University:
Campbell University
Course:
HSEC 444 | Cybersecurity
Academic year:

2023
Views:

355

Pages:

4
Author:

ilikemyicons0y5

Quiz 1 Answer all questions: What command is used in Nmap to output results in XML format? A. -oX B. -oN C. -xML D. -outxml What is a common SNMP community string used in enumeration? A. snmp B. private C. local D. default Which command is used in Nmap to detect operating system? A. -sV B. -O C. -T4 D. -A What type of scan sends TCP packets with no flags set? A. Xmas B. FIN C. SYN D. NULL Which enumeration tool is used for NetBIOS? A. SNMPUtil B. NetBIOS Enumerator C. L0phtcrack D. Netcat What is the output of nmap -sX scan? A. FIN only B. PSH, URG, and FIN flags C. SYN only D. No flags What attack relies on DNS misconfiguration to gather subdomains? A. Zone transfer B. Ping sweep C. SYN flood D. DHCP starvation During a penetration testing assignment, a CEH used Nmap and Hping3 to scan for live hosts and open ports, and wanted to spoof IP addresses. Which command should be used? • Hping3 -1 10.0.0.25 --ICMP • Hping3 -S 192.168.1.1 -a 192.168.1.254 -p 22 --flood • Hping3 -2 10.0.0.25 -p 80 • Nmap -SS-Pn -n -vvv --packet-trace -p ---script discovery -T4 A CEH is conducting a Whois footprinting activity and is unable to gather complete Whois information. What data model is likely used? • Thin Whois model working correctly • Thick Whois model with a malfunctioning server • Thin Whois model with a malfunctioning server • Thick Whois model working correctly A hacker suspects SYN scans may be detected on a BSD TCP/IP stack. Which scan method should be used? • ACK Flag Probe Scan • Maimon Scan • Xmas Scan • TCP Connect/Full-Open Scan A CEH is using sniffing to understand network data flow. Which technique should be used? • DNS Poisoning • ARP Poisoning • Raw Sniffing • MAC Flooding During reverse DNS lookup using DNSRecon, which command is correct? • dnsrecon -r 192.168.1.0/24 -n ns1.example.com-taxir • dnsrecon -r 162 241 216.0/24-n.nsl.example.com-t std • dnsrecon -r 162.241.216.0/24 -n ns1.example.com -t std • dnsrecon -r 10.0.0.0/24 -n ns1.example.com -t zonewalk A penetration tester wants to find live hosts through a TCP-filtered network. What method should be used? • UDP Ping Scan • ICMP ECHO Ping Scan • TCP SYN Ping Scan • ICMP Timestamp Ping Scan A CEH sends a TCP packet with SYN and ECN-Echo flags. What test was conducted? • Test 3 • Test 1 • Test 2 • Test 6 Calvin enumerated usernames via login form. What flaw did he exploit? • Verbose failure messages • User impersonation • Password reset mechanism • Insecure transmission of credentials Hailey used a tool to gather words from a website. What tool is it? • Shadowsocks • Orbot • CeWL • Psiphon Allen enumerated NetBIOS and found open port 139. What code indicates messenger service? • <03> • <00> • <20> • <1B> Shiela wants to discover service versions with Nmap. What option should be used? • -sF • -sV • -sN • -sX Andrew wants to find hidden hosts behind a firewall. Which host discovery method to use? • TCP Maimon scan • ACK flag probe scan • UDP scan • ARP ping scan What is a NULL scan? A. A scan in which all flags are turned off B. A scan in which certain flags are off C. A scan in which all flags are on D. A scan in which the packet size is set to zero E. A scan with an illegal packet size Which Google advanced search operator finds similar websites? A. [inurl:] B. [related:] C. [info:]