QUESTION: 2

Which one of the following instigates a SYN flood attack?

Generating excessive broadcast packets.
Creating a high number of half-open connections.
Inserting repetitive Internet Relay Chat (IRC) messages.
A large number of Internet Control Message Protocol (ICMP) traces.

Answer(s): B

Explanation:

A SYN attack occurs when an attacker exploits the use of the buffer space during a Transmission Control Protocol (TCP) session initialization handshake. The attacker floods the target system's small "in-process" queue with connection requests, but it does not respond when a target system replies to those requests. This causes the target system to time out while waiting for the proper response, which makes the system crash or become unusable.

Reveal Solution Next Question

QUESTION: 2

A remote user tries to login to a secure network using Telnet, but accidently types in an invalid user name or password. Which responses would NOT be preferred by an experienced Security Manager? (multiple answer)

Invalid Username
Invalid Password
Authentication Failure
Login Attempt Failed
Access Denied

Answer(s): A,B

Explanation:

As little information as possible should be given about a failed login attempt. Invalid username or password is not desirable.

Reveal Solution Next Question

QUESTION: 3

The programmers on your team are analyzing the free, open source software being used to run FTP services on a server. They notice that there is an excessive number of fgets() and gets() on the source code. These C++ functions do not check bounds.
What kind of attack is this program susceptible to?

Buffer of Overflow
Denial of Service
Shatter Attack
Password Attack

Answer(s): A

Explanation:

C users must avoid using dangerous functions that do not check bounds unless they've ensured that the bounds will never get exceeded. A buffer overflow occurs when you write a set of values (usually a string of characters) into a fixed length buffer and write at least one value outside that buffer's boundaries (usually past its end). A buffer overflow can occur when reading input from the user into a buffer, but it can also occur during other kinds of processing in a program.

Reveal Solution Next Question

QUESTION: 3

In which of the following should be performed first in any penetration test?

System identification
Intrusion Detection System testing
Passive information gathering
Firewall testing

Answer(s): C

Reveal Solution Next Question

Free EC0-350 Exam Braindumps (page: 12)

QUESTION: 2

Explanation:

QUESTION: 2

Explanation:

QUESTION: 3

Explanation:

QUESTION: 3