How would you prevent session hijacking attacks?
Answer(s): D
Protection of a session needs to focus on the unique session identifier because it is the only thing that distinguishes users. If the session ID is compromised, attackers can impersonate other users on the system. The first thing is to ensure that the sequence of identification numbers issued by the session management system is unpredictable; otherwise, it's trivial to hijack another user's session. Having a large number of possible session IDs (meaning that they should be very long) means that there are a lot more permutations for an attacker to try.
What does the following command achieve?Telnet <IP Address> <Port 80>HEAD /HTTP/1.0<Return><Return>
Answer(s): C
This command is used for banner grabbing. Banner grabbing helps identify the service and version of web server running.
Bryan notices the error on the web page and asks Liza to enter liza' or '1'='1 in the email field. They are greeted with a message "Your login information has been mailed to johndoe@gmail.com". What do you think has occurred?
Answer(s): B
The web application sends a query to an SQL database and by giving it the criteria 1=1, which always will be true, it will return the first value it finds.
What are the three phases involved in security testing?
Preparation phase - A formal contract is executed containing non-disclosure of the client's data and legal protection for the tester. At a minimum, it also lists the IP addresses to be tested and time to test.Conduct phase - In this phase the penetration test is executed, with the tester looking for potential vulnerabilities.Conclusion phase - The results of the evaluation are communicated to the pre-defined organizational contact, and corrective action is advised.
You suspect that your Windows machine has been compromised with a Trojan virus. When you run anti-virus software it does not pick of the Trojan. Next you run netstat command to look for open ports and you notice a strange port 6666 open.What is the next step you would do?
Fport reports all open TCP/IP and UDP ports and maps them to the owning application. This is the same information you would see using the 'netstat -an' command, but it also maps those ports to running processes with the PID, process name and path. Fport can be used to quickly identify unknown open ports and their associated applications.
Post your Comments and Discuss EC-Council EC0-350 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the EC0-350 content, but please register or login to continue.