Question 1

Why is it important for a security tester to be able to use Nmap?

Accepted Answer

Nmap has become one of the most popular port scanners and adds new features constantly,such as OS detection and fast multiple-probe ping scanning.Nmap also has a GUI front end called Zenmap that makes working with complex options easier.Nmap has been enhanced over the years because,like many other security tools,it's open source; if bugs are found,users can offer suggestions for correcting them.

Question 2

How does a SYN scan work?

Accepted Answer

In a normal TCP session,a packet is sent to another computer with the SYN flag set.The receiving computer sends back a packet with the SYN/ACK flag set,indicating an acknowledgment.The sending computer then sends a packet with the ACK flag set.If the port to which the SYN packet is sent is closed,the computer responds to the SYN packet with an RST/ACK packet.If a SYN/ACK packet is received by an attacker's computer,it quickly responds with an RST/ACK packet,closing the session.This is done so that a full TCP connection is never made and logged as a transaction.In this sense,it is "stealthy." After all,you don't want a transaction to be logged showing the IP address that connected to the attacked computer.

Question 3

What open source port-scanning tool is considered to be the standard port-scanning tool for security professionals?

Accepted Answer

A)  NULL 
B)  NMap 
C)  NScanner 
D)  PortGhost 
A)  NULL 
B)  NMap 
C)  NScanner 
D)  PortGhost B

Question 4

Which statement is where the script performs its main task?

Accepted Answer

A)  do 
B)  while 
C)  count 
D)  bin 
A)  do 
B)  while 
C)  count 
D)  bin

Question 5

You can search for vulnerabilities in a host computer by using a port-scanning tool.

Accepted Answer

A) True 
 B)False

Question 6

Which ports should security professionals scan when doing a test?

Accepted Answer

As a security tester,you need to know wh

Question 7

Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?

Accepted Answer

A)  script 
B)  port-scanner 
C)  application 
D)  configuration file 
A)  script 
B)  port-scanner 
C)  application 
D)  configuration file

Question 8

Match each item with a statement below.
-A popular port scanners that has the ability to use a GUI front end

Accepted Answer

A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep 
A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep

Question 9

What are the problems with depending on ping sweeps to find out which hosts are "live"?

Accepted Answer

To find out which hosts are "live," ping

Question 10

Match each item with a statement below.
-A port state which does not allow entry or access to a service

Accepted Answer

A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep 
A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep

Question 11

What network security tool,usually included with Kali Linux,allows a user to ping multiple IP addresses?

Accepted Answer

A)  Nmap 
B)  Fping 
C)  Tcpdump 
D)  Nessus 
A)  Nmap 
B)  Fping 
C)  Tcpdump 
D)  Nessus

Question 12

Match each item with a statement below.
-The original utility from which OpenVas was developed

Accepted Answer

A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep 
A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep

Question 13

Attackers typically use ACK scans to get past a firewall or other filtering devices.

Accepted Answer

A) True 
 B)False

Question 14

When security professionals create a packet,they may choose to specifically set which of the following fields to help initiate a response from a target computer?

Accepted Answer

A)  box 
B)  flag 
C)  open 
D)  id 
A)  box 
B)  flag 
C)  open 
D)  id

Question 15

In a normal TCP session,the sender sends a packet to another computer with which of the following flags set?

Accepted Answer

A)  SYN/ACK flag 
B)  SYN flag 
C)  No flag 
D)  Reset flag 
A)  SYN/ACK flag 
B)  SYN flag 
C)  No flag 
D)  Reset flag

Question 16

Match each item with a statement below.
-A port state that allows access to applications and can be vulnerable

Accepted Answer

A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep 
A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep

Question 17

Match each item with a statement below.
-Allows you the ability to scan thousands or even tens of thousands of IP addresses quickly

Accepted Answer

A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep 
A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep

Question 18

Match each item with a statement below.
-Allows you to ping multiple IP addresses simultaneously and is usually included in Kali Linux

Accepted Answer

A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep 
A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep

Question 19

Why is it important for you as a security tester to understand and be able to create scripts?

