- (Topic 3)
Some passwords are stored using specialized encryption algorithms known as hashes. Why is this an appropriate method?

1. A. It is impossible to crack hashed user passwords unless the key used to encrypt them is obtained.
2. B. If a user forgets the password, it can be easily retrieved using the hash key stored by administrators.
3. C. Hashing is faster compared to more traditional encryption algorithms.
4. D. Passwords stored using hashes are non-reversible, making finding the password much more difficult.

Correct Answer: D

- (Topic 2)
What port number is used by LDAP protocol?

1. A. 110
2. B. 389
3. C. 464
4. D. 445

Correct Answer: B

- (Topic 3)
Kevin is an IT security analyst working for Emerson Time Makers, a watch manufacturing company in Miami. Kevin and his girlfriend Katy recently broke up after a big fight. Kevin believes that she was seeing another person. Kevin, who has an online email account that he uses for most of his mail, knows that Katy has an account with that same company. Kevin logs into his email account online and gets the following URL after successfully logged in: http://www.youremailhere.com/mail.asp?mailbox=Kevin&Smith=121%22 Kevin changes the URL to: http://www.youremailhere.com/mail.asp?mailbox=Katy&Sanchez=121%22 Kevin is trying to access her email account to see if he can find out any information. What is Kevin attempting here to gain access to Katy's mailbox?

1. A. This type of attempt is called URL obfuscation when someone manually changes a URL to try and gain unauthorized access
2. B. By changing the mailbox's name in the URL, Kevin is attempting directory transversal
3. C. Kevin is trying to utilize query string manipulation to gain access to her email account
4. D. He is attempting a path-string attack to gain access to her mailbox

Correct Answer: C

- (Topic 1)
What type of Trojan is this?

1. A. RAT Trojan
2. B. E-Mail Trojan
3. C. Defacement Trojan
4. D. Destructing Trojan
5. E. Denial of Service Trojan

Correct Answer: C