Test Final Computer Science

Final Study online at 1. What subject area is not one of the 22 domains tested during the CEH exam?: Trojan hijacking 2. What type of assessment performed by a penetration tester attempts to identify all the weaknesses found in an application or on a system?: vulnerability 3. What security certification uses the Open Source Security Testing Methodology Manual (OSSTMM) as its standardized methodology?: OPST 4. What common term is used by security testing professionals to describe vulnerabilities in a network?: holes 5. Penetration testers and security testers need technical skills to perform their duties effectively.: True 6. No matter what medium connects computers on network-copper wires, fiber-optic cables, or a wireless setup; the same protocol must be running on all computers if communication is going to function correctly.: True 7. What port does the Trivial File Transfer Protocol, or TFTP service use?: 69 8. What layer, in the TCP/IP stack, is responsible for routing a packet to a destination address?: Internet 9. What 32-bit number tracks packets received by a node and allows the reassembling of large packets that have been broken up into smaller packets?: ISN 10. What TCP/IP protocol is used to send messages related to network operations and can be used to troubleshoot network connectivity?: ICMP 11. Which of the following physical security methods provides the ability to secure a company's assets and document any individuals physical time of entry?: card access 12. What type of attack is occurring when an attacker places themselves between two parties and manipulates messages being passed back and forth?: Man-in-the-Middle 13. What type of virus is used to lock a user's system, or cloud accounts until the system's owner complies by paying the attacker a monetary fee?: ransomware 14. The virus signature file is maintained by what type of software?: antivirus 15. A DDoS attack is launched against a host from a single server or workstation.: False 1 / 12 I Final Study online at 16. Walking is an automated way to discover pages of a Web site by following links.: False 17. Wget is a *nix system command that can be used to retrieve HTTP, HTTPS, and FTP files over the Internet.: True 18. Which utility can extract meta-data and documents on a Website to reveal the document creator's network login, e-mailaddress, IP address, and other important information?: FOCA 19. What area of a network is a major area of potential vulnerability because of the use of URLs?: DNS 20. Which process enables you to see all the host computers on a network and basically give you a diagram of an organization's network?: zone transfers 21. What type of port scan is similar to a SYN scan and is risky to use because it relies on the attacked computer's OS?: Connect 22. Port scanning is a method of finding out which services a host computer offers.: True 23. What network security tool, usually included with Kali Linux, allows a user to ping multiple IP addresses?: Fping 24. Attackers typically use ACK scans to get past a firewall or other filtering devices.: True 25. Which statement is where the script performs its main task?: do 26. To determine what resources or shares are on a network, security testers must use port scanning and what other procedure first to determine what OS is being used?: footprinting 27. The latest version of Nessus Server and Client can run on Windows, Mac OS X, FreeBSD, and most Linux distributions.: True 28. The computer names you assign to Windows systems are called which of the following?: NetBIOS 29. Which Windows 10 feature uses virtualization to protect access tokens from theft by attackers?: Credential Guard 30. What feature implemented in Windows 8.1 prevents the execution of non-trusted boot content, preventing rootkits?: SecureBoot 31. When a compiler finds errors, it usually indicates what they are so you can correct the code and compile the program again.: True I Final Study online at 32. Which of the following is a markup language rather than a programming language?: HTML 33. Which of the following statements in the C programming language is used to load libraries that hold the commands and functions used in your program?: #include 34. In a Perl program, to go from one function to another, you simply call the function by entering which of the following in your source code?: name 35. Most programming languages have a way to branch, loop, and test.: True 36. Which of the following is an interprocess communication mechanism that allows a program running on one host to run code on a remote host?: RPC 37. Which of the following is an open-source implementation of CIFS?: Samba 38. SMB is used to share files and usually runs on top of NetBIOS, NetBEUI, or which of the following?: TCP/IP 39. When using the Common Internet File System (CIFS), which security model does not require a password to be set for the file share?: Share-level security 40. Early Windows OSs used which of the following programs loaded into memory to interact with a network resource or device?: NetBIOS 41. What programming languages are vulnerable to buffer overflow attacks?: C and C++ 42. Which one of the following, if compromised might allow attackers the ability to gain complete access to network resources?: router 43. What type of malicious code could be installed in a system's flash memory to allow an attacker to access the system at a later date?: BIOS-based rootkit 44. A device that performs more than one function, such as printing and faxing is called which of the following?: MFD 45. Which of the following is an SELinux OS security mechanism that enforces access rules based on privileges for interactions between processes, files, and