QUESTION: 41

Nmap is the leading port scanner for security testing and penetration testing.
As a tester it is a must have within your toolbox and you MUST be familiar with its basic syntax.
Which of the following command lines would represent a Ping Sweep being performed using Nmap.

nmap sP 10.1.1.0/24
nmap sT 10.1.1.0/24
nmap sS 10.1.1.0/24
nmap sU 10.1.1.0/24

Answer(s): A

Reveal Solution Next Question

QUESTION: 42

How does a system administrator prevent Idp.exe and user2sid.exe tools from retrieving domain usernames, SIDs, and other information from a Windows 2000 Domain Controller if no username and password are supplied? Choose two.

Add the Everyone group to the Pre-Windows 2000 Compatible Access group
Remove the Everyone group from the Pre-Windows 2000 Compatible Access group
set RestrictAnonymous registry key to two
Set RestrictAnonymous registry key to zero

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 43

Session Hijacking is possible due to which weakness within the TCPIP stack implementation?

Initial Sequence Number prediction
Flags are not validated properly, it is possible to set all flags to 1 or 0.
Validation of the size of a packet after reassembly is not implemented properly.
Initial Sequence Number are too low

Answer(s): A

Reveal Solution Next Question

QUESTION: 44

Why are SYN port scans not as stealthy as what they originally were several years ago? Choose two.

Many firewall rulesets detect and block SYN scans
IDS systems look for SYN flag packets due to the proliferation of SYN flood-based denial of service attacks
RFC 3502 has redefined the TCP three-way handshake thus changing how SYN flags are used
The Internet-backbone routers all block SYN flag packets according to new RFC 3705

Answer(s): A,B

Reveal Solution Next Question

Free ML0-320 Exam Braindumps (page: 12)

QUESTION: 41

QUESTION: 42

QUESTION: 43

QUESTION: 44

ML0-320 Exam Discussions & Posts