- (Topic 3)
You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing. Recently, your company has assigned you a project to test the security of the we-aresecure. com network. Now, when you have finished your penetration testing, you find that the weare- secure.com server is highly vulnerable to SNMP enumeration. You advise the we-are-secure Inc. to turn off SNMP; however, this is not possible as the company is using various SNMP services on its remote nodes. What other step can you suggest to remove SNMP vulnerability?
Each correct answer represents a complete solution. Choose two.

1. A. Close port TCP 53.
2. B. Change the default community string name
3. C. Upgrade SNMP Version 1 with the latest versio
4. D. Install antiviru

Correct Answer: BC

- (Topic 3)
You are using the dsniff tool to intercept communications between two entities and establish credentials with both sides of the connections. These entities do not notice that you were retrieving the information between these two. Which of the following attacks are you performing?

1. A. Man-in-the-middle
2. B. ARP poisoning
3. C. Session hijacking
4. D. DoS

Correct Answer: A

- (Topic 1)
Analyze the screenshot below. What event is depicted?

1. A. An exploit that was attempted does not work against the target selecte
2. B. A payload was used that is not compatible with the chosen exploi
3. C. The exploit is designed to work against the local host onl
4. D. The payload Is designed to create an interactive sessio

Correct Answer: D

- (Topic 3)
When you conduct the XMAS scanning using Nmap, you find that most of the ports scanned do not give a response. What can be the state of these ports?

1. A. Closed
2. B. Open
3. C. Filtered

Correct Answer: B

- (Topic 3)
You work as a Network Administrator for Tech Perfect Inc. The company requires a secure wireless network. To provide security, you are configuring ISA Server 2006 as a firewall. While configuring ISA Server 2006, which of the following is NOT necessary?

1. A. Configuration of VPN access
2. B. Setting up of monitoring on ISA Server
3. C. Defining ISA Server network configuration
4. D. Defining how ISA Server would cache Web contents

Correct Answer: A