QUESTION: 8

Bryan notices the error on the web page and asks Liza to enter liza' or '1'='1 in the email field. They are greeted with a message "Your login information has been mailed to johndoe@gmail.com". What do you think has occurred?

The web application picked up a record at random
The web application returned the first record it found
The server error has caused the application to malfunction
The web application emailed the administrator about the error

Answer(s): B

Explanation:

The web application sends a query to an SQL database and by giving it the criteria 1=1, which always will be true, it will return the first value it finds.

Reveal Solution Next Question

QUESTION: 8

What are the three phases involved in security testing?

Reconnaissance, Conduct, Report
Reconnaissance, Scanning, Conclusion
Preparation, Conduct, Conclusion
Preparation, Conduct, Billing

Answer(s): C

Explanation:

Preparation phase - A formal contract is executed containing non-disclosure of the client's data and legal protection for the tester. At a minimum, it also lists the IP addresses to be tested and time to test.
Conduct phase - In this phase the penetration test is executed, with the tester looking for potential vulnerabilities.
Conclusion phase - The results of the evaluation are communicated to the pre-defined organizational contact, and corrective action is advised.

Reveal Solution Next Question

QUESTION: 8

You suspect that your Windows machine has been compromised with a Trojan virus. When you run anti-virus software it does not pick of the Trojan. Next you run netstat command to look for open ports and you notice a strange port 6666 open.
What is the next step you would do?

Re-install the operating system.
Re-run anti-virus software.
Install and run Trojan removal software.
Run utility fport and look for the application executable that listens on port 6666.

Answer(s): D

Explanation:

Fport reports all open TCP/IP and UDP ports and maps them to the owning application. This is the same information you would see using the 'netstat -an' command, but it also maps those ports to running processes with the PID, process name and path. Fport can be used to quickly identify unknown open ports and their associated applications.

Reveal Solution Next Question

QUESTION: 8

What is the term 8 to describe an attack that falsifies a broadcast ICMP echo request and includes a primary and secondary victim?

Fraggle Attack
Man in the Middle Attack
Trojan Horse Attack
Smurf Attack
Back Orifice Attack

Answer(s): D

Explanation:

Trojan and Back orifice are Trojan horse attacks. Man in the middle spoofs the Ip and redirects the victems packets to the cracker The infamous Smurf attack. preys on ICMP's capability to send traffic to the broadcast address. Many hosts can listen and respond to a single ICMP echo request sent to a broadcast address.
Network Intrusion Detection third Edition by Stephen Northcutt and Judy Novak pg 70 The "smurf" attack's cousin is called "fraggle", which uses UDP echo packets in the same fashion as the ICMP echo packets; it was a simple re-write of "smurf".

Reveal Solution Next Question

Free EC0-350 Exam Braindumps (page: 45)

QUESTION: 8

Explanation:

QUESTION: 8

Explanation:

QUESTION: 8

Explanation:

QUESTION: 8

Explanation:

EC0-350 Discussions & Posts