users?: Mandatory Access Control 46. Which of the following is a programming interface for connecting a Web application to a database and defines technologies that allow applications, such as Word or Excel, to interact with the Web?: ADO I Final Study online at 47. Which of the following is an alternative term used when referring to Application Security?: AppSec 48. Which JavaScript function is a "method" or sequence of statements that perform a routine or task?: getElementById() 49. Which of the following does Object Linking and Embedding Database (OLE DB) rely on that allows an application to access data stored on an external device?: connection strings 50. JavaScript is a server-side scripting language that is embedded in an HTML Web page.: False 51. What derogatory title do experienced hackers, who are skilled computer operators, give to inexperienced hackers?: script kiddies 52. An ethical hacker is a person who performs most of the same activities a hacker does, but with the owner or company's permission.: True 53. What penetration model should be used when a company's management team does not wish to disclose that penetration testing is being conducted?: black box 54. What acronym represents the U.S. Department of Justice new branch that addresses computer crime?: CHIP 55. What security certification did the "The International Council of Electronic Commerce Consultants" (EC-Council) develop?: Certified Ethical Hacker (CEH) 56. What TCP flag is responsible for synchronizing the beginning of a session?: SYN flag 57. What is the logical component of a TCP connection that can be assigned to a process that requires network connectivity?: port 58. What TCP/IP protocol is fast, unreliable, and operates at the Transport layer?: UDP 59. In the TCP/IP stack, what layer is concerned with controlling the flow of data, sequencing packets for reassembly, and encapsulating the segment with a TCP or UDP header?: Transport 60. What IP address is used as a loopback address and is not a valid IP address that can be assigned to a network?: 127 address Final Study online at 61. What type of attack causes the victim's computer to crash or freeze when the attacker delivers an ICMP packet that is larger than the maximum allowed 65,535 bytes?: Ping of Death 62. Which of the following is created after an attack and usually hides within the OS tools, so it is almost impossible to detect?: rootkit 63. Which of the following sometimes displays a banner that notifies the user of its presence?: Adware 64. Which term best describes malicious programmatic behaviors that antivirus software companies use to compare known viruses to every file on a computer?: heuristics 65. What tactic is being used when an attacker trailing closely behind an employee enters a restricted area without any security credentials by utilizing their proximity to another employee with security clearance?: Piggybacking 66. Which technique can be used to read PINs entered at ATMs or at other areas when a pin code is entered?: shoulder surfing 67. Which process utilizes the knowledge of human nature to get information from people to use for executing an attack on a computer network?: social engineering 68. Which HTTP method requests that the entity is stored under the Request-URI?: PUT 69. Closed ports respond to a NULL scan with what type of packet?: RST 70. Nmap has a GUI front end that makes it easier to work with some of the complex options by providing a GUI. Which of the following is the Nmap GUI front end?: Zenmap 71. In a Linux script, which of the lines is important because it identifies the file as a script?: #!/bin/sh 72. When security professionals create a packet, they may choose to specifically set which of the following fields to help initiate a response from a target computer?: flag 73. Some attackers want to be hidden from network devices or IDSs that recognize an inordinate amount of pings or packets being sent to their networks. Which of the following attacks are more difficult to detect?: stealth 74. What type of Windows Server is the most likely server to be targeted by a computer hacker?: Domain Controller 5 / 12 I Final Study online at 75. What enumeration tool is extremely useful when working with Windows NT, 2000, and Windows XP systems?: DumpSec 76. What upper-level service is required to utilize file and printer sharing in Windows?: Server Message Block 77. Which of the following commands gives you a quick way to see if there are any shared resources on a computer or server?: Net view 78. All of the enumeration techniques that work with older Windows OSs still work with Windows Server 2012.: False 79. Which of the following logical operators in the C programming language is used to compare the equality of two variables?: == 80. In HTML, each tag has a matching closing tag that is written with which of the following characters?: forward slash (/) 81. UNIX was first written in assembly language. However, it was soon rewritten in what programming language?: C 82. In object-oriented programming, a function contained in a class is called which of the following?: member function 83. Which of the following is a Window's client/server technology designed to manage patching and updating systems software from the network?: WSUS 84. The MSBA tool can quickly identify missing patches and misconfigurations.: True 85. For a Windows computer to be able to access a *nix resource, which of the following must be enabled on both systems?: CIFS 86. When using the Common Internet File System (CIFS), which security model will require network users to have a user name and password to access a specific resource?: User-level security 87. Which of the following is a common Linux rootkit?: Linux Rootkit 5 