

1. A. Visit the site using secure HTTPS protocol and check the SSL certificate for authenticity
2. B. Navigate to the site by visiting various blogs and forums for authentic links
3. C. Enable Cache on your browser and lookout for error message warning on the screen
4. D. Visit the site by clicking on a link from Google search engine

Correct Answer: D

- (Topic 8)
Which of the following wireless technologies can be detected by NetStumbler? (Select all that apply)

1. A. 802.11b
2. B. 802.11e
3. C. 802.11a
4. D. 802.11g
5. E. 802.11

Correct Answer: ACD
If you check the website, cards for all three (A, B, G) are supported. See: http://www.stumbler.net/

- (Topic 7)
What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?

1. A. All are hacking tools developed by the legion of doom
2. B. All are tools that can be used not only by hackers, but also security personnel
3. C. All are DDOS tools
4. D. All are tools that are only effective against Windows
5. E. All are tools that are only effective against Linux

Correct Answer: C
All are DDOS tools.

- (Topic 5)
What is the best defense against privilege escalation vulnerability?

1. A. Patch systems regularly and upgrade interactive login privileges at the system administrator level.
2. B. Run administrator and applications on least privileges and use a content registry for tracking.
3. C. Run services with least privileged accounts and implement multi-factor authentication and authorization.
4. D. Review user roles and administrator privileges for maximum utilization of automation services.

Correct Answer: C

- (Topic 8)
Peter is a Linux network admin. As a knowledgeable security consultant, he turns to you to look for help on a firewall. He wants to use Linux as his firewall and use the latest freely available version that is offered. What do you recommend?
Select the best answer.

1. A. Ipchains
2. B. Iptables
3. C. Checkpoint FW for Linux
4. D. Ipfwadm

Correct Answer: B
Explanations:
Ipchains was improved over ipfwadm with its chaining mechanism so that it can have multiple rulesets. However, it isn't the latest version of a free Linux firewall. Iptables
replaced ipchains and is the latest of the free Linux firewall tools. Any Checkpoint firewall is not going to meet Jason's desire to have a free firewall. Ipfwadm is used to build Linux firewall rules prior to 2.2.0. It is a outdated version.