QUESTION: 37

While performing a ping sweep of a subnet you receive an ICMP reply of Code 3/Type 13 for all the pings sent out. What is the most likely cause behind this response?

The firewall is dropping the packets.
An in-line IDS is dropping the packets.
A router is blocking ICMP.
The host does not respond to ICMP packets.

Answer(s): C

Explanation:

Type 3 message = Destination Unreachable [RFC792], Code 13 (cause) = Communication Administratively Prohibited [RFC1812]

Reveal Solution Next Question

The following excerpt is taken from a honeyput log. The log captures activities across three days. There are several intrusion attempts; however, a few are successful. Study the log given below and answer the following questions:
(Note: The objective of this question is to test whether the student has learnt about
passive OS fingerprinting (which should tell them the OS from log captures): can they tell a SQL injection attack signature; can they infer if a user ID has been created by an attacker and whether they can read plain source – destination entries from log entries.)

What can you infer from the above log?

The system is a windows system which is being scanned unsuccessfully.
The system is a web application server compromised through SQL injection.
The system has been compromised and backdoored by the attacker.
The actual IP of the successful attacker is 24.9.255.53.

Answer(s): A

Reveal Solution Next Question

QUESTION: 39

Bob has been hired to perform a penetration test on ABC.com. He begins by looking at IP address ranges owned by the company and details of domain name registration. He then goes to News Groups and financial web sites to see if they are leaking any sensitive information of have any technical details online.
Within the context of penetration testing methodology, what phase is Bob involved with?

Passive information gathering
Active information gathering
Attack phase
Vulnerability Mapping

Answer(s): A

Explanation:

He is gathering information and as long as he doesn’t make contact with any of the targets systems, he is considered gathering this information in a passive mode.

Reveal Solution Next Question

QUESTION: 40

Which of the following would be the best reason for sending a single SMTP message to an address that does not exist within the target company?

To create a denial of service attack.
To verify information about the mail administrator and his address.
To gather information about internal hosts used in email treatment.
To gather information about procedures that are in place to deal with such messages.

Answer(s): C

Explanation:

The replay from the email server that states that there is no such recipient will also give you some information about the name of the email server, versions used and so on.

Reveal Solution Next Question

Free 312-50 Exam Braindumps (page: 10)

QUESTION: 37

Explanation:

QUESTION: 38

QUESTION: 39

Explanation:

QUESTION: 40

Explanation: