- (Topic 3)
Which of the following statements are true about session hijacking?
Each correct answer represents a complete solution. Choose all that apply.

1. A. TCP session hijacking is when a hacker takes over a TCP session between two machine
2. B. It is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer syste
3. C. Use of a long random number or string as the session key reduces session hijackin
4. D. It is used to slow the working of victim's network resource

Correct Answer: ABC

- (Topic 2)
What will the following scapy commands do?

1. A. Perform a SYN-ACK scan against TCP ports 80 and 3080 on host 192.168.1.24.
2. B. Perform a SYN scan against ports 80 through 8080 for all hosts on the192.168.1.0/24 networ
3. C. Combine the answered and unanswered results of a previous scan into the sr(packet)variabl
4. D. Perform a SYN-ACK scan against TCP ports 80 and 8080 for all hosts on the192.16S.1.0/24 networ

Correct Answer: D

- (Topic 1)
Which type of Cross-Sire Scripting (XSS> vulnerability is hardest for automated testing tools to detect, and for what reason?

1. A. Stored XS
2. B. because it may be located anywhere within static or dynamic sitecontent
3. C. Stored XS
4. D. because it depends on emails and instant messaging system
5. E. Reflected XS
6. F. because It can only be found by analyzing web server response
7. G. Reflected XSS: because it is difficult to find within large web server log

Correct Answer: A

- (Topic 4)
You want that some of your Web pages should not be crawled. Which one of the following options will you use to accomplish the task?

1. A. Use HTML NO Crawl tag in the Web page not to be crawled
2. B. Place the name of restricted Web pages in the private.txt file
3. C. Place the name of restricted Web pages in the robotes.txt file
4. D. Enable the SSL

Correct Answer: C

- (Topic 1)
Which of the following describes the direction of the challenges issued when establishing a wireless (IEEE 802.11) connection?

1. A. One-way, the client challenges the access point
2. B. One-way, the access point challenges the client
3. C. No challenges occur (or wireless connection
4. D. Two-way, both the client and the access point challenge each other

Correct Answer: D