An attacker wants to launch an attack on a wired Ethernet. He wants to accomplish the following tasks:
Sniff data frames on a local area network.
Modify the network traffic.
Stop the network traffic frequently.
Which of the following techniques will the attacker use to accomplish the task?

1. A. IP spoofing
2. B. Eavesdropping
3. C. ARP spoofing
4. D. Session hijacking

Correct Answer: C

Which of the following statements best describes the string matching method of signature analysis?

1. A. String matching searches specific strings that may indicate an attac
2. B. String matching examines multiple fields from different protocols, such as source address, destination port, or TCP flag
3. C. In string matching, each packet is wrapped in predefined layers of different protocol
4. D. In string matching, an incoming packet is compared, byte by byte, with a single signature, a string of cod

Correct Answer: D

Which of the following methods is used by forensic investigators to acquire an image over the network in a secure manner?

1. A. DOS boot disk
2. B. EnCase with a hardware write blocker
3. C. Linux Live CD
4. D. Secure Authentication for EnCase (SAFE)

Correct Answer: D

Peter, a malicious hacker, wants to perform an attack. He first compromises computers distributed across the internet and then installs specialized software on these computers. He then instructs the compromised hosts to execute the attack. Every host can then be used to launch its own attack on the target computers. Which of the following attacks is Peter performing?

1. A. Ping of Death attack
2. B. DDoS attack
3. C. SYN flood attack
4. D. Teardrop attack

Correct Answer: B

Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc.
Which of the following types of Cross-Site Scripting attack Ryan intends to do?

1. A. Document Object Model (DOM)
2. B. Non persistent
3. C. SAX
4. D. Persistent

Correct Answer: D