Which of the following tools uses common UNIX/Linux tools like the strings and grep commands to search core system programs for signatures of the rootkits?

1. A. rkhunter
2. B. OSSEC
3. C. chkrootkit
4. D. Blue Pill

Correct Answer: C

John visits an online shop that stores the IDs and prices of the items to buy in a cookie. After selecting the items that he wants to buy, the attacker changes the price of the item to 1.
Original cookie values:
ItemID1=2
ItemPrice1=900
ItemID2=1
ItemPrice2=200
Modified cookie values:
ItemID1=2
ItemPrice1=1
ItemID2=1
ItemPrice2=1
Now, he clicks the Buy button, and the prices are sent to the server that calculates the total price.
Which of the following hacking techniques is John performing?

1. A. Computer-based social engineering
2. B. Man-in-the-middle attack
3. C. Cross site scripting
4. D. Cookie poisoning

Correct Answer: D

Which of the following Linux rootkits allows an attacker to hide files, processes, and network connections?
Each correct answer represents a complete solution. Choose all that apply.

1. A. Phalanx2
2. B. Beastkit
3. C. Adore
4. D. Knark

Correct Answer: CD

Which of the following tools will you use to prevent from session hijacking?
Each correct answer represents a complete solution. Choose all that apply.

1. A. OpenSSH
2. B. Rlogin
3. C. Telnet
4. D. SSL

Correct Answer: AD

Which of the following types of channels is used by Trojans for communication?

1. A. Loop channel
2. B. Open channel
3. C. Covert channel
4. D. Overt channel

Correct Answer: C