Accepted Answer

Some tools might need to be modified to

Question 20

Match each item with a statement below.
-Tool for performing ping sweeps and used to bypass filtering devices by injecting crafted or otherwise modified IP-packets

Accepted Answer

A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep 
A) Nmap 
B) Fping 
C) Hping 
D) Nessus 
E) closed port
F)OpenVAS
G)filtered port
H)open port
I)port scanning
J)ping sweep

Why is it important for a security tester to be able to use Nmap?

How does a SYN scan work?

What open source port-scanning tool is considered to be the standard port-scanning tool for security professionals?

Which statement is where the script performs its main task?

You can search for vulnerabilities in a host computer by using a port-scanning tool.

Which ports should security professionals scan when doing a test?

Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?

Match each item with a statement below. -A popular port scanners that has the ability to use a GUI front end

What are the problems with depending on ping sweeps to find out which hosts are "live"?

Match each item with a statement below. -A port state which does not allow entry or access to a service

What network security tool,usually included with Kali Linux,allows a user to ping multiple IP addresses?

Match each item with a statement below. -The original utility from which OpenVas was developed

Attackers typically use ACK scans to get past a firewall or other filtering devices.

When security professionals create a packet,they may choose to specifically set which of the following fields to help initiate a response from a target computer?

In a normal TCP session,the sender sends a packet to another computer with which of the following flags set?

Match each item with a statement below. -A port state that allows access to applications and can be vulnerable

Match each item with a statement below. -Allows you the ability to scan thousands or even tens of thousands of IP addresses quickly

Match each item with a statement below. -Allows you to ping multiple IP addresses simultaneously and is usually included in Kali Linux

Why is it important for you as a security tester to understand and be able to create scripts?

Match each item with a statement below. -Tool for performing ping sweeps and used to bypass filtering devices by injecting crafted or otherwise modified IP-packets

Ethical Hacking Overview

Tcpip Concepts Review

Network and Computer Attacks

Footprinting and Social Engineering

Enumeration

Programming for Security Professionals

Desktop and Server Os Vulnerabilities

Embedded Operating Systems: the Hidden Threat

Hacking Web Servers

Hacking Wireless Networks

Cryptography

Network Protection Systems

Filters

Exam 5: Port Scanning

Why is it important for a security tester to be able to use Nmap?

How does a SYN scan work?

What open source port-scanning tool is considered to be the standard port-scanning tool for security professionals?

Which statement is where the script performs its main task?

You can search for vulnerabilities in a host computer by using a port-scanning tool.

Which ports should security professionals scan when doing a test?

Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?

Match each item with a statement below. -A popular port scanners that has the ability to use a GUI front end

What are the problems with depending on ping sweeps to find out which hosts are "live"?

Match each item with a statement below. -A port state which does not allow entry or access to a service

What network security tool,usually included with Kali Linux,allows a user to ping multiple IP addresses?

Match each item with a statement below. -The original utility from which OpenVas was developed

Attackers typically use ACK scans to get past a firewall or other filtering devices.

When security professionals create a packet,they may choose to specifically set which of the following fields to help initiate a response from a target computer?

In a normal TCP session,the sender sends a packet to another computer with which of the following flags set?

Match each item with a statement below. -A port state that allows access to applications and can be vulnerable

Match each item with a statement below. -Allows you the ability to scan thousands or even tens of thousands of IP addresses quickly

Match each item with a statement below. -Allows you to ping multiple IP addresses simultaneously and is usually included in Kali Linux

Why is it important for you as a security tester to understand and be able to create scripts?

Match each item with a statement below. -Tool for performing ping sweeps and used to bypass filtering devices by injecting crafted or otherwise modified IP-packets

Ethical Hacking Overview

Tcpip Concepts Review

Network and Computer Attacks

Footprinting and Social Engineering

Enumeration

Programming for Security Professionals

Desktop and Server Os Vulnerabilities

Embedded Operating Systems: the Hidden Threat

Hacking Web Servers

Hacking Wireless Networks

Cryptography

Network Protection Systems

Filters