QUESTION: 61

A Windows computer that has not been hardened properly might allow NULL connection from a remote host. Which of the following commands would be used by a remote attacker to attempt connecting using NULL session?

net use \\servername\ipc$NULL/u
net use \\servername\ipc$u
net share \\servername\ipc$/u
net use \\servername\ipc$/uNULL

Answer(s): B

Reveal Solution Next Question

QUESTION: 62

What sniffer program is capable of reconstructing associated TCP packets into a sessions showing application layer data from the client to the server and vice-versa? Choose the best 2

Packetyzer
Etherape
Ethereal
ARPwatch

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 63

Which of the following commands would capture all packets going to and from IP address 192.168.1.2 using tcpdump?

tcpdump host 192.168.1.2
tcpdump dest 192.168.1.2
tcpdump any 192.168.1.2/32
tcpdump all 192.168.1.2/24

Answer(s): A

Reveal Solution Next Question

QUESTION: 64

Why is passive sniffing much harder to detect, if not impossible, compared to active sniffing? Choose the best

Passive sniffing injects fewer packets into the switch
Passive sniffing can be done only via software and not hardware
A device that only receives packets and never transmits packets is truly undetectable.
It is difficult to obtain software that passively sniffs

Answer(s): C

Reveal Solution Next Question

Free ML0-320 Exam Braindumps (page: 17)

QUESTION: 61

QUESTION: 62

QUESTION: 63

QUESTION: 64

ML0-320 Exam Discussions & Posts