Which of the following services CANNOT be performed by the nmap utility?
Each correct answer represents a complete solution. Choose all that apply.

1. A. Passive OS fingerprinting
2. B. Sniffing
3. C. Active OS fingerprinting
4. D. Port scanning

Correct Answer: AB

You are concerned about rootkits on your network communicating with attackers outside your network. Without using an IDS how can you detect this sort of activity?

1. A. By examining your domain controller server logs.
2. B. You cannot, you need an IDS.
3. C. By examining your firewall logs.
4. D. By setting up a DMZ.

Correct Answer: C

Which of the following types of attacks is often performed by looking surreptitiously at the keyboard or monitor of an employee's computer?

1. A. Buffer-overflow attack
2. B. Shoulder surfing attack
3. C. Man-in-the-middle attack
4. D. Denial-of-Service (DoS) attack

Correct Answer: B

You discover that your network routers are being flooded with broadcast packets that have the return address of one of the servers on your network. This is resulting in an overwhelming amount of traffic going back to that server and flooding it. What is this called?

1. A. Syn flood
2. B. Blue jacking
3. C. Smurf attack
4. D. IP spoofing

Correct Answer: C

Which of the following statements about smurf is true?

1. A. It is a UDP attack that involves spoofing and flooding.
2. B. It is an ICMP attack that involves spoofing and flooding.
3. C. It is an attack with IP fragments that cannot be reassembled.
4. D. It is a denial of service (DoS) attack that leaves TCP ports open.

Correct Answer: B