88. What is the most serious shortcoming of Microsoft's original File Allocation Table (FAT) file system?: no ACL support 89. Which of the following source code is now available to the public and was considered a trimmed down version of the Windows desktop OS?: Windows CE 90. SCADA systems controlling critical infrastructure are usually completely separated from the Internet by which of the following?: air gap Final Study online at 91. What is the specific act of checking a user's privileges to understand if they should or should not have access to a page, field, resource, or action in an application?: authorization 92. Visual Basic Script (VBScript) is a scripting language developed by which of the following companies?: Microsoft 93. Which of the following results from poorly configured technologies that a Web application runs on top of?: security misconfigurations 94. What is the specific act of filtering, rejecting, or sanitizing a user's untrusted input before the application processes it?: input validation 95. What penetration model should a company use if they only want to allow the penetration tester(s) partial or incomplete information regarding their network system?: gray box 96. What penetration model would likely provide a network diagram showing all the company's routers, switches, firewalls, and intrusion detection systems, or give the tester a floor plan detailing the location of computer systems and the OSs running on these systems?: white box 97. Even though the Certified Information Systems Security Professional (CISSP) certification is not geared toward the technical IT professional, it has become one of the standards for many security professionals.: True 98. What policy, provide by a typical ISP, should be read and understood before performing any port scanning outside of your private network?: Acceptable Use Policy 99. What type of laws should a penetration tester or student learning hacking techniques be aware of?: all of the above 100. To retrieve e-mail from a mail server, you most likely access port 119.: False 101. In the TCP/IP stack, the Transport layer includes network services and client software.: False 102. An octal digit can be represented with only three bits because the largest digit in octal is seven.: True 103. When a computer hacker uses multiple compromised computers to carry out a DDOS attack, the compromised computers are usually referred to as which of the following?: zombies 104. What type of malicious computer programs present themselves as useful computer programs or applications?: Trojan programs 7 / 12 I Final Study online at 105. Which type of attack cripples the network and prevents legitimate users from accessing network resources?: denial-of-service 106. Which tool can be used to gather competitive intelligence from Web sites?: Metis 107. What is the passive process of finding information on a company's network called?: footprinting 108. What utility can be used to intercept detailed information from a company's Web site?: Zed Attack Proxy 109. Which utility is used to gather IP and domain information?: Whois 110. In a normal TCP session, the sender sends a packet to another computer with which of the following flags set?: SYN flag 111. What open-source network utility allows you to use plug-ins to run test programs (scripts) that can be selected from the client interface?: OpenVAS 112. Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?: script 113. When writing a script which statement allows you to avoid creating an endless loop in your script?: while 114. Which on of the following is an older network management service that is useful for network administrators that want to view system statistics, version numbers, and other detailed host information remotely?: SNMP 115. What process allows a security professional to extract valuable information, such as information about users and recent login times from a network?: enumeration 116. Which of the following is a useful enumeration tool that enables you to find out who is logged into a *nix system with one simple command?: Finger utility 117. NBTscan is a utility that can be used for enumerating Windows OSs.: True 118. In the Perl programming language, comment lines begin with the which of the following character(s)?: # 119. Which of the following is a backdoor initiated from inside the target's network that makes it possible to take control of the target even when it's behind a firewall?: reverse shell I Final Study online at 120. You must always add "//" at the end of comment text when using C language.: False 121. Windows Software Update Services (WSUS) is designed to manage patching and updating system software from the network.: True 122. What critical component of any OS, that can be can be vulnerable to attacks, is used to store and manage information?: file system 123. To determine whether a system could be vulnerable to an RPC-related issue, which of the following tools can be used?: MBSA 124. Which of the following is considered to be the most critical SQL vulnerability?: null SA password 125. Rootkits that pose the biggest threat to any OS are those that infect what part of the targeted device?: firmware 126. What type of viruses and code has been created by security researchers and attackers that could infect phones running Google's Android, Windows Mobile, and the Apple iPhone OS?: Java-based 127. Which type of vulnerabilities can result from a server accepting untrusted, unvalidated input?: injection 128. Which of the following is the interface that determines how a Web server passes data to a Web browser?: CGI 129. Which of the following programming languages was originally used primarily on UNIX systems, but is used more widely now on many platforms, such as Macintosh and Windows?: PHP 130. What is the current file system that Windows utilizes that has strong security features?: NTFS 131. What professional level security certification did the "International Information Systems Security Certification Consortium" (ISC2) develop?: Certified Information Systems Security Professional (CISSP) 132. Port scanning is a noninvasive, nondestructive, and legal testing procedure that is protected by federal law.: False 133. What specific term does the U.S. Department of Justice use to label all illegal access to computer or network systems?: Hacking 134. What TCP flag is responsible for delivering data directly and immediately to an application?: PSH flag Final Study online at 135. What type of network attack relies on guessing a TCP header's initial sequence number, or ISN?: Session hijacking 136. What port is typically reserved and utilized by the Secure Hypertext Transfer Protocol to create a secure connection to a Web server?: 443 137. What type of hardware devices and computer programs can be used to obtain passwords by capturing key strokes on a targeted computer system?: Keyloggers 138. Trojan Programs can install a specific type of program to allow an attacker access to the attacked computer later. What means of access is the attacker utilizing?: backdoor 139. Which type of security is specifically concerned with computers or devices that are part of a network infrastructure?: Network security 140. What type of malicious program cannot stand on its own and can replicate itself through an executable program attached to an e-mail?: virus 141. What HTTP method is the same as the GET method, but retrieves only the header information of an HTML document, not the document body?: HEAD 142. What type of port scan has the FIN, PSH, and URG flags set?: XMAS scan 143. What advanced port-scanning tool can allow a security tester to bypass filtering devices by injecting crafted or otherwise modified IP-packets into a network?: Hping 144. What security feature was extended to the OS to alert the user when an application is launched on a Windows 8.1 computer?: SmartScreen 145. What boot loader will allow your computer or laptop to start in both Windows and Linux?: GRUB 146. A well documented Window's OS vulnerability was null sessions. What Windows operating system was the first to disable null sessions by default?: Windows Server 2003 147. Windows Server 2012 introduced what protection feature to prevent pass-the-hash attacks?: Authentication Silos 148. Bugs are worse than syntax errors because a program can run successfully with a bug, but the output might be incorrect or inconsistent.: True 149. Which of the following logical operators in the C programming language is evaluated as true if both sides of the operator are true?: && 10 / 12 I Final Study online at 150. Red Hat and Fedora Linux use what command to update and manage their RPM packages?: yum 151. Which of the following protocols does NetBios use to access a network resource?: NetBEUI 152. Rootkits containing Trojan binary programs that are ready to install are more dangerous than typical Trojan programs.: True 153. Which of the following if often found within an embedded OS that can cause a potential vulnerability to an attack?: Web server 154. OLE DB relies on connection strings that enable the application to access the data stored on an external device.: True 155. To check whether a CGI program works, you can test the URL in your Web browser.Which of the following directories should you save the program to on your Web server before you check the URL in your Web browser?: cgi-bin 156. What organization disseminates research documents on computer and network security worldwide at no cost?: SANS 157. A hex number is written with two characters, each representing a byte.: False 158. Malware programs cannot be detected by antivirus programs.: False 159. When a programmer exploits written code that doesn't check for a defined amount of memory space they are executing which of the following attacks?: buffer overflow 160. The acronym IDS stands for which of the following?: Intrusion Detection System 161. What type of general commands allow a security tester to pull information from a Web server using a web browser?: HTTP 162. When an attacker chooses to combine social engineering with exploiting vulnerabilities carried out by e-mail, what type of attack is being performed?: spear phishing 163. Which HTTP method starts a remote Application-layer loopback of the request message?: TRACE 164. In a NULL scan, all packet flags are turned on.: False 165. NTFS was implemented to replace FAT16 and FAT32 because of the difficulty in incorporating security in these file systems.: True I Final Study online at 166. SNMPWalk is a tool useful in enumerating hosts running SNMP with what type of configuration?: default 167. Which of the following is a mini-program within a main program that carries out a task?: function 168. In the C programming language, which variable type holds the value of a single letter?: Char 169. Which of the following mathematical operators in the C programming language increments the unary value by 1?: ++ 170. Microsoft Baseline Security Analyzer has its origins in which of the following command line scanners?: HFNetChk 171. Ubuntu and Debian Linux use what command to update and manage their RPM packages?: apt-get 172. Which of the following interfaces is a standard database access method, developed by SQL Access Group, that allows an application to access data stored in a database management system (DBMS)?: ODBC 173. Adobe System's ColdFusion uses its proprietary tags, which are written in which of the following languages?: CFML