Crowdly

Update

the banner or version number

Use

a workaround fix

Install

a patch

During

a penetration test of her organization, Kathleen’s IPS detects a port scan that

has the URG, FIN, and PSH flags set and produces an alarm. What type of scan is

the penetration tester attempting?

Xmas scan

TCP flag scan

SYN scan

ACK scan

Nmap

is an example of what type of tool?

Web

application fuzzer

Port

scanner

Network

design and layout

Vulnerability

scanner

Which

of the following vulnerabilities is unlikely to be found by a web vulnerability

scanner?

Buffer

overflow

Path

disclosure

Local

file inclusion

Race

condition

What services are likely running on those ports?

During

a port scan using nmap, Joseph discovers that a system shows two ports open

that cause him immediate worry:

21/open

23/open

POP3

and SMTP

SMTP

and Telnet

SSH

and FTP

FTP

and Telnet

part of a penetration test, Alex needs to determine if there are web servers

that could suffer from the 2014 Heartbleed bug. What type of tool could he use,

and what should he check to verify that the tool can identify the problem?

port scanner, to see whether the scanner properly identifies SSL connections

vulnerability scanner, to see whether the scanner has a signature or test for

the Heartbleed CVE number

vulnerability scanner, to see whether the vulnerability scanner detects

problems with the Apache web server

port scanner, to see whether the port scanner supports TLS connections

What

is the first step that should occur before a penetration test is performed?

Planning

Data

gathering

Port

scanning

Getting

permission

Jim has

been contracted to conduct a gray box penetration test, and his clients have

provided him with the following information about their networks so that he can

scan them.

Data

center: 10.10.10.0/24 Sales: 10.10.11.0/24 Billing: 10.10.12.0/24 Wireless:

192.168.0.0/16

What problem will Jim encounter if he is contracted

to conduct a scan from offsite?

The

IP ranges are too large to scan efficiently

The

IP ranges overlap and will cause scanning issues

The

IP addresses provided are RFC 1918 addresses

The

IP addresses provided cannot be scanned

Which utility or process below is commonly the first

step in gathering information about the target?

Open searching

Tracert

Whois

Nslookup

Which below is a true statement about Whois?

It’s used to find open ports and available services

It’s used to get information about the target’s domain

registration

It’s used to manipulate the target’s network

There is no such program called Whois