QUESTION: 122

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He performs Web vulnerability scanning on the We-are-secure server.
The output of the scanning test is as follows:

C:\whisker.pl -h target_IP_address
-- whisker / v1.4.0 / rain forest puppy / www.wiretrip.net -- = - = - = - = - =
= Host: target_IP_address
= Server: Apache/1.3.12 (Win32) ApacheJServ/1.1
mod_ssl/2.6.4 OpenSSL/0.9.5a mod_perl/1.22
+ 200 OK: HEAD /cgi-bin/printenv

John recognizes /cgi-bin/printenv vulnerability ('Printenv' vulnerability) in the We_are_secure server. Which of the following statements about 'Printenv' vulnerability are true?
Each correct answer represents a complete solution. Choose all that apply.

This vulnerability helps in a cross site scripting attack.
'Printenv' vulnerability maintains a log file of user activities on the Website, which may be useful for the attacker.
With the help of 'printenv' vulnerability, an attacker can input specially crafted links and/or other malicious scripts.
The countermeasure to 'printenv' vulnerability is to remove the CGI script.

Answer(s): A,C,D

Reveal Solution Next Question

QUESTION: 123

Mark has been assigned a project to configure a wireless network for a company. The network should contain a Windows 2003 server and 30 Windows XP client computers. Mark has a single dedicated Internet connection that has to be shared among all the client computers and the server. The configuration needs to be done in a manner that the server should act as a proxy server for the client computers. Which of the following programs can Mark use to fulfill this requirement?

Microsoft Internet Security & Acceleration Server (ISA)
Wingate
SOCKS
Sniffer

Answer(s): B

Reveal Solution Next Question

QUESTION: 124

Which of the following are the types of DOS commands?
Each correct answer represents a complete solution. Choose all that apply.

Direct commands
Internal commands
Active commands
External commands

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 125

Adam, a novice Web user is getting large amount of unsolicited commercial emails on his email address. He suspects that the emails he is receiving are the Spam. Which of the following steps will he take to stop the Spam?
Each correct answer represents a complete solution. Choose all that apply.

Forward a copy of the spam to the ISP to make the ISP conscious of the spam.
Send an email to the domain administrator responsible for the initiating IP address.
Close existing email account and open new email account.
Report the incident to the FTC (The U.S. Federal Trade Commission) by sending a copy of the spam message.

Answer(s): A,D

Reveal Solution Next Question

Free ECSS Exam Braindumps (page: 29)

QUESTION: 122

QUESTION: 123

QUESTION: 124

QUESTION: 125