QUESTION: 2

User which Federal Statutes does FBI investigate for computer crimes involving e-mail scams and mail fraud?

18 U.S.C 1029 Possession of Access Devices
18 U.S.C 1030 Fraud and related activity in connection with computers
18 U.S.C 1343 Fraud by wire, radio or television
18 U.S.C 1361 Injury to Government Property
18 U.S.C 1362 Government communication systems
18 U.S.C 1831 Economic Espionage Act
18 U.S.C 1832 Trade Secrets Act

Answer(s): B

Explanation:

http://www.law.cornell.edu/uscode/html/uscode18/usc_sec_18_00001030----000-.html

John is using tokens for the purpose of strong authentication. He is not confident that his security is considerably strong.
In the context of Session hijacking why would you consider this as a false sense of security?

The token based security cannot be easily defeated.
The connection can be taken over after authentication.
A token is not considered strong authentication.
Token security is not widely used in the industry.

Answer(s): B

Explanation:

A token will give you a more secure authentication, but the tokens will not help against attacks that are directed against you after you have been authenticated.

Reveal Solution Next Question

QUESTION: 2

You have successfully run a buffer overflow attack against a default IIS installation running on a Windows 2000 Server. The server allows you to spawn a shell. In order to perform the actions you intend to do, you need elevated permission. You need to know what your current privileges are within the shell. Which of the following options would be your current privileges?

Administrator
IUSR_COMPUTERNAME
LOCAL_SYSTEM
Whatever account IIS was installed with

Answer(s): C

Explanation:

If you manage to get the system to start a shell for you, that shell will be running as LOCAL_SYSTEM.

Reveal Solution Next Question

QUESTION: 2

Why is Social Engineering considered attractive by hackers and also adopted by experts in the field?

It is done by well known hackers and in movies as well.
It does not require a computer in order to commit a crime.
It is easy and extremely effective to gain information.
It is not considered illegal.

Answer(s): C

Explanation:

Social engineering is a collection of techniques used to manipulate people into performing actions or divulging confidential information. While similar to a confidence trick or simple fraud, the term typically applies to trickery for information gathering or computer system access and in most (but not all) cases the attacker never comes face-to-face with the victim. The term has been popularized in recent years by well known (reformed) computer criminal and security consultant Kevin Mitnick who points out that it's much easier to trick someone into giving you his or her password for a system than to spend the effort to hack in. He claims it to be the single most effective method in his arsenal.

Reveal Solution Next Question

Free EC0-350 Exam Braindumps (page: 10)

QUESTION: 2

Explanation:

QUESTION: 2

Explanation:

QUESTION: 2

Explanation:

QUESTION: 2

Explanation: