- (Topic 1)
Which of the following best describes a client side exploit?

1. A. Attack of a client application that retrieves content from the network
2. B. Attack that escalates user privileged to root or administrator
3. C. Attack of a service listening on a client system
4. D. Attack on the physical machine

Correct Answer: C

- (Topic 3)
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He uses a Windows XP operating system to do this. He enters the following command on the command prompt:
c:tracert www.we-are-secure.com
However, he receives an incomplete traceroute result. What could be the reasons for getting an incomplete result for the tracert command?
Each correct answer represents a complete solution. Choose all that apply.

1. A. A router along the path is overloade
2. B. John's computer is behind a firewall that blocks incoming ICMP error message
3. C. There is no route to the we-are-secure serve
4. D. The we-are-secure server is down and is not connected to the Interne

Correct Answer: ABCD

- (Topic 2)
What happens when you scan a broadcast IP address of a network?
Each correct answer represents a complete solution. Choose all that apply.

1. A. It will show an error in the scanning proces
2. B. Scanning of the broadcast IP address cannot be performe
3. C. It may show smurf DoS attack in the network IDS of the victi
4. D. It leads to scanning of all the IP addresses on that subnet at the same tim

Correct Answer: CD

- (Topic 3)
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.we-are-secure.com. He enters a single quote in the input field of the login page of the Weare- secure Web site and receives the following error message:
Microsoft OLE DB Provider for ODBC Drivers error '0x80040E14'
This error message shows that the We-are-secure Website is vulnerable to __________.

1. A. A SQL injection attack
2. B. A Denial-of-Service attack
3. C. A buffer overflow
4. D. An XSS attack

Correct Answer: A

- (Topic 3)
Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless network of the company. He uses a tool that is a free open-source utility for network exploration.
The tool uses raw IP packets to determine the following:
What ports are open on our network systems.
What hosts are available on the network.
Identify unauthorized wireless access points.
What services (application name and version) those hosts are offering.
What operating systems (and OS versions) they are running.
What type of packet filters/firewalls are in use.
Which of the following tools is Victor using?

1. A. Nmap
2. B. Kismet
3. C. Sniffer
4. D. Nessus

Correct Answer: A