Identify the injection attack represented in the diagram below:

1. A. XPath Injection Attack
2. B. XML Request Attack
3. C. XML Injection Attack
4. D. Frame Injection Attack

Correct Answer: C

One of the steps in information gathering is to run searches on a company using complex keywords in Google.

Which search keywords would you use in the Google search engine to find all the PowerPoint presentations containing information about a target company, ROCHESTON?

1. A. ROCHESTON fileformat:+ppt
2. B. ROCHESTON ppt:filestring
3. C. ROCHESTON filetype:ppt
4. D. ROCHESTON +ppt:filesearch

Correct Answer: C

Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with ACK bit and the source address of her machine set.
What is Terri trying to accomplish by sending this IP packet?

1. A. Poison the switch's MAC address table by flooding it with ACK bits
2. B. Enable tunneling feature on the switch
3. C. Trick the switch into thinking it already has a session with Terri's computer
4. D. Crash the switch with a DoS attack since switches cannot send ACK bits

Correct Answer: C

In the context of penetration testing, what does blue teaming mean?

1. A. A penetration test performed with the knowledge and consent of the organization's IT staff
2. B. It is the most expensive and most widely used
3. C. It may be conducted with or without warning
4. D. A penetration test performed without the knowledge of the organization's IT staff but with permission from upper management

Correct Answer: A

One needs to run “Scan Server Configuration” tool to allow a remote connection to Nessus from the remote Nessus clients. This tool allows the port and bound interface of the Nessus daemon to be configured.
By default, the Nessus daemon listens to connections on which one of the following?

1. A. Localhost (127.0.0.1) and port 1241
2. B. Localhost (127.0.0.1) and port 1240
3. C. Localhost (127.0.0.1) and port 1246
4. D. Localhost (127.0.0.0) and port 1243

Correct Answer: A