- (Topic 4)
Which of the following is an open source Web scanner?

1. A. Nikto
2. B. GFI LANguird
3. C. NetRecon
4. D. Internet scanner

Correct Answer: A

- (Topic 2)
The employees of EWS Inc. require remote access to the company's Web servers. In order to provide solid wireless security, the company uses EAP-TLS as the authentication protocol. Which of the following statements are true about EAP-TLS?
Each correct answer represents a complete solution. Choose all that apply.

1. A. It provides a moderate level of securit
2. B. It uses password hash for client authenticatio
3. C. It uses a public key certificate for server authenticatio
4. D. It is supported by all manufacturers of wireless LAN hardware and softwar

Correct Answer: CD

- (Topic 1)
While performing an assessment on a banking site, you discover the following link:
hnps://mybank.com/xfer.aspMer_toMaccount_number]&amount-[dollars]
Assuming authenticated banking users can be lured to your web site, which crafted html
tag may be used to launch a XSRF attack?

1. A. <imgsrc-"java script alert (‘document cookie'):">
2. B. <scripi>alert('hnps:/'mybank.com/xfer.a$p?xfer_io-[attacker_account]&amoutn-[dollars]')</script>
3. C. <scripr>document.\write('hTtp$://mybankxom/xfer.a$p?xfer_to-[attacker.accountl &amount-[dollars)</script>
4. D. <img src-'https/mybank.com/xfer.asp?xfer_to=[artacker_account]&amount= [dollars]">

Correct Answer: C

- (Topic 4)
Which of the following is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a, 802.11b, and 802.11g standards and also detects wireless networks marking their relative position with a GPS?

1. A. Kismet
2. B. NetStumbler
3. C. Ettercap
4. D. Tcpdump

Correct Answer: B

- (Topic 1)
Which of the following best explains why you would warn to clear browser slate (history. cache, and cookies) between examinations of web servers when you've been trapping and altering values with a non-transparent proxy?

1. A. Values trapped and stored in the browser will reveal the techniques you've used toexamine the web server
2. B. Trapping and changing response values is beneficial for web site testing but usingthe same cached values in your browser will prevent you from being able to changethose value
3. C. Trapping and changing response values is beneficial for web site testing but willcause browser instability if not cleare
4. D. Values trapped and changed in the proxy, such as a cookie, will be stored by thebrowser and may impact further testin

Correct Answer: D