Usernames, passwords, e-mail addresses, and the location of CGI scripts may be obtained from which of the following information sources?
Answer(s): A
Whois query would not enable us to find the CGI scripts whereas in the actual website, some of them will have scripts written to make the website more user friendly. The EDGAR database would in fact give us a lot of the information requested but not the location of CGI scripts, as would a simple search engine on the Internet if you have the time needed.
On a default installation of Microsoft IIS web server, under which privilege does the web server software execute?
Answer(s): C
If not changed during the installation, IIS will execute as Local System with way to high privileges.
You have just received an assignment for an assessment at a company site. Company's management is concerned about external threat and wants to take appropriate steps to insure security is in place. Anyway the management is also worried about possible threats coming from inside the site, specifically from employees belonging to different Departments. What kind of assessment will you be performing ?
Internal Testing is also referred to as Gray-box testing.
Which of the following statements would not be a proper definition for a Trojan Horse?
A Trojan is all about running unauthorized code on the users computer without the user knowing of it.
A denial of Service (DoS) attack works on the following principle:
Answer(s): D
Denial-of-service (often abbreviated as DoS) is a class of attacks in which an attacker attempts to prevent legitimate users from accessing an Internet service, such as a web site. This can be done by exercising a software bug that causes the software running the service to fail (such as the “Ping of Death” attack against Windows NT systems), sending enough data to consume all available network bandwidth (as in the May, 2001 attacks against Gibson Research), or sending data in such a way as to consume a particular resource needed by the service.
Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members: