Exam 4: Footprinting and Social Engineering

What utility can be used to intercept detailed information from a company's Web site?

Namedroppers is a tool that can be used to capture Web server information and vulnerabilities in a Web site's pages that could allow exploits such as SQL injection and buffer overflows.

Which HTTP method requests that the entity is stored under the Request-URI?

What is the HTTP method that retrieves data by URI?

Explain the process of "footprinting," and why it is important to a security professional?

What tactic is being used when an attacker trailing closely behind an employee enters a restricted area without any security credentials by utilizing their proximity to another employee with security clearance?

What type of information is usually gathered by social engineering?

Which process utilizes the knowledge of human nature to get information from people to use for executing an attack on a computer network?

Match each item with a statement below. -Server didn't receive a timely response

Which HTTP method is used with a proxy that can dynamically switch to a tunnel connection,such as Secure Socket Layer (SSL)?

What is the passive process of finding information on a company's network called?

What tool can be used to read and write data to ports over a network?

What is "competitive intelligence"?

Which HTTP error informs you the server understands the request but refuses to comply?

How can DNS be used for footprinting?

What HTTP method is the same as the GET method,but retrieves only the header information of an HTML document,not the document body?

The HTTP CONNECT method starts a remote application-layer loopback of the request message.

Match each item with a statement below. -Request not made by client in allotted time

Which technique can be used to read PINs entered at ATMs or at other areas when a pin code is entered?

How can computer criminals use the Whois utility for their purposes?