- (Topic 1)
Which of the following is a method of gathering user names from a Linux system?

1. A. Displaying the owner information of system-specific binaries
2. B. Reviewing the contents of the system log files
3. C. Gathering listening services from the xinetd configuration files
4. D. Extracting text strings from the system password file

Correct Answer: C
Reference:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/pdf/Security_Guide/Red_Hat_Enterprise_Linux-6-Security_Guide-en-US.pdf

- (Topic 2)
You have obtained the hash below from the /etc/shadow file. What are you able to discern simply by looking at this hash?

1. A. A4XD$B4COCqWaEpFjLLD
2. B. is a SHAI hash that was created using the salt $1 SuWeOhL6k$ 1
3. C. A4XD$B4COCqWaEpFjLLD
4. D. is an MD5 hash that was created using the salt $1 SuWeOhL6k$
5. E. A4XDsB4COGqWaEpFjLLD
6. F. is an MD5 hash that was created using the salt uWeOhL6k
7. G. A4XDsB4COCqWaEpFjLLD
8. H. is a SHAI hash that was created using the salt uweohL6k

Correct Answer: C

- (Topic 2)
Which of the following tasks can be performed by using netcat utility? Each correct answer represents a complete solution. Choose all that apply.

1. A. Firewall testing
2. B. Creating a Backdoor
3. C. Port scanning and service identification
4. D. Checking file integrity

Correct Answer: ABC

- (Topic 1)
What command will correctly reformat the Unix passwordcopy and shadowcopy Tiles for input to John The Ripper?

1. A. /Un shadow passwd copy shadowcopy > johnfile
2. B. /Unshadow passwdcopy shadowcopy > johnfile
3. C. /Unshadow shadowcopy passwdcopy >john file
4. D. /Unshadow passwdcopy shadowcopy > johnfile

Correct Answer: C
Reference:
https://books.google.co.in/books?id=SC-tAwAAQBAJ&pg=PA286&lpg=PA286&dq=/Unshadow+shadow+copy+passwd+copy+%3Ej ohn+file&source=bl&ots=OnZK9atlc1&sig=co7EM5EHye96vO74W3wZxky3sXU&hl=en&sa =X&ei=FBuoVPLHDc-cugSDxYGYBA&ved=0CCwQ6AEwAg#v=onepage&q=%2FUnshadow%20shadow%20cop y%20passwd%20copy%20%3Ejohn%20file&f=false

- (Topic 1)
Why is it important to have a cheat sheet reference of database system tables when performing SQL Injection?

1. A. This is where sites typically store sensitive information such as credit card number
2. B. These tables contain a list of allowed database applications
3. C. The information in these tables will reveal details about the web application's cod
4. D. These tables contain metadata that can be queried to gain additional helpful informatio

Correct Answer: D
Reference: http://www.rackspace.com/knowledge_center/article/sql-injection-in-